dex to disconnect
[ 1749.062479] nbd: must specify an index to disconnect
[ 1749.067676] nbd: must specify an index to disconnect
[ 1749.072810] nbd: must specify an index to disconnect
[ 1749.077998] nbd: must specify an index to disconnect
[ 1749.083203] nbd: must specify an index to disconnect
[ 1749.088350] nbd: must specify an index to disconnect
[ 1749.094329] nbd: must specify an index to disconnect
[ 1749.099470] nbd: must specify an index to disconnect
[ 1749.104686] nbd: must specify an index to disconnect
[ 1749.109822] nbd: must specify an index to disconnect
[ 1749.115031] nbd: must specify an index to disconnect
[ 1749.120178] nbd: must specify an index to disconnect
[ 1749.125397] nbd: must specify an index to disconnect
[ 1749.130562] nbd: must specify an index to disconnect
[ 1749.135755] nbd: must specify an index to disconnect
[ 1749.140914] nbd: must specify an index to disconnect
[ 1749.146115] nbd: must specify an index to disconnect
[ 1749.151302] nbd: must specify an index to disconnect
[ 1749.156497] nbd: must specify an index to disconnect
[ 1749.161658] nbd: must specify an index to disconnect
[ 1749.166871] nbd: must specify an index to disconnect
[ 1749.172026] nbd: must specify an index to disconnect
[ 1749.177215] nbd: must specify an index to disconnect
[ 1749.182372] nbd: must specify an index to disconnect
[ 1749.187574] nbd: must specify an index to disconnect
[ 1749.192736] nbd: must specify an index to disconnect
[ 1749.197945] nbd: must specify an index to disconnect
[ 1749.203092] nbd: must specify an index to disconnect
[ 1749.208306] nbd: must specify an index to disconnect
[ 1749.213528] nbd: must specify an index to disconnect
[ 1749.218663] nbd: must specify an index to disconnect
[ 1749.223881] nbd: must specify an index to disconnect
02:05:12 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x40, r2, 0x100, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}]}, 0x40}}, 0x0)

02:05:12 executing program 3:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r0, 0xffffffffffffffff)

02:05:12 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
open_by_handle_at(r0, &(0x7f0000000000)=@ocfs2={0xc, 0x1, {0x10001, 0x9, 0x7}}, 0x440) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x40}}, 0x0)

02:05:12 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000700)={0xce1, 0x200, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r3, r0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f00000001c0)=0x6, 0x4)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0)

02:05:12 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xf5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8054)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r4)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x71}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r4, @ANYRES16=r1, @ANYBLOB="ef"], 0x24}}, 0x0)

02:05:12 executing program 5:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)

[ 1749.229014] nbd: must specify an index to disconnect
02:05:12 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan1\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0xd5)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400300, 0x0)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0xa0c, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x52}, 0x24000001)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0)

02:05:12 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0x3f, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0x0, 0x3, 0x7}]}, 0xffffffffffffff0a}}, 0x0)
semget$private(0x0, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13)

02:05:12 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x40, r2, 0x100, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}]}, 0x40}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x40, r2, 0x100, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}]}, 0x40}}, 0x0) (async)

02:05:12 executing program 5:
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)

02:05:12 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xf5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8054) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r4) (async)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x71}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async, rerun: 64)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r4, @ANYRES16=r1, @ANYBLOB="ef"], 0x24}}, 0x0) (rerun: 64)

02:05:12 executing program 3:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r0, 0xffffffffffffffff)

02:05:12 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="878c352edc37f8f2707db07b9ded4a13000d", @ANYRES16=0x0, @ANYBLOB="00000200000009000a00187b5b000000000000006c680008000100000000000c000200000000000000000005000000b23d7336360ee14dfff3cf9519e4259e660f2549510aa7b87eba3d2607e514bede3fe82457a6efb6cf98d629e9323e1c04ed0ba5e03396cf3f6e13e0394697861ded43d93c73376189b41cf6a04af596c6108d35886775b7035df63c81eb3b8578ab6399629a8d47f6ecc1d4f06d25c341e95c6f8eb1caf10ef2c6cfb2ea0f648b716aca3652b470921e3e9685196f3b"], 0xffffffffffffff0a}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)

02:05:12 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0x3f, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0x0, 0x3, 0x7}]}, 0xffffffffffffff0a}}, 0x0)
semget$private(0x0, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0x3f, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0x0, 0x3, 0x7}]}, 0xffffffffffffff0a}}, 0x0) (async)
semget$private(0x0, 0x0, 0x0) (async)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13) (async)

02:05:12 executing program 5:
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)

02:05:12 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x40, r2, 0x100, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}]}, 0x40}}, 0x0)

02:05:12 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xf5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8054)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r4)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x71}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r4, @ANYRES16=r1, @ANYBLOB="ef"], 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xf5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8054) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r4) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x71}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r4, @ANYRES16=r1, @ANYBLOB="ef"], 0x24}}, 0x0) (async)

02:05:12 executing program 3:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r0, 0xffffffffffffffff)

02:05:12 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={<r2=>0xffffffffffffffff, 0x7f, 0xf, 0x6})
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x500008}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x2)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0x0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000fbdbdf25010000003c00078008000100", @ANYRES32=r2, @ANYBLOB="08000100a970ba94a803115eed070b9fe25ea4d51e8ad49297f06f4ddcf734d3dd0fb9c7167e34f47f07f96e87bc20a61acf3f897a9feadd32a0ce22c0fd99488705184d4dfcc51a50992417a4e0ba913d86da3be408ef3e8090e0ae79", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20000841}, 0x24000010)
r6 = dup2(r5, r4)
mknodat(r6, &(0x7f0000000480)='./file0\x00', 0x1, 0x8)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r8, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x4)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r9, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x800)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x3e, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r9, 0x400}, 0x14}}, 0x0)

02:05:12 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0x3f, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0x0, 0x3, 0x7}]}, 0xffffffffffffff0a}}, 0x0) (async)
semget$private(0x0, 0x0, 0x0) (async)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x5, 0x6, '9P2000'}, 0x13)

02:05:12 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x332}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

02:05:12 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="21003906000100000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8800)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x8040)

02:05:12 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000040}, 0x404c044)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000f1ffff0100000009000a00187b5b5b230000000c000800000000000000000008000100000000000c0002000000000000000000"], 0xffffffffffffff0a}}, 0x0)

02:05:12 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)

02:05:12 executing program 4:
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x25}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x907d}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x24000080)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a7170000", @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:12 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000e13cd1e2ffa3862ee562b843d2ab0022b2514ddd41021b5c4806bf788d9b265226f5c7df9168c3f47b530de9c21bab6b8a3d578e1626e8a455c52660a99df4fdde310f812429570ca1f82c0aeda572562842fba49dd201a4eb21e0b2353833cb19e202335c630342492de58a56f9ce66acbea36ab14a5b5f79a94fc3b6ecd0d045145afafaf41cdc7fee9db60da7c36328df5c1bd7c83847582176a172bf255ef76ef3ddde8a", @ANYRES16=r0, @ANYBLOB="000000000000000000000200000009000a00187b5b5b230000000c000800000000000000000008000100000000000c0002000000000000000000"], 0xffffffffffffff0a}}, 0x10)

02:05:12 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf25030000001c00078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x400c840}, 0x4000)

02:05:13 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x332}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x332}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async)

[ 1749.733028] nbd: must specify an index to disconnect
02:05:13 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="21003906000100000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8800) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x8040)

02:05:13 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf25030000001c00078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00020009000000000000000c0005000a0100000000000008000100000000000c000300000800000000000088dc7a0faf310f4dd532a6797b54eeef36b63ee4a53b0ad096fae9f60e17e6fee5d8c2d313e7b28286a80446dbe895526800756e2f53cbec3f9d"], 0x5c}, 0x1, 0x0, 0x0, 0x400c840}, 0x4000)

[ 1749.754248] nbd: must specify an index to disconnect
02:05:13 executing program 4:
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x25}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x907d}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x24000080) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a7170000", @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:13 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000e13cd1e2ffa3862ee562b843d2ab0022b2514ddd41021b5c4806bf788d9b265226f5c7df9168c3f47b530de9c21bab6b8a3d578e1626e8a455c52660a99df4fdde310f812429570ca1f82c0aeda572562842fba49dd201a4eb21e0b2353833cb19e202335c630342492de58a56f9ce66acbea36ab14a5b5f79a94fc3b6ecd0d045145afafaf41cdc7fee9db60da7c36328df5c1bd7c83847582176a172bf255ef76ef3ddde8a", @ANYRES16=r0, @ANYBLOB="000000000000000000000200000009000a00187b5b5b230000000c000800000000000000000008000100000000000c0002000000000000000000"], 0xffffffffffffff0a}}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000e13cd1e2ffa3862ee562b843d2ab0022b2514ddd41021b5c4806bf788d9b265226f5c7df9168c3f47b530de9c21bab6b8a3d578e1626e8a455c52660a99df4fdde310f812429570ca1f82c0aeda572562842fba49dd201a4eb21e0b2353833cb19e202335c630342492de58a56f9ce66acbea36ab14a5b5f79a94fc3b6ecd0d045145afafaf41cdc7fee9db60da7c36328df5c1bd7c83847582176a172bf255ef76ef3ddde8a", @ANYRES16=r0, @ANYBLOB="000000000000000000000200000009000a00187b5b5b230000000c000800000000000000000008000100000000000c0002000000000000000000"], 0xffffffffffffff0a}}, 0x10) (async)

02:05:13 executing program 4:
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x25}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x907d}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x24000080) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (rerun: 64)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a7170000", @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

[ 1749.838680] nla_parse: 4 callbacks suppressed
[ 1749.838686] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1749.858224] nbd: must specify a device to reconfigure
02:05:13 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf25030000001c00078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00020009000000000000000c0005000a0100000000000008000100000000000c000300000800000000000088dc7a0faf310f4dd532a6797b54eeef36b63ee4a53b0ad096fae9f60e17e6fee5d8c2d313e7b28286a80446dbe895526800756e2f53cbec3f9d"], 0x5c}, 0x1, 0x0, 0x0, 0x400c840}, 0x4000)

02:05:13 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x4000)

02:05:13 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x332}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

02:05:13 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="21003906000100000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8800) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (rerun: 32)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x8040)

02:05:13 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000e13cd1e2ffa3862ee562b843d2ab0022b2514ddd41021b5c4806bf788d9b265226f5c7df9168c3f47b530de9c21bab6b8a3d578e1626e8a455c52660a99df4fdde310f812429570ca1f82c0aeda572562842fba49dd201a4eb21e0b2353833cb19e202335c630342492de58a56f9ce66acbea36ab14a5b5f79a94fc3b6ecd0d045145afafaf41cdc7fee9db60da7c36328df5c1bd7c83847582176a172bf255ef76ef3ddde8a", @ANYRES16=r0, @ANYBLOB="000000000000000000000200000009000a00187b5b5b230000000c000800000000000000000008000100000000000c0002000000000000000000"], 0xffffffffffffff0a}}, 0x10)

02:05:13 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0) (fail_nth: 1)

02:05:13 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0) (fail_nth: 1)

[ 1750.005170] block nbd0: not configured, cannot reconfigure
02:05:13 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'})

02:05:13 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0xffffffffffffff0a}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x24014081)

02:05:13 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

02:05:13 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0)
setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000040)=0x5, 0x4)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r2, r0)

[ 1750.119286] nbd: must specify an index to disconnect
02:05:13 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'})

02:05:13 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
io_destroy(0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

02:05:13 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0xffffffffffffff0a}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x24014081)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0xffffffffffffff0a}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x24014081) (async)

02:05:13 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r2, r3})

02:05:13 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (rerun: 32)

02:05:13 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) (async)
setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000040)=0x5, 0x4) (async)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r2, r0)

02:05:13 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) (async, rerun: 64)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'})

02:05:13 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0xffffffffffffff0a}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) (async)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x24014081)

02:05:13 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r2, r3})
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r2, r3}) (async)

[ 1750.289045] nbd: must specify an index to disconnect
02:05:13 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
io_destroy(0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async)
io_destroy(0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)

02:05:13 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

02:05:13 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0)
setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000040)=0x5, 0x4)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r2, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) (async)
setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000040)=0x5, 0x4) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r2, r0) (async)

02:05:13 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x294000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000800}, 0x4)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1f}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x200}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x800)
inotify_init1(0x800)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4)

02:05:13 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="8d2c4fb3", @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000009000a00187b5b5b230000000c000800000000000000000008000100000000000c0002000000000000000000"], 0xffffffffffffff0a}}, 0x0)

02:05:13 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r2, r3})
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r2, r3}) (async)

02:05:13 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x2004)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01"], 0x24}}, 0x0)

[ 1750.452641] nbd: must specify an index to disconnect
02:05:13 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x80, 0x3, 0x7}}, 0x14)
dup2(r1, r0)

02:05:13 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x294000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000800}, 0x4)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1f}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x200}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x800)
inotify_init1(0x800)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x294000, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000800}, 0x4) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1f}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x200}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async)
inotify_init1(0x800) (async)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4) (async)

02:05:13 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="8d2c4fb3", @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000009000a00187b5b5b230000000c000800000000000000000008000100000000000c0002000000000000000000"], 0xffffffffffffff0a}}, 0x0)

[ 1750.486208] nbd: must specify an index to disconnect
02:05:13 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) (rerun: 64)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async, rerun: 64)
io_destroy(0x0) (rerun: 64)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

02:05:13 executing program 1:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bind$llc(r2, &(0x7f0000000080)={0x1a, 0x338, 0x6, 0x81, 0x81, 0x6, @random="011f0000803d"}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)
dup2(r1, r0)

02:05:13 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x80, 0x3, 0x7}}, 0x14)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x80, 0x3, 0x7}}, 0x14) (async)
dup2(r1, r0) (async)

02:05:13 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x2004) (async)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01"], 0x24}}, 0x0)

[ 1750.563708] nbd: must specify a size in bytes for the device
02:05:13 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="8d2c4fb3", @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000009000a00187b5b5b230000000c000800000000000000000008000100000000000c0002000000000000000000"], 0xffffffffffffff0a}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="8d2c4fb3", @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000009000a00187b5b5b230000000c000800000000000000000008000100000000000c0002000000000000000000"], 0xffffffffffffff0a}}, 0x0) (async)

02:05:13 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x294000, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000800}, 0x4) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1f}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x200}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x800)
inotify_init1(0x800)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0)=0x1, 0x4)

02:05:13 executing program 1:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bind$llc(r2, &(0x7f0000000080)={0x1a, 0x338, 0x6, 0x81, 0x81, 0x6, @random="011f0000803d"}, 0x10) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) (async)
dup2(r1, r0)

02:05:13 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x80, 0x3, 0x7}}, 0x14)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x80, 0x3, 0x7}}, 0x14) (async)
dup2(r1, r0) (async)

02:05:13 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010000000000000000da0246a9ffffff7f22c3b8a305bd000000"], 0x14}}, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5b}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x845)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r7, 0x0, 0x0)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4040001)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r8, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r4)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r9, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '-@$/!'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20008800)

02:05:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x2, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffc}]}, 0x40}, 0x1, 0x0, 0x0, 0xc3db6b6a17c6fa9e}, 0x0)

02:05:14 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x2004)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01"], 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) (async)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x2004) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01"], 0x24}}, 0x0) (async)

[ 1750.712440] nbd: must specify a size in bytes for the device
02:05:14 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0x5}}, 0x20)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x6b4000, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)

[ 1750.791825] nbd: must specify an index to disconnect
02:05:14 executing program 1:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bind$llc(r2, &(0x7f0000000080)={0x1a, 0x338, 0x6, 0x81, 0x81, 0x6, @random="011f0000803d"}, 0x10) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)
dup2(r1, r0)

02:05:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x2, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffc}]}, 0x40}, 0x1, 0x0, 0x0, 0xc3db6b6a17c6fa9e}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x2, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffc}]}, 0x40}, 0x1, 0x0, 0x0, 0xc3db6b6a17c6fa9e}, 0x0) (async)

02:05:14 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="00004000000001002e2f66696c653000"])
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x101}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_PW_TYPE={0xffffffffffffff54, 0x1, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000840}, 0x4008001)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r3, r2)
io_setup(0x9, &(0x7f0000000240)=<r4=>0x0)
io_cancel(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000000280)="9da39b1c8760c91c3fd8c0a537f9c19a418d5d31decc6215506451f3aa5f0ce1e330ea508365fba42f89242eacc5a118115a97a2af61ccde3e99a4b518c7770ad790981442a13acb082db1b865a8caac81197c627be78d1567dde301", 0x5c, 0x6, 0x0, 0x2}, &(0x7f0000000340))

02:05:14 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 32)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010000000000000000da0246a9ffffff7f22c3b8a305bd000000"], 0x14}}, 0x0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5b}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x845) (async, rerun: 64)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r7, 0x0, 0x0)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4040001) (async, rerun: 64)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$NBD_CMD_RECONFIGURE(r8, 0x0, 0x0) (async)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r4)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r9, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '-@$/!'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20008800)

[ 1750.818154] nbd: must specify a size in bytes for the device
02:05:14 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x2, 0x6, "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", 0x5, 0x5, 0x0, 0x1, 0x40, 0x2, 0x7, 0x1}}}, 0x120)

02:05:14 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0x5}}, 0x20)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x6b4000, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)

02:05:14 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="db0f9d64e3a065fa1e7c437eb052b71eb05d1ce18226ff83f529ccc6ab8beb3051000000000000085858d92f46bfd06273baf39e1b3874eb66b5f387cf6c80ca7f9f9db11a3523d2901bf919a65c0ccaab564f1acb0b32247d7634d868ee989e948a9eb0c3dd9491fa4ee1c824a09918698953698ddf4d29cd1f05e06b69849b3ab2d347e2578621dcb4b94e7d86f7ca4a5ac7106d740e7dcd83175ca5bf7445c4a99862c567a6894fafa09f6055703adbe5592b8549e3b6439e8b4b91", @ANYRES64=r0, @ANYBLOB="00000000000000002e2f66696c653000334dd5f4b6a2bc3fdd793ae9e52fa640aa9bd3d553ffd939178a376e4d56da06c0ce128c95b069505be4eff5c83c83f2ef510b0718dafff4641ca9006ad6607b8876d95350d237a1b6fc27a3945b93157897690ad99e8d8e45423bcefcacce1cec41a1e1289972acf047f7ce7586b094342a8cb1add3a574d8ea221c57e4bfb423a2c1e4f4386bd934d92e1f1587c6cc2a015fa35f596d60d697a3"])
write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="bf007dcc7c46b0cae98c211caf9cc2e307934b717903e1c3873e8b7fa9ca7334a509d3c54695c356ec155aef796953d16e26589d05415c294792bd7c838c5a430b9c84797af000cc2f1e2cd2a8a2c43de988379e2e09da9191b7ef2236671bbc88abdc5b3851e0d97542a324da0bf39f14329f5cc3898e9b16a78037d549c0b65a12c42e5afa4fb5acce14cbaeee6f7b4014de5800b7013ec626bc3179ca558ccd76ec127a87426e9a8013c3ec1a9d92ff095061e39a9a1ef4a0e6cd509d99718fb6ab2f9825d5e01e813b73aa54fc87a0", 0xd1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_FD={0x8}]}, 0x44}}, 0x24014884)
dup2(r1, r0)

02:05:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x2, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffc}]}, 0x40}, 0x1, 0x0, 0x0, 0xc3db6b6a17c6fa9e}, 0x0)

02:05:14 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x2, 0x6, "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", 0x5, 0x5, 0x0, 0x1, 0x40, 0x2, 0x7, 0x1}}}, 0x120)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x2, 0x6, "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", 0x5, 0x5, 0x0, 0x1, 0x40, 0x2, 0x7, 0x1}}}, 0x120) (async)

02:05:14 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="db0f9d64e3a065fa1e7c437eb052b71eb05d1ce18226ff83f529ccc6ab8beb3051000000000000085858d92f46bfd06273baf39e1b3874eb66b5f387cf6c80ca7f9f9db11a3523d2901bf919a65c0ccaab564f1acb0b32247d7634d868ee989e948a9eb0c3dd9491fa4ee1c824a09918698953698ddf4d29cd1f05e06b69849b3ab2d347e2578621dcb4b94e7d86f7ca4a5ac7106d740e7dcd83175ca5bf7445c4a99862c567a6894fafa09f6055703adbe5592b8549e3b6439e8b4b91", @ANYRES64=r0, @ANYBLOB="00000000000000002e2f66696c653000334dd5f4b6a2bc3fdd793ae9e52fa640aa9bd3d553ffd939178a376e4d56da06c0ce128c95b069505be4eff5c83c83f2ef510b0718dafff4641ca9006ad6607b8876d95350d237a1b6fc27a3945b93157897690ad99e8d8e45423bcefcacce1cec41a1e1289972acf047f7ce7586b094342a8cb1add3a574d8ea221c57e4bfb423a2c1e4f4386bd934d92e1f1587c6cc2a015fa35f596d60d697a3"])
write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="bf007dcc7c46b0cae98c211caf9cc2e307934b717903e1c3873e8b7fa9ca7334a509d3c54695c356ec155aef796953d16e26589d05415c294792bd7c838c5a430b9c84797af000cc2f1e2cd2a8a2c43de988379e2e09da9191b7ef2236671bbc88abdc5b3851e0d97542a324da0bf39f14329f5cc3898e9b16a78037d549c0b65a12c42e5afa4fb5acce14cbaeee6f7b4014de5800b7013ec626bc3179ca558ccd76ec127a87426e9a8013c3ec1a9d92ff095061e39a9a1ef4a0e6cd509d99718fb6ab2f9825d5e01e813b73aa54fc87a0", 0xd1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_FD={0x8}]}, 0x44}}, 0x24014884)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="db0f9d64e3a065fa1e7c437eb052b71eb05d1ce18226ff83f529ccc6ab8beb3051000000000000085858d92f46bfd06273baf39e1b3874eb66b5f387cf6c80ca7f9f9db11a3523d2901bf919a65c0ccaab564f1acb0b32247d7634d868ee989e948a9eb0c3dd9491fa4ee1c824a09918698953698ddf4d29cd1f05e06b69849b3ab2d347e2578621dcb4b94e7d86f7ca4a5ac7106d740e7dcd83175ca5bf7445c4a99862c567a6894fafa09f6055703adbe5592b8549e3b6439e8b4b91", @ANYRES64=r0, @ANYBLOB="00000000000000002e2f66696c653000334dd5f4b6a2bc3fdd793ae9e52fa640aa9bd3d553ffd939178a376e4d56da06c0ce128c95b069505be4eff5c83c83f2ef510b0718dafff4641ca9006ad6607b8876d95350d237a1b6fc27a3945b93157897690ad99e8d8e45423bcefcacce1cec41a1e1289972acf047f7ce7586b094342a8cb1add3a574d8ea221c57e4bfb423a2c1e4f4386bd934d92e1f1587c6cc2a015fa35f596d60d697a3"]) (async)
write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="bf007dcc7c46b0cae98c211caf9cc2e307934b717903e1c3873e8b7fa9ca7334a509d3c54695c356ec155aef796953d16e26589d05415c294792bd7c838c5a430b9c84797af000cc2f1e2cd2a8a2c43de988379e2e09da9191b7ef2236671bbc88abdc5b3851e0d97542a324da0bf39f14329f5cc3898e9b16a78037d549c0b65a12c42e5afa4fb5acce14cbaeee6f7b4014de5800b7013ec626bc3179ca558ccd76ec127a87426e9a8013c3ec1a9d92ff095061e39a9a1ef4a0e6cd509d99718fb6ab2f9825d5e01e813b73aa54fc87a0", 0xd1) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_FD={0x8}]}, 0x44}}, 0x24014884) (async)
dup2(r1, r0) (async)

02:05:14 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="00004000000001002e2f66696c653000"])
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x101}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_PW_TYPE={0xffffffffffffff54, 0x1, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000840}, 0x4008001)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r3, r2)
io_setup(0x9, &(0x7f0000000240)=<r4=>0x0)
io_cancel(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000000280)="9da39b1c8760c91c3fd8c0a537f9c19a418d5d31decc6215506451f3aa5f0ce1e330ea508365fba42f89242eacc5a118115a97a2af61ccde3e99a4b518c7770ad790981442a13acb082db1b865a8caac81197c627be78d1567dde301", 0x5c, 0x6, 0x0, 0x2}, &(0x7f0000000340))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00004000000001002e2f66696c653000"]) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x101}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_PW_TYPE={0xffffffffffffff54, 0x1, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000840}, 0x4008001) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r3, r2) (async)
io_setup(0x9, &(0x7f0000000240)) (async)
io_cancel(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000000280)="9da39b1c8760c91c3fd8c0a537f9c19a418d5d31decc6215506451f3aa5f0ce1e330ea508365fba42f89242eacc5a118115a97a2af61ccde3e99a4b518c7770ad790981442a13acb082db1b865a8caac81197c627be78d1567dde301", 0x5c, 0x6, 0x0, 0x2}, &(0x7f0000000340)) (async)

02:05:14 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0x5}}, 0x20) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x6b4000, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)

02:05:14 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (rerun: 64)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x2, 0x6, "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", 0x5, 0x5, 0x0, 0x1, 0x40, 0x2, 0x7, 0x1}}}, 0x120)

02:05:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socket$kcm(0x29, 0x7, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r3, r1})

02:05:14 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x707700, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)

02:05:14 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010000000000000000da0246a9ffffff7f22c3b8a305bd000000"], 0x14}}, 0x0) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5b}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x845)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r7, 0x0, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x4040001) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r8, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r4)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r9, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '-@$/!'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20008800)

02:05:14 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="db0f9d64e3a065fa1e7c437eb052b71eb05d1ce18226ff83f529ccc6ab8beb3051000000000000085858d92f46bfd06273baf39e1b3874eb66b5f387cf6c80ca7f9f9db11a3523d2901bf919a65c0ccaab564f1acb0b32247d7634d868ee989e948a9eb0c3dd9491fa4ee1c824a09918698953698ddf4d29cd1f05e06b69849b3ab2d347e2578621dcb4b94e7d86f7ca4a5ac7106d740e7dcd83175ca5bf7445c4a99862c567a6894fafa09f6055703adbe5592b8549e3b6439e8b4b91", @ANYRES64=r0, @ANYBLOB="00000000000000002e2f66696c653000334dd5f4b6a2bc3fdd793ae9e52fa640aa9bd3d553ffd939178a376e4d56da06c0ce128c95b069505be4eff5c83c83f2ef510b0718dafff4641ca9006ad6607b8876d95350d237a1b6fc27a3945b93157897690ad99e8d8e45423bcefcacce1cec41a1e1289972acf047f7ce7586b094342a8cb1add3a574d8ea221c57e4bfb423a2c1e4f4386bd934d92e1f1587c6cc2a015fa35f596d60d697a3"])
write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="bf007dcc7c46b0cae98c211caf9cc2e307934b717903e1c3873e8b7fa9ca7334a509d3c54695c356ec155aef796953d16e26589d05415c294792bd7c838c5a430b9c84797af000cc2f1e2cd2a8a2c43de988379e2e09da9191b7ef2236671bbc88abdc5b3851e0d97542a324da0bf39f14329f5cc3898e9b16a78037d549c0b65a12c42e5afa4fb5acce14cbaeee6f7b4014de5800b7013ec626bc3179ca558ccd76ec127a87426e9a8013c3ec1a9d92ff095061e39a9a1ef4a0e6cd509d99718fb6ab2f9825d5e01e813b73aa54fc87a0", 0xd1)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_FD={0x8}]}, 0x44}}, 0x24014884) (async)
dup2(r1, r0)

02:05:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socket$kcm(0x29, 0x7, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) (async, rerun: 32)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r3, r1})

02:05:14 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="00004000000001002e2f66696c653000"])
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x101}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_PW_TYPE={0xffffffffffffff54, 0x1, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000840}, 0x4008001)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r3, r2)
io_setup(0x9, &(0x7f0000000240)=<r4=>0x0)
io_cancel(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000000280)="9da39b1c8760c91c3fd8c0a537f9c19a418d5d31decc6215506451f3aa5f0ce1e330ea508365fba42f89242eacc5a118115a97a2af61ccde3e99a4b518c7770ad790981442a13acb082db1b865a8caac81197c627be78d1567dde301", 0x5c, 0x6, 0x0, 0x2}, &(0x7f0000000340))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00004000000001002e2f66696c653000"]) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x101}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_PW_TYPE={0xffffffffffffff54, 0x1, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000840}, 0x4008001) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r3, r2) (async)
io_setup(0x9, &(0x7f0000000240)) (async)
io_cancel(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000000280)="9da39b1c8760c91c3fd8c0a537f9c19a418d5d31decc6215506451f3aa5f0ce1e330ea508365fba42f89242eacc5a118115a97a2af61ccde3e99a4b518c7770ad790981442a13acb082db1b865a8caac81197c627be78d1567dde301", 0x5c, 0x6, 0x0, 0x2}, &(0x7f0000000340)) (async)

02:05:14 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x707700, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x707700, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) (async)

02:05:14 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="32b14b096bb9fb2c2ee220bd73677edab712e541ae681552b726f475280bf1f9cde82442c34d66d5ce11df45ff2b599c3e2245e92dc558cd31f126d84199f8df1ff983c781daee6c5579b10042bfafde9ab17cfd688ac03f9d7525f3584852f07c42436b2011f33577844070a0e03dd2ac92308ef820f9cc744c443bb08486f4344a3279bfa5e8f5136345ce34b93facfd6527c5e26b688342e7c8d15fbe2021cbd1f0b655c8ba452d9df15c3dacda3ef3cdc2b471c1e2d893b25a64467519c7d57f7eb7b3cf5a35e3ef26", 0xcb)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:14 executing program 4:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="e6"], 0x24}}, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
inotify_init1(0x80800)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4)

[ 1751.237316] nbd: must specify an index to disconnect
02:05:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
socket$kcm(0x29, 0x7, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r3, r1})

02:05:14 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x402903, 0x0)
socketpair(0xfcb78a58b7d73372, 0x1, 0xc9, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0x0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x868}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x94}}, 0x240488c4)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000100", @ANYRES16=r6, @ANYBLOB="080028bd7000fedbdf25030000000c0006000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x95634fce21853a12)

02:05:14 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="32b14b096bb9fb2c2ee220bd73677edab712e541ae681552b726f475280bf1f9cde82442c34d66d5ce11df45ff2b599c3e2245e92dc558cd31f126d84199f8df1ff983c781daee6c5579b10042bfafde9ab17cfd688ac03f9d7525f3584852f07c42436b2011f33577844070a0e03dd2ac92308ef820f9cc744c443bb08486f4344a3279bfa5e8f5136345ce34b93facfd6527c5e26b688342e7c8d15fbe2021cbd1f0b655c8ba452d9df15c3dacda3ef3cdc2b471c1e2d893b25a64467519c7d57f7eb7b3cf5a35e3ef26", 0xcb)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="32b14b096bb9fb2c2ee220bd73677edab712e541ae681552b726f475280bf1f9cde82442c34d66d5ce11df45ff2b599c3e2245e92dc558cd31f126d84199f8df1ff983c781daee6c5579b10042bfafde9ab17cfd688ac03f9d7525f3584852f07c42436b2011f33577844070a0e03dd2ac92308ef820f9cc744c443bb08486f4344a3279bfa5e8f5136345ce34b93facfd6527c5e26b688342e7c8d15fbe2021cbd1f0b655c8ba452d9df15c3dacda3ef3cdc2b471c1e2d893b25a64467519c7d57f7eb7b3cf5a35e3ef26", 0xcb) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)

02:05:14 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x707700, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)

02:05:14 executing program 4:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="e6"], 0x24}}, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
inotify_init1(0x80800)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="e6"], 0x24}}, 0x0) (async)
openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async)
inotify_init1(0x80800) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) (async)

02:05:14 executing program 3:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(0xffffffffffffffff, r4)

02:05:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x40}}, 0x0)

02:05:14 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x402903, 0x0) (async)
socketpair(0xfcb78a58b7d73372, 0x1, 0xc9, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0) (async)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0x0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x868}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x94}}, 0x240488c4) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000100", @ANYRES16=r6, @ANYBLOB="080028bd7000fedbdf25030000000c0006000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x95634fce21853a12)

02:05:14 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="32b14b096bb9fb2c2ee220bd73677edab712e541ae681552b726f475280bf1f9cde82442c34d66d5ce11df45ff2b599c3e2245e92dc558cd31f126d84199f8df1ff983c781daee6c5579b10042bfafde9ab17cfd688ac03f9d7525f3584852f07c42436b2011f33577844070a0e03dd2ac92308ef820f9cc744c443bb08486f4344a3279bfa5e8f5136345ce34b93facfd6527c5e26b688342e7c8d15fbe2021cbd1f0b655c8ba452d9df15c3dacda3ef3cdc2b471c1e2d893b25a64467519c7d57f7eb7b3cf5a35e3ef26", 0xcb) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:14 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="e6"], 0x24}}, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
inotify_init1(0x80800)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4)

02:05:14 executing program 4:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="e6"], 0x24}}, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
inotify_init1(0x80800)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="e6"], 0x24}}, 0x0) (async)
openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async)
inotify_init1(0x80800) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) (async)

02:05:14 executing program 3:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="4175a20f69643c67b71d8ff439ec8ba8e68e57899ac9789ea6bd7aa8c09f610b63022ae533aaabcf7f4341693a6322d93db482e92a03b176a8ac77b26d8109ea4a3f7aa67e3b6c6470fa8817ac6c1bec490da8cf7eedb6412b4cbf578fa3e3d0ce0a319edc65c07c7611f3d921cade644dc0a61ad80314c0ba2c191b2ad9ef7f545e6b70748a5d8a4a4910fabe4c55fe515396a8abcc8104ec807a42647b1f99958cd502846c40a92241243cbfa29b4b3a0848366a4d6b874753c03a00be7c2395617f31f57087c5226307612e4bb7c4167107633a3b1a13e8e4496186fcebc7a577f04466cd013c4e3fb4bd486b3023ae15bab17be55ae202bbe82b4bbacc4df01b78e263315673b20637d456a249ebbd8c2674ebc5ea0abfc3f866f95caf25c905a635f7b54aab072e23a77034d8bd85ae0c89cb5cb2852e30e1ea9845d3adc10d", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(0xffffffffffffffff, r4)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
dup2(r1, r0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"]) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
dup2(0xffffffffffffffff, r4) (async)

02:05:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x40}}, 0x0)

02:05:14 executing program 1:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:14 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="4175a20f69643c67b71d8ff439ec8ba8e68e57899ac9789ea6bd7aa8c09f610b63022ae533aaabcf7f4341693a6322d93db482e92a03b176a8ac77b26d8109ea4a3f7aa67e3b6c6470fa8817ac6c1bec490da8cf7eedb6412b4cbf578fa3e3d0ce0a319edc65c07c7611f3d921cade644dc0a61ad80314c0ba2c191b2ad9ef7f545e6b70748a5d8a4a4910fabe4c55fe515396a8abcc8104ec807a42647b1f99958cd502846c40a92241243cbfa29b4b3a0848366a4d6b874753c03a00be7c2395617f31f57087c5226307612e4bb7c4167107633a3b1a13e8e4496186fcebc7a577f04466cd013c4e3fb4bd486b3023ae15bab17be55ae202bbe82b4bbacc4df01b78e263315673b20637d456a249ebbd8c2674ebc5ea0abfc3f866f95caf25c905a635f7b54aab072e23a77034d8bd85ae0c89cb5cb2852e30e1ea9845d3adc10d", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(0xffffffffffffffff, r4)

02:05:14 executing program 3:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0) (async, rerun: 32)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) (async)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="4175a20f69643c67b71d8ff439ec8ba8e68e57899ac9789ea6bd7aa8c09f610b63022ae533aaabcf7f4341693a6322d93db482e92a03b176a8ac77b26d8109ea4a3f7aa67e3b6c6470fa8817ac6c1bec490da8cf7eedb6412b4cbf578fa3e3d0ce0a319edc65c07c7611f3d921cade644dc0a61ad80314c0ba2c191b2ad9ef7f545e6b70748a5d8a4a4910fabe4c55fe515396a8abcc8104ec807a42647b1f99958cd502846c40a92241243cbfa29b4b3a0848366a4d6b874753c03a00be7c2395617f31f57087c5226307612e4bb7c4167107633a3b1a13e8e4496186fcebc7a577f04466cd013c4e3fb4bd486b3023ae15bab17be55ae202bbe82b4bbacc4df01b78e263315673b20637d456a249ebbd8c2674ebc5ea0abfc3f866f95caf25c905a635f7b54aab072e23a77034d8bd85ae0c89cb5cb2852e30e1ea9845d3adc10d", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(0xffffffffffffffff, r4)

02:05:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x40}}, 0x0)

02:05:14 executing program 4:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={<r0=>0xffffffffffffffff, 0x2, 0x8, 0xc117})
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x24}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x50, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x20004000)

02:05:14 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x402903, 0x0)
socketpair(0xfcb78a58b7d73372, 0x1, 0xc9, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0x0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x868}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x94}}, 0x240488c4)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000100", @ANYRES16=r6, @ANYBLOB="080028bd7000fedbdf25030000000c0006000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x95634fce21853a12)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x402903, 0x0) (async)
socketpair(0xfcb78a58b7d73372, 0x1, 0xc9, &(0x7f0000000240)) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x868}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x94}}, 0x240488c4) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000100", @ANYRES16=r6, @ANYBLOB="080028bd7000fedbdf25030000000c0006000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x95634fce21853a12) (async)

02:05:14 executing program 1:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:14 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(0xffffffffffffffff, r4)

02:05:15 executing program 3:
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x4e, 0x7d, 0x2, {0x0, 0x47, 0x401, 0x1ff, {0xc2, 0x2, 0x1}, 0x19100000, 0xa0000000, 0x1ff, 0x100, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x0, '', 0x2, '\x90)'}}, 0x4e)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000100)={0x2, 0xa6, &(0x7f0000000040)=""/166})
dup2(r1, r0)

02:05:15 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x8001, <r1=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000a00187b5b5b230000000c00080000763f000000000008000100000000000c000200"/58], 0xffffffffffffff0a}}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0)

02:05:15 executing program 4:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={<r0=>0xffffffffffffffff, 0x2, 0x8, 0xc117})
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x24}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x50, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x20004000)

02:05:15 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0)

02:05:15 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(0xffffffffffffffff, r4)

02:05:15 executing program 4:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={<r0=>0xffffffffffffffff, 0x2, 0x8, 0xc117})
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01"], 0x24}}, 0x0) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x50, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x20004000) (rerun: 64)

02:05:15 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0)

02:05:15 executing program 1:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:15 executing program 3:
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x4e, 0x7d, 0x2, {0x0, 0x47, 0x401, 0x1ff, {0xc2, 0x2, 0x1}, 0x19100000, 0xa0000000, 0x1ff, 0x100, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x0, '', 0x2, '\x90)'}}, 0x4e) (async, rerun: 32)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000100)={0x2, 0xa6, &(0x7f0000000040)=""/166}) (async)
dup2(r1, r0)

02:05:15 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x8001, <r1=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000a00187b5b5b230000000c00080000763f000000000008000100000000000c000200"/58], 0xffffffffffffff0a}}, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0)

02:05:15 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

02:05:15 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async)

02:05:15 executing program 1:
pipe2$watch_queue(&(0x7f0000000040), 0x80)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
socket$inet_udp(0x2, 0x2, 0x0)

02:05:15 executing program 3:
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000140)={0x4e, 0x7d, 0x2, {0x0, 0x47, 0x401, 0x1ff, {0xc2, 0x2, 0x1}, 0x19100000, 0xa0000000, 0x1ff, 0x100, 0x9, '/dev/fb0\x00', 0x9, '/dev/fb0\x00', 0x0, '', 0x2, '\x90)'}}, 0x4e) (async)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000100)={0x2, 0xa6, &(0x7f0000000040)=""/166}) (async)
dup2(r1, r0)

02:05:15 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x8001, <r1=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000a00187b5b5b230000000c00080000763f000000000008000100000000000c000200"/58], 0xffffffffffffff0a}}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x8001}, 0x8) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000a00187b5b5b230000000c00080000763f000000000008000100000000000c000200"/58], 0xffffffffffffff0a}}, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async)

02:05:15 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000500)=""/4096)
pselect6(0x40, &(0x7f0000000000)={0x4, 0x4, 0x401, 0x7, 0xffffffff, 0x2, 0xc86, 0x3}, &(0x7f0000000040)={0xff, 0x3, 0x5a7, 0xfffffffffffffffa, 0x5, 0x9, 0x8, 0xff}, &(0x7f0000000100)={0xd5f, 0x7, 0x0, 0x10000, 0xbe, 0x1000, 0x6, 0x90}, &(0x7f0000000140)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0xfff]}, 0x8})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:15 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100e2b2021465749c34df03b400000000000000b2c1e5ed2c9dfb8bfa20670002000000"], 0x14}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000000c0)={0x3, 0x26, 0x3, 0x4, 0x4, [{0xfff, 0x8, 0x8, '\x00', 0x200}, {0x3, 0x7, 0x4, '\x00', 0x88}, {0x9, 0x7, 0x656}, {0x515c, 0x5b3, 0x1, '\x00', 0x8}]})
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
r5 = getuid()
getresuid(&(0x7f0000000200)=<r6=>0x0, &(0x7f0000000240), &(0x7f0000000280))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x148080, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}, {@nodevmap}, {@cache_none}, {@aname={'aname', 0x3d, '#{V]%*$*/'}}, {@cache_fscache}, {@cache_none}], [{@fowner_gt={'fowner>', r5}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@appraise}, {@audit}, {@euid_gt={'euid>', r6}}, {@uid_gt={'uid>', 0xee00}}]}})

02:05:15 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])
socket$nl_generic(0x10, 0x3, 0x10)

02:05:15 executing program 1:
pipe2$watch_queue(&(0x7f0000000040), 0x80)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe2$watch_queue(&(0x7f0000000040), 0x80) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)

02:05:15 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000500)=""/4096) (async)
pselect6(0x40, &(0x7f0000000000)={0x4, 0x4, 0x401, 0x7, 0xffffffff, 0x2, 0xc86, 0x3}, &(0x7f0000000040)={0xff, 0x3, 0x5a7, 0xfffffffffffffffa, 0x5, 0x9, 0x8, 0xff}, &(0x7f0000000100)={0xd5f, 0x7, 0x0, 0x10000, 0xbe, 0x1000, 0x6, 0x90}, &(0x7f0000000140)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0xfff]}, 0x8}) (async, rerun: 32)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (rerun: 32)

02:05:15 executing program 0:
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000000)={0x2})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0xffffffffffffff0a}}, 0x0)

02:05:15 executing program 3:
r0 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil)
shmctl$IPC_RMID(r0, 0x0)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000040)=""/49)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r2, r1)

02:05:15 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100e2b2021465749c34df03b400000000000000b2c1e5ed2c9dfb8bfa20670002000000"], 0x14}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000000c0)={0x3, 0x26, 0x3, 0x4, 0x4, [{0xfff, 0x8, 0x8, '\x00', 0x200}, {0x3, 0x7, 0x4, '\x00', 0x88}, {0x9, 0x7, 0x656}, {0x515c, 0x5b3, 0x1, '\x00', 0x8}]}) (async)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0) (async)
r5 = getuid() (async)
getresuid(&(0x7f0000000200)=<r6=>0x0, &(0x7f0000000240), &(0x7f0000000280))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x148080, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}, {@nodevmap}, {@cache_none}, {@aname={'aname', 0x3d, '#{V]%*$*/'}}, {@cache_fscache}, {@cache_none}], [{@fowner_gt={'fowner>', r5}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@appraise}, {@audit}, {@euid_gt={'euid>', r6}}, {@uid_gt={'uid>', 0xee00}}]}})

02:05:15 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])

02:05:15 executing program 1:
pipe2$watch_queue(&(0x7f0000000040), 0x80) (async)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async, rerun: 64)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 64)
dup2(r1, r0) (async)
socket$inet_udp(0x2, 0x2, 0x0)

02:05:15 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000500)=""/4096)
pselect6(0x40, &(0x7f0000000000)={0x4, 0x4, 0x401, 0x7, 0xffffffff, 0x2, 0xc86, 0x3}, &(0x7f0000000040)={0xff, 0x3, 0x5a7, 0xfffffffffffffffa, 0x5, 0x9, 0x8, 0xff}, &(0x7f0000000100)={0xd5f, 0x7, 0x0, 0x10000, 0xbe, 0x1000, 0x6, 0x90}, &(0x7f0000000140)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0xfff]}, 0x8}) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:15 executing program 0:
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000000)={0x2})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0xffffffffffffff0a}}, 0x0)

02:05:15 executing program 3:
r0 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil)
shmctl$IPC_RMID(r0, 0x0)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000040)=""/49)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r2, r1)
shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) (async)
shmctl$IPC_RMID(r0, 0x0) (async)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000040)=""/49) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r2, r1) (async)

02:05:15 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100e2b2021465749c34df03b400000000000000b2c1e5ed2c9dfb8bfa20670002000000"], 0x14}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000000c0)={0x3, 0x26, 0x3, 0x4, 0x4, [{0xfff, 0x8, 0x8, '\x00', 0x200}, {0x3, 0x7, 0x4, '\x00', 0x88}, {0x9, 0x7, 0x656}, {0x515c, 0x5b3, 0x1, '\x00', 0x8}]})
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
r5 = getuid()
getresuid(&(0x7f0000000200)=<r6=>0x0, &(0x7f0000000240), &(0x7f0000000280))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x148080, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}, {@nodevmap}, {@cache_none}, {@aname={'aname', 0x3d, '#{V]%*$*/'}}, {@cache_fscache}, {@cache_none}], [{@fowner_gt={'fowner>', r5}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@appraise}, {@audit}, {@euid_gt={'euid>', r6}}, {@uid_gt={'uid>', 0xee00}}]}})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100e2b2021465749c34df03b400000000000000b2c1e5ed2c9dfb8bfa20670002000000"], 0x14}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000000c0)={0x3, 0x26, 0x3, 0x4, 0x4, [{0xfff, 0x8, 0x8, '\x00', 0x200}, {0x3, 0x7, 0x4, '\x00', 0x88}, {0x9, 0x7, 0x656}, {0x515c, 0x5b3, 0x1, '\x00', 0x8}]}) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0) (async)
getuid() (async)
getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x148080, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}, {@nodevmap}, {@cache_none}, {@aname={'aname', 0x3d, '#{V]%*$*/'}}, {@cache_fscache}, {@cache_none}], [{@fowner_gt={'fowner>', r5}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@appraise}, {@audit}, {@euid_gt={'euid>', r6}}, {@uid_gt={'uid>', 0xee00}}]}}) (async)

02:05:15 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)

02:05:15 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffc5ef}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x12}, 0x40000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f0000000240)={0x2})
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400f00b", @ANYRES16=r5, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:15 executing program 0:
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000000)={0x2}) (async, rerun: 32)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0xffffffffffffff0a}}, 0x0)

02:05:15 executing program 3:
r0 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil)
shmctl$IPC_RMID(r0, 0x0)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000040)=""/49)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r2, r1)
shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) (async)
shmctl$IPC_RMID(r0, 0x0) (async)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000040)=""/49) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r2, r1) (async)

02:05:15 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)
r3 = dup2(r1, r0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000040)={<r4=>r1, 0xfffffffffffffff8, 0x0, 0x401})
sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}}, 0x48802)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000180))
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
write$P9_RREADLINK(r6, &(0x7f0000000280)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)

02:05:15 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="011800000000000000"], 0x14}}, 0x0)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20008200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c0d4)
r5 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil)
shmctl$IPC_RMID(r5, 0x0)
shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f0000000000)=""/33)
shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil)

02:05:15 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)

02:05:15 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffc5ef}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x12}, 0x40000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f0000000240)={0x2})
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400f00b", @ANYRES16=r5, @ANYBLOB="01"], 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0) (async)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffc5ef}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x12}, 0x40000) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (async)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f0000000240)={0x2}) (async)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400f00b", @ANYRES16=r5, @ANYBLOB="01"], 0x24}}, 0x0) (async)

02:05:15 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) (async)
r3 = dup2(r1, r0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000040)={<r4=>r1, 0xfffffffffffffff8, 0x0, 0x401})
sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}}, 0x48802) (async)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000180))
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
write$P9_RREADLINK(r6, &(0x7f0000000280)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)

02:05:15 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={<r2=>r0, 0x4, 0x0, 0x1})
write$tcp_congestion(r2, &(0x7f0000000080)='dctcp\x00', 0x6)
dup2(r1, r0)

02:05:15 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0xffffffffffffff0a}}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8095}, 0x8800)

02:05:15 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)
r3 = dup2(r1, r0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000040)={<r4=>r1, 0xfffffffffffffff8, 0x0, 0x401})
sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}}, 0x48802)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0x0) (async, rerun: 64)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, &(0x7f0000000180)) (async, rerun: 64)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
write$P9_RREADLINK(r6, &(0x7f0000000280)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)

02:05:15 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

02:05:15 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) (async)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0) (async)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffc5ef}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x12}, 0x40000) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async, rerun: 32)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f0000000240)={0x2}) (async)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400f00b", @ANYRES16=r5, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:15 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="011800000000000000"], 0x14}}, 0x0)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20008200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c0d4)
r5 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil)
shmctl$IPC_RMID(r5, 0x0)
shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f0000000000)=""/33)
shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="011800000000000000"], 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r0) (async)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20008200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c0d4) (async)
shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) (async)
shmctl$IPC_RMID(r5, 0x0) (async)
shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f0000000000)=""/33) (async)
shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) (async)

02:05:15 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0xffffffffffffff0a}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8095}, 0x8800)

02:05:15 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={<r2=>r0, 0x4, 0x0, 0x1})
write$tcp_congestion(r2, &(0x7f0000000080)='dctcp\x00', 0x6)
dup2(r1, r0)

02:05:15 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)

02:05:15 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
io_setup(0x10003, &(0x7f0000000000)=<r1=>0x0)
socket$l2tp(0x2, 0x2, 0x73)
io_destroy(r1)
io_destroy(r1)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r2, r0)

02:05:15 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (rerun: 32)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="011800000000000000"], 0x14}}, 0x0) (async)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20008200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c0d4) (async)
r5 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil)
shmctl$IPC_RMID(r5, 0x0)
shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f0000000000)=""/33) (async)
shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil)

02:05:15 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2c0312}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x804)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4048}, 0x20008080)

02:05:15 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={<r2=>r0, 0x4, 0x0, 0x1})
write$tcp_congestion(r2, &(0x7f0000000080)='dctcp\x00', 0x6) (async)
dup2(r1, r0)

02:05:16 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0xffffffffffffff0a}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8095}, 0x8800)

02:05:16 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
dup2(r1, r0)

02:05:16 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) (async)
io_setup(0x10003, &(0x7f0000000000)=<r1=>0x0)
socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64)
io_destroy(r1) (async, rerun: 64)
io_destroy(r1)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r2, r0)

02:05:16 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r4, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000040)=0x1)
dup2(r2, r0)

02:05:16 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2c0312}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x804)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4048}, 0x20008080)

[ 1752.811581] nbd: must specify a size in bytes for the device
02:05:16 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$audion(&(0x7f0000000000), 0x7fff, 0x101001)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)

02:05:16 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x44}}, 0x0)

02:05:16 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
io_setup(0x10003, &(0x7f0000000000)=<r1=>0x0)
socket$l2tp(0x2, 0x2, 0x73)
io_destroy(r1)
io_destroy(r1)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r2, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) (async)
io_setup(0x10003, &(0x7f0000000000)) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
io_destroy(r1) (async)
io_destroy(r1) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r2, r0) (async)

02:05:16 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
dup2(r1, r0)

02:05:16 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2c0312}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x804) (async)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4048}, 0x20008080)

02:05:16 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$audion(&(0x7f0000000000), 0x7fff, 0x101001) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)

02:05:16 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r4, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000040)=0x1)
dup2(r2, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0) (async)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r4, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) (async)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000040)=0x1) (async)
dup2(r2, r0) (async)

[ 1752.942501] nbd: must specify a size in bytes for the device
[ 1752.950235] nbd: must specify an index to disconnect
02:05:16 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x44}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x44}}, 0x0) (async)

02:05:16 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$pvfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x5, &(0x7f0000001300)=[{&(0x7f00000000c0)="e5d5a6f652042f4486ae56d42d249abad85ab5afe7737f67bf8c519484bc3482b57ece9405f5a45f0a4e8dfb2ed98829930ee757aa94477380a837442263c52a9152b2b807ada5f76e4994a70f74a31afbddd68a5e4ddbb7238dba6cff7cccc2120c77d1b74552b85e53d33bb1", 0x6d, 0x9}, {&(0x7f0000000140)="d53a0af91d5fbafff38bb8e04b7b9d3f9dadbb5ef275ec659a88bfeafb902470a057f8481a49e7171a8b09915bdce4821b2105886c0bd3882764847e13a4259ab69fb5ac755876d886057ce436753b207c8bccb54e73220429647b0e567db3241502676e9110842a04eba0ace86661b92ce80a6051f99cde944dc5b58d7cf0ed0e6c7cf0a2fc3c814fb9e5902f58d12d7da0a6dd035dc4709e084f2feaa4f38bc602432f2ff2cba337fe8296b36a305db2158b556d153a2e25ebcc10ba68b4e04df6128150523f7aec8d173b67be7f48db969a73b08221ef6e6b5d4fa43f56b4f9fa", 0xe2, 0xb243}, {&(0x7f0000000240)="8a08a78b20c2686647d321482d74e3d7e977e56285432d48d74a10bc84fbad09c8eaf5b5271a802cab98bc7e98c0856ae3f2c898cf41011a62dbe394ef1f2ae103", 0x41, 0x6}, {&(0x7f00000002c0)="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", 0x1000, 0xffffffffffff2274}, {&(0x7f00000012c0)="ef54c88f194d9fa4e919ba7a724c6368bccd1ad100eb461ed9", 0x19, 0x100000000}], 0x10000, &(0x7f0000001380)={[{'/dev/fb0\x00'}, {'+#\\-*!\\'}, {'&{'}, {'/dev/fb0\x00'}, {'/dev/fb0\x00'}, {'\xe2-\xdd'}, {'\\'}, {}, {'/dev/fb0\x00'}], [{@euid_gt}]})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0xa, &(0x7f0000001400)=@raw=[@call={0x85, 0x0, 0x0, 0xa2}, @call={0x85, 0x0, 0x0, 0x1f}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @initr0, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}], &(0x7f0000001480)='GPL\x00', 0x7, 0xf5, &(0x7f00000014c0)=""/245, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001600)={0x1, 0x7, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001640)=[0x1]}, 0x80)
dup2(r0, r1)

02:05:16 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
dup2(r1, r0)

02:05:16 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="247a1758450afe6805c60ced04cc880fea2166ee000000", @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5d}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10000}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x20000080)

02:05:16 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$audion(&(0x7f0000000000), 0x7fff, 0x101001)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_dev$audion(&(0x7f0000000000), 0x7fff, 0x101001) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async)

02:05:16 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r4, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) (async)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000040)=0x1) (async)
dup2(r2, r0)

[ 1753.042507] nbd: must specify a size in bytes for the device
[ 1753.060813] nbd: must specify an index to disconnect
02:05:16 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="247a1758450afe6805c60ced04cc880fea2166ee000000", @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5d}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10000}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x20000080)

02:05:16 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x23}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x5)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1)

02:05:16 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="247a1758450afe6805c60ced04cc880fea2166ee000000", @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5d}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10000}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x20000080)

[ 1753.244837] nbd: must specify an index to disconnect
[ 1753.258888] nbd: must specify an index to disconnect
02:05:16 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x44}}, 0x0)

02:05:16 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)

02:05:16 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x470241, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

[ 1753.331949] nbd: must specify an index to disconnect
02:05:16 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x23}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x5) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1)

[ 1753.431614] nbd: must specify an index to disconnect
02:05:17 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$pvfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x5, &(0x7f0000001300)=[{&(0x7f00000000c0)="e5d5a6f652042f4486ae56d42d249abad85ab5afe7737f67bf8c519484bc3482b57ece9405f5a45f0a4e8dfb2ed98829930ee757aa94477380a837442263c52a9152b2b807ada5f76e4994a70f74a31afbddd68a5e4ddbb7238dba6cff7cccc2120c77d1b74552b85e53d33bb1", 0x6d, 0x9}, {&(0x7f0000000140)="d53a0af91d5fbafff38bb8e04b7b9d3f9dadbb5ef275ec659a88bfeafb902470a057f8481a49e7171a8b09915bdce4821b2105886c0bd3882764847e13a4259ab69fb5ac755876d886057ce436753b207c8bccb54e73220429647b0e567db3241502676e9110842a04eba0ace86661b92ce80a6051f99cde944dc5b58d7cf0ed0e6c7cf0a2fc3c814fb9e5902f58d12d7da0a6dd035dc4709e084f2feaa4f38bc602432f2ff2cba337fe8296b36a305db2158b556d153a2e25ebcc10ba68b4e04df6128150523f7aec8d173b67be7f48db969a73b08221ef6e6b5d4fa43f56b4f9fa", 0xe2, 0xb243}, {&(0x7f0000000240)="8a08a78b20c2686647d321482d74e3d7e977e56285432d48d74a10bc84fbad09c8eaf5b5271a802cab98bc7e98c0856ae3f2c898cf41011a62dbe394ef1f2ae103", 0x41, 0x6}, {&(0x7f00000002c0)="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", 0x1000, 0xffffffffffff2274}, {&(0x7f00000012c0)="ef54c88f194d9fa4e919ba7a724c6368bccd1ad100eb461ed9", 0x19, 0x100000000}], 0x10000, &(0x7f0000001380)={[{'/dev/fb0\x00'}, {'+#\\-*!\\'}, {'&{'}, {'/dev/fb0\x00'}, {'/dev/fb0\x00'}, {'\xe2-\xdd'}, {'\\'}, {}, {'/dev/fb0\x00'}], [{@euid_gt}]})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0xa, &(0x7f0000001400)=@raw=[@call={0x85, 0x0, 0x0, 0xa2}, @call={0x85, 0x0, 0x0, 0x1f}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @initr0, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}], &(0x7f0000001480)='GPL\x00', 0x7, 0xf5, &(0x7f00000014c0)=""/245, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001600)={0x1, 0x7, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001640)=[0x1]}, 0x80)
dup2(r0, r1)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_mount_image$pvfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x5, &(0x7f0000001300)=[{&(0x7f00000000c0)="e5d5a6f652042f4486ae56d42d249abad85ab5afe7737f67bf8c519484bc3482b57ece9405f5a45f0a4e8dfb2ed98829930ee757aa94477380a837442263c52a9152b2b807ada5f76e4994a70f74a31afbddd68a5e4ddbb7238dba6cff7cccc2120c77d1b74552b85e53d33bb1", 0x6d, 0x9}, {&(0x7f0000000140)="d53a0af91d5fbafff38bb8e04b7b9d3f9dadbb5ef275ec659a88bfeafb902470a057f8481a49e7171a8b09915bdce4821b2105886c0bd3882764847e13a4259ab69fb5ac755876d886057ce436753b207c8bccb54e73220429647b0e567db3241502676e9110842a04eba0ace86661b92ce80a6051f99cde944dc5b58d7cf0ed0e6c7cf0a2fc3c814fb9e5902f58d12d7da0a6dd035dc4709e084f2feaa4f38bc602432f2ff2cba337fe8296b36a305db2158b556d153a2e25ebcc10ba68b4e04df6128150523f7aec8d173b67be7f48db969a73b08221ef6e6b5d4fa43f56b4f9fa", 0xe2, 0xb243}, {&(0x7f0000000240)="8a08a78b20c2686647d321482d74e3d7e977e56285432d48d74a10bc84fbad09c8eaf5b5271a802cab98bc7e98c0856ae3f2c898cf41011a62dbe394ef1f2ae103", 0x41, 0x6}, {&(0x7f00000002c0)="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", 0x1000, 0xffffffffffff2274}, {&(0x7f00000012c0)="ef54c88f194d9fa4e919ba7a724c6368bccd1ad100eb461ed9", 0x19, 0x100000000}], 0x10000, &(0x7f0000001380)={[{'/dev/fb0\x00'}, {'+#\\-*!\\'}, {'&{'}, {'/dev/fb0\x00'}, {'/dev/fb0\x00'}, {'\xe2-\xdd'}, {'\\'}, {}, {'/dev/fb0\x00'}], [{@euid_gt}]}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0xa, &(0x7f0000001400)=@raw=[@call={0x85, 0x0, 0x0, 0xa2}, @call={0x85, 0x0, 0x0, 0x1f}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @initr0, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}], &(0x7f0000001480)='GPL\x00', 0x7, 0xf5, &(0x7f00000014c0)=""/245, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001600)={0x1, 0x7, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001640)=[0x1]}, 0x80) (async)
dup2(r0, r1) (async)

02:05:17 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0xe4, 0x29, 0x1, {0x0, [{{0x80, 0x0, 0x8}, 0xffffffffffffffff, 0x57, 0x7, './file0'}, {{0x1, 0x2, 0x7}, 0x7f, 0x3f, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0xd42b, 0x81, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x54d, 0xcd, 0x7, './file0'}, {{0x20, 0x2, 0x2}, 0x8, 0x0, 0x7, './file0'}, {{0xa9, 0x2, 0x2}, 0x10001, 0x20, 0x7, './file0'}, {{0x1, 0x3, 0x6}, 0x10000, 0x7, 0x7, './file0'}]}}, 0xe4)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:17 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(0xffffffffffffffff, r0)

02:05:17 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x200, 0x100000, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x40}}, 0x0)

02:05:17 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x470241, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:17 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async, rerun: 64)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x23}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x5) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1)

[ 1754.103225] orangefs_mount: mount request failed with -4
02:05:17 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x200, 0x100000, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x40}}, 0x0)

02:05:17 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0xe4, 0x29, 0x1, {0x0, [{{0x80, 0x0, 0x8}, 0xffffffffffffffff, 0x57, 0x7, './file0'}, {{0x1, 0x2, 0x7}, 0x7f, 0x3f, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0xd42b, 0x81, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x54d, 0xcd, 0x7, './file0'}, {{0x20, 0x2, 0x2}, 0x8, 0x0, 0x7, './file0'}, {{0xa9, 0x2, 0x2}, 0x10001, 0x20, 0x7, './file0'}, {{0x1, 0x3, 0x6}, 0x10000, 0x7, 0x7, './file0'}]}}, 0xe4)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0xe4, 0x29, 0x1, {0x0, [{{0x80, 0x0, 0x8}, 0xffffffffffffffff, 0x57, 0x7, './file0'}, {{0x1, 0x2, 0x7}, 0x7f, 0x3f, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0xd42b, 0x81, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x54d, 0xcd, 0x7, './file0'}, {{0x20, 0x2, 0x2}, 0x8, 0x0, 0x7, './file0'}, {{0xa9, 0x2, 0x2}, 0x10001, 0x20, 0x7, './file0'}, {{0x1, 0x3, 0x6}, 0x10000, 0x7, 0x7, './file0'}]}}, 0xe4) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)

02:05:17 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x470241, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x470241, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)

02:05:17 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(0xffffffffffffffff, r0)

02:05:17 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x200, 0x100000, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x40}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x200, 0x100000, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '\x18{[[#'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x40}}, 0x0) (async)

02:05:17 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0xe4, 0x29, 0x1, {0x0, [{{0x80, 0x0, 0x8}, 0xffffffffffffffff, 0x57, 0x7, './file0'}, {{0x1, 0x2, 0x7}, 0x7f, 0x3f, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0xd42b, 0x81, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x54d, 0xcd, 0x7, './file0'}, {{0x20, 0x2, 0x2}, 0x8, 0x0, 0x7, './file0'}, {{0xa9, 0x2, 0x2}, 0x10001, 0x20, 0x7, './file0'}, {{0x1, 0x3, 0x6}, 0x10000, 0x7, 0x7, './file0'}]}}, 0xe4)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0xe4, 0x29, 0x1, {0x0, [{{0x80, 0x0, 0x8}, 0xffffffffffffffff, 0x57, 0x7, './file0'}, {{0x1, 0x2, 0x7}, 0x7f, 0x3f, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0xd42b, 0x81, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x54d, 0xcd, 0x7, './file0'}, {{0x20, 0x2, 0x2}, 0x8, 0x0, 0x7, './file0'}, {{0xa9, 0x2, 0x2}, 0x10001, 0x20, 0x7, './file0'}, {{0x1, 0x3, 0x6}, 0x10000, 0x7, 0x7, './file0'}]}}, 0xe4) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)

02:05:17 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_mount_image$pvfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x5, &(0x7f0000001300)=[{&(0x7f00000000c0)="e5d5a6f652042f4486ae56d42d249abad85ab5afe7737f67bf8c519484bc3482b57ece9405f5a45f0a4e8dfb2ed98829930ee757aa94477380a837442263c52a9152b2b807ada5f76e4994a70f74a31afbddd68a5e4ddbb7238dba6cff7cccc2120c77d1b74552b85e53d33bb1", 0x6d, 0x9}, {&(0x7f0000000140)="d53a0af91d5fbafff38bb8e04b7b9d3f9dadbb5ef275ec659a88bfeafb902470a057f8481a49e7171a8b09915bdce4821b2105886c0bd3882764847e13a4259ab69fb5ac755876d886057ce436753b207c8bccb54e73220429647b0e567db3241502676e9110842a04eba0ace86661b92ce80a6051f99cde944dc5b58d7cf0ed0e6c7cf0a2fc3c814fb9e5902f58d12d7da0a6dd035dc4709e084f2feaa4f38bc602432f2ff2cba337fe8296b36a305db2158b556d153a2e25ebcc10ba68b4e04df6128150523f7aec8d173b67be7f48db969a73b08221ef6e6b5d4fa43f56b4f9fa", 0xe2, 0xb243}, {&(0x7f0000000240)="8a08a78b20c2686647d321482d74e3d7e977e56285432d48d74a10bc84fbad09c8eaf5b5271a802cab98bc7e98c0856ae3f2c898cf41011a62dbe394ef1f2ae103", 0x41, 0x6}, {&(0x7f00000002c0)="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", 0x1000, 0xffffffffffff2274}, {&(0x7f00000012c0)="ef54c88f194d9fa4e919ba7a724c6368bccd1ad100eb461ed9", 0x19, 0x100000000}], 0x10000, &(0x7f0000001380)={[{'/dev/fb0\x00'}, {'+#\\-*!\\'}, {'&{'}, {'/dev/fb0\x00'}, {'/dev/fb0\x00'}, {'\xe2-\xdd'}, {'\\'}, {}, {'/dev/fb0\x00'}], [{@euid_gt}]}) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0xa, &(0x7f0000001400)=@raw=[@call={0x85, 0x0, 0x0, 0xa2}, @call={0x85, 0x0, 0x0, 0x1f}, @func, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @initr0, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}], &(0x7f0000001480)='GPL\x00', 0x7, 0xf5, &(0x7f00000014c0)=""/245, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001600)={0x1, 0x7, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001640)=[0x1]}, 0x80)
dup2(r0, r1)

02:05:17 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000000008007f0000000000000000000a005b7d00000000050021000000000000000000040007000000000000000000020000ffffffffffffff0000010000000000"], 0x40}}, 0x0)

02:05:17 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000140)=0x4)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x4821, 0x0)
dup2(r2, r1)

02:05:17 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(0xffffffffffffffff, r0)

02:05:17 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x470241, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:17 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r3 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil)
shmctl$IPC_RMID(r3, 0x0)
shmctl$IPC_RMID(r3, 0x0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8fd0631a81008ff84c95fb14"], 0x24}}, 0x0)

[ 1754.375075] orangefs_mount: mount request failed with -4
02:05:17 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000140)=0x4) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x4821, 0x0)
dup2(r2, r1)

02:05:17 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r0, 0xffffffffffffffff)

02:05:17 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r3 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil)
shmctl$IPC_RMID(r3, 0x0)
shmctl$IPC_RMID(r3, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8fd0631a81008ff84c95fb14"], 0x24}}, 0x0)

02:05:17 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000000008007f0000000000000000000a005b7d00000000050021000000000000000000040007000000000000000000020000ffffffffffffff0000010000000000"], 0x40}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000000008007f0000000000000000000a005b7d00000000050021000000000000000000040007000000000000000000020000ffffffffffffff0000010000000000"], 0x40}}, 0x0) (async)

[ 1754.497130] nbd: must specify an index to disconnect
02:05:17 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000140)=0x4)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x4821, 0x0)
dup2(r2, r1)

02:05:17 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r0, 0xffffffffffffffff)

[ 1754.623250] nbd: must specify an index to disconnect
[ 1754.631671] nbd: must specify an index to disconnect
02:05:18 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000140)=0x4) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x4821, 0x0) (rerun: 64)
dup2(r2, r1)

02:05:18 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async, rerun: 64)
r3 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil)
shmctl$IPC_RMID(r3, 0x0)
shmctl$IPC_RMID(r3, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8fd0631a81008ff84c95fb14"], 0x24}}, 0x0)

02:05:18 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={<r4=>r3, 0x100000005, 0x45c3, 0x2})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000100)=[@acquire_done], 0x94, 0x0, &(0x7f0000000140)="a2f93f6a64777eaf88f5da0053b32fc5e595c6a042c1af312413d03ff9d8d2402d5ed230e227f8b27f03de21e830dd3d9eb49895baf123e51899b3e75c31e99bb9a2f195ddf44950a7fd4f060538883c38727b9d54208f778cd3dd65d039e05b9ac64faf67259f242c7d77f1cb1b5bae25d1f23379fc64c49cf39e850db719a0a191006a881c40013b7170f721ce96579f7a7c7c"})
r5 = semget$private(0x0, 0x4, 0x10)
semctl$GETVAL(r5, 0x2, 0xc, &(0x7f0000000240)=""/56)

02:05:18 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000000008007f0000000000000000000a005b7d00000000050021000000000000000000040007000000000000000000020000ffffffffffffff0000010000000000"], 0x40}}, 0x0)

02:05:18 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r0, 0xffffffffffffffff)

02:05:18 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000140)=0x4)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x4821, 0x0)
dup2(r2, r1)

[ 1755.422973] orangefs_mount: mount request failed with -4
02:05:18 executing program 5:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)

02:05:18 executing program 5:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(0xffffffffffffffff, r0)

[ 1755.508616] nbd: must specify an index to disconnect
02:05:18 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r4, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000040)=0x1)
dup2(r2, r0)

02:05:18 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={<r4=>r3, 0x100000005, 0x45c3, 0x2})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000100)=[@acquire_done], 0x94, 0x0, &(0x7f0000000140)="a2f93f6a64777eaf88f5da0053b32fc5e595c6a042c1af312413d03ff9d8d2402d5ed230e227f8b27f03de21e830dd3d9eb49895baf123e51899b3e75c31e99bb9a2f195ddf44950a7fd4f060538883c38727b9d54208f778cd3dd65d039e05b9ac64faf67259f242c7d77f1cb1b5bae25d1f23379fc64c49cf39e850db719a0a191006a881c40013b7170f721ce96579f7a7c7c"}) (async, rerun: 64)
r5 = semget$private(0x0, 0x4, 0x10) (rerun: 64)
semctl$GETVAL(r5, 0x2, 0xc, &(0x7f0000000240)=""/56)

02:05:18 executing program 2:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x7)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1}, 0x14}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'})
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x400002, 0x0)
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, 0x0)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x8c, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r7}, {0x8, 0x1, r0}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 't/-\xed'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x246}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x8c}}, 0x21400)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4f060000", @ANYRES16=r9, @ANYBLOB="000128bd7000fcdbdf250100000008000100000000000400"/34], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4)

02:05:18 executing program 5:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(0xffffffffffffffff, r0)

02:05:18 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000040))

02:05:18 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:18 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r4, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000040)=0x1)
dup2(r2, r0)

02:05:18 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={<r4=>r3, 0x100000005, 0x45c3, 0x2})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000100)=[@acquire_done], 0x94, 0x0, &(0x7f0000000140)="a2f93f6a64777eaf88f5da0053b32fc5e595c6a042c1af312413d03ff9d8d2402d5ed230e227f8b27f03de21e830dd3d9eb49895baf123e51899b3e75c31e99bb9a2f195ddf44950a7fd4f060538883c38727b9d54208f778cd3dd65d039e05b9ac64faf67259f242c7d77f1cb1b5bae25d1f23379fc64c49cf39e850db719a0a191006a881c40013b7170f721ce96579f7a7c7c"}) (async)
r5 = semget$private(0x0, 0x4, 0x10)
semctl$GETVAL(r5, 0x2, 0xc, &(0x7f0000000240)=""/56)

02:05:18 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000040))
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000040)) (async)

02:05:18 executing program 2:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x7)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1}, 0x14}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'})
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x400002, 0x0)
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, 0x0)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x8c, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r7}, {0x8, 0x1, r0}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 't/-\xed'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x246}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x8c}}, 0x21400)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4f060000", @ANYRES16=r9, @ANYBLOB="000128bd7000fcdbdf250100000008000100000000000400"/34], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) (async)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x7) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) (async)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1}, 0x14}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) (async)
openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x400002, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x8c, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r7}, {0x8, 0x1, r0}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 't/-\xed'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x246}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x8c}}, 0x21400) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) (async)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4f060000", @ANYRES16=r9, @ANYBLOB="000128bd7000fcdbdf250100000008000100000000000400"/34], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async)

[ 1755.678975] nbd: must specify an index to disconnect
02:05:19 executing program 5:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(0xffffffffffffffff, r0)

02:05:19 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)

02:05:19 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r4, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000040)=0x1)
dup2(r2, r0)

02:05:19 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000040))

02:05:19 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0)
dup2(r1, r0)

[ 1755.771189] nbd: must specify an index to disconnect
02:05:19 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000040)=0x1)

02:05:19 executing program 2:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x7)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1}, 0x14}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'})
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x400002, 0x0)
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, 0x0)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x8c, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r7}, {0x8, 0x1, r0}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 't/-\xed'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x246}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x8c}}, 0x21400)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4f060000", @ANYRES16=r9, @ANYBLOB="000128bd7000fcdbdf250100000008000100000000000400"/34], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) (async)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x7) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) (async)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1}, 0x14}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) (async)
openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x400002, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x8c, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r7}, {0x8, 0x1, r0}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 't/-\xed'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x246}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x8c}}, 0x21400) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) (async)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4f060000", @ANYRES16=r9, @ANYBLOB="000128bd7000fcdbdf250100000008000100000000000400"/34], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async)

02:05:19 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0) (async)
dup2(r1, r0)

02:05:19 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:19 executing program 5:
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r0, 0xffffffffffffffff)

[ 1755.889811] nbd: must specify an index to disconnect
02:05:19 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)

02:05:19 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
io_setup(0x5, &(0x7f0000001900)=<r3=>0x0)
io_cancel(r3, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/xt_recent', 0x40100, 0x6)
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, 0x0)
r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x123000, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00', 0x0, 0x8}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r8=>r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b./file0\x00'])
r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x3e3ce3220747e9ab, 0xa, &(0x7f0000000b40)=ANY=[@ANYBLOB="0822080004000000950028e10000000000008520000004000000181b0000", @ANYRES32=r7, @ANYBLOB="00000000000000000201800003000000182a0000", @ANYRES32, @ANYBLOB="0000000000000080"], &(0x7f0000000900)='GPL\x00', 0x81, 0x87, &(0x7f0000000c00)=""/135, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0xf, 0x7, 0xffffffb2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, r6, r9, r2, r8, r6]}, 0x80)
io_submit(r3, 0xb, &(0x7f0000000fc0)=[&(0x7f0000000e00)={0x0, 0x0, 0x0, 0x6, 0x7, r4, &(0x7f0000000080)="49904dd184b15f450b4769fcf7fe606dc72101b5e7e8664bd3f6a89d9ad6e7d2d64f727f28881b98193e08476a8ce70560dea5feb4cda01b0cf242e7ce3a2868f2c4ce6a96b2000e5bc2f822eee3b1636849daf42c3519e67c86fe86297a64ae1545c10b5648ab6c0c54073049ba672e043648b5c1d9d54f98ef1f2cde3e29032d695f697f9e54571b370b30aee76526a8ca164926cdd1d069790bd279f0a1615f7753bd4122411a7551b6623edd04d4481325089b63199f933c987b7f3ac76785717c97e93b61", 0xc7, 0x3, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000e40)="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", 0x13f, 0x100, 0x0, 0x1, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000000380)="1437957cb5d5250bbbd129d9db90d3eef71cca6ee3afd428cf0370dfc128667467bed53ea5911c901d7a9da75b78de804fa5d24726792285412b19e659726a4009cdf534dc633ef08e75773ae6a2c4ad4e787d3723ce85eb3ddde2d7c89910f654db12a9bbd82becd230c278fa3aa09f4e0500000064b8920703cfafe4f571f0066ec10f59a828f133353f9872fb12b41ca0cdb1edc157207500"/164, 0xa4, 0x8, 0x0, 0x4, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0xfff, 0xffffffffffffffff, &(0x7f0000000480)="5847e9a4fe6955f0a4cc54b1bad792c1c834e68e3cd4349a34d54822ab993b7f5a1d35f1b2a7efe5a82618719d34d78be2d7c8181147254371423d99a06f909413ef5d984ffbc84a836528f76c674e658be0021774b716c6434ac18fb41542979bfcacb70b4a196210b3a13101f7dec447df0dd7960e98c70262dfdf40d999e0236e998472e4487d72ff422e85c314aee025d8d28956a3e7070159c7d17fe511c4cb5e728773d53fd55d08c0ad3836b88b2e291b992a6b0d9c60cddf351f209109f0d71a1acc2e8ee5334b7d5cd8e743da78057b8928bad4b30a0bb4a63a", 0xde, 0x7, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0xfa0, r7, &(0x7f00000005c0)="22673295d30aed2f436f6a2ca9062e54dc135f9a3749d8ba42cf8d4a128eaf5c65619ac00e44bbd068de26e4", 0x2c, 0x4, 0x0, 0x0, r7}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0x80, r1, &(0x7f0000000700)="bdac999b321e2341c4cfa5fbbf55110388013e2f18ad853b8179e686da9533e9bde8120a97ba607f1d55fe448f88cdc3772256816458ea65b9627476efff0a9803c6efeb9e6fa75dda193f468239829d534c4b9da8af592c4350c4063f9b8a3de5dc565f22ab25bd802962abe119029b6e41611e94be011ce49c36d14d72426f27dbd40c82a6faca2e57e66cc0b0946cb7b45178efb658cc2d73ebf643490ff7f6eb1146297506df8eacf0f694e6da31ee387ad77be08173dcd7a8982295c3b734f4dc1d5d3c43c242bfa5f88f39a0c3a52eda4a130413ba971fdd254d71388b921da8eb6a", 0xe5, 0x400000000000, 0x0, 0x2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0xac, r2, &(0x7f0000000840)="b6b60e5791c094fbef2edf5733d7b2794076b5814deba4", 0x17, 0x7, 0x0, 0x1, r8}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x9, r1, &(0x7f00000001c0)="927b042d3f4a56d8fa5b0f20a1ac3edf17de4e3de7f304ca58bf7044a91b647b4d813bb774e170b6690e1b19cae541b2566198871fa300e03d00a8b895c67e86d05e017b242ba0ef5fcc821f6d00b7984a7de2003409a90000", 0x59, 0x1, 0x0, 0x0, r2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f00000009c0)="49ceb363edaabfecd51566c724626a83e1a2e8b1a95ae1dbdfdae3f7d77061b4484543ca5cc0254e0eb6441fdc0406b8e4b06b8e52e25c3507c6f3c2447b35ffe6de0c882657f0229ccd37a1c326fa72debf6fe778962f12a55d425dd3f34c26306bc4fb0f52394dfc6c1adf87ee94a877601e470fb7aa0832546d3f6955edb05c9199a2f99adfe9e3d00d529963e5245cd1f3a69a0001f32eae2350810f257ef51b6531a4353f1e47f6fcc322757db1de9a057792d94c8e5818f517f4", 0xbd, 0x10000}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f0000000240)="35ca375410c46399322b9ebf7164bd3195797d53016c65b6383f5b36ed8edc8a3f3fc7aaf6391b74d8980aaa1306190c783ec3a0f574dec1944fc416fad6dff1831c883e5a474c921ba6800e1d172457f9dde0c2c785cd6bdc513d83af30a07061c64536", 0x64, 0xfffffffffffff801, 0x0, 0x2, r9}, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000940)="7bd3cd79a3d9aa5973bff9ef7bf7ce04aa141899f0b0ecc7", 0x18, 0x7f, 0x0, 0x3}])
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r10, 0x40, 0xf2ef, 0x7ff})

02:05:19 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:19 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0) (async)
dup2(r1, r0) (async)

02:05:19 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r6, 0x400, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800)

02:05:19 executing program 5:
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r0, 0xffffffffffffffff)

02:05:19 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

[ 1756.010542] nbd: must specify an index to disconnect
02:05:19 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async)

02:05:19 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80140, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, 0x0)
write$P9_RGETATTR(r6, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x1080, {0x20}, 0x98, 0xee00, 0xee00, 0x4, 0x7fffffff, 0x80000000, 0x5, 0x444, 0x100, 0x3, 0x3, 0x2, 0x7, 0x3, 0x8, 0x1f, 0x0, 0x2}}, 0xa0)
dup2(r4, r1)

02:05:19 executing program 5:
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r0, 0xffffffffffffffff)

02:05:19 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0) (async)
io_setup(0x5, &(0x7f0000001900)=<r3=>0x0)
io_cancel(r3, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/xt_recent', 0x40100, 0x6) (async)
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, 0x0) (async)
r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x123000, 0x0) (async)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00', 0x0, 0x8}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r8=>r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b./file0\x00']) (async)
r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x3e3ce3220747e9ab, 0xa, &(0x7f0000000b40)=ANY=[@ANYBLOB="0822080004000000950028e10000000000008520000004000000181b0000", @ANYRES32=r7, @ANYBLOB="00000000000000000201800003000000182a0000", @ANYRES32, @ANYBLOB="0000000000000080"], &(0x7f0000000900)='GPL\x00', 0x81, 0x87, &(0x7f0000000c00)=""/135, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0xf, 0x7, 0xffffffb2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, r6, r9, r2, r8, r6]}, 0x80)
io_submit(r3, 0xb, &(0x7f0000000fc0)=[&(0x7f0000000e00)={0x0, 0x0, 0x0, 0x6, 0x7, r4, &(0x7f0000000080)="49904dd184b15f450b4769fcf7fe606dc72101b5e7e8664bd3f6a89d9ad6e7d2d64f727f28881b98193e08476a8ce70560dea5feb4cda01b0cf242e7ce3a2868f2c4ce6a96b2000e5bc2f822eee3b1636849daf42c3519e67c86fe86297a64ae1545c10b5648ab6c0c54073049ba672e043648b5c1d9d54f98ef1f2cde3e29032d695f697f9e54571b370b30aee76526a8ca164926cdd1d069790bd279f0a1615f7753bd4122411a7551b6623edd04d4481325089b63199f933c987b7f3ac76785717c97e93b61", 0xc7, 0x3, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000e40)="1f86b8b6ade4f9212c457924f754795d1851c8510d2fad47e38bddd7eff6df209b8800b373633109d9b972592b3bbfffb1c66023b9d3ed52f8c6986a2436dc49d4583da46dc7e0297f2cfc1131bbe9b62ffd43884f2c05aa967c9c069d555469a07e09066026f555310d598af32c2009998bde2a812425d464f7e5a48a81dabef9fe8c3fc96808bc9f28c866793b91b65f3f2edc64f903377d0332cae4425538cf2066d30af0c4693dfea98fa3ed9e406545b86e76d5e1a39b85d4f0c83cd71ff13bda7c0d0ec8fab572c97ba40c96479f0476bd816a019cfce020c72b7acd9caa5639147b346159484597bba18852d8789907d430d372a368742897479d24ec10e95db9a6a2da5f80a4dd6851400640800b6dd59ceede44cf521358f6d8fe49659c0feeb56bdd2deed6787508046bfcd639dcd834a9cbfdb01e723e85faaf", 0x13f, 0x100, 0x0, 0x1, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000000380)="1437957cb5d5250bbbd129d9db90d3eef71cca6ee3afd428cf0370dfc128667467bed53ea5911c901d7a9da75b78de804fa5d24726792285412b19e659726a4009cdf534dc633ef08e75773ae6a2c4ad4e787d3723ce85eb3ddde2d7c89910f654db12a9bbd82becd230c278fa3aa09f4e0500000064b8920703cfafe4f571f0066ec10f59a828f133353f9872fb12b41ca0cdb1edc157207500"/164, 0xa4, 0x8, 0x0, 0x4, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0xfff, 0xffffffffffffffff, &(0x7f0000000480)="5847e9a4fe6955f0a4cc54b1bad792c1c834e68e3cd4349a34d54822ab993b7f5a1d35f1b2a7efe5a82618719d34d78be2d7c8181147254371423d99a06f909413ef5d984ffbc84a836528f76c674e658be0021774b716c6434ac18fb41542979bfcacb70b4a196210b3a13101f7dec447df0dd7960e98c70262dfdf40d999e0236e998472e4487d72ff422e85c314aee025d8d28956a3e7070159c7d17fe511c4cb5e728773d53fd55d08c0ad3836b88b2e291b992a6b0d9c60cddf351f209109f0d71a1acc2e8ee5334b7d5cd8e743da78057b8928bad4b30a0bb4a63a", 0xde, 0x7, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0xfa0, r7, &(0x7f00000005c0)="22673295d30aed2f436f6a2ca9062e54dc135f9a3749d8ba42cf8d4a128eaf5c65619ac00e44bbd068de26e4", 0x2c, 0x4, 0x0, 0x0, r7}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0x80, r1, &(0x7f0000000700)="bdac999b321e2341c4cfa5fbbf55110388013e2f18ad853b8179e686da9533e9bde8120a97ba607f1d55fe448f88cdc3772256816458ea65b9627476efff0a9803c6efeb9e6fa75dda193f468239829d534c4b9da8af592c4350c4063f9b8a3de5dc565f22ab25bd802962abe119029b6e41611e94be011ce49c36d14d72426f27dbd40c82a6faca2e57e66cc0b0946cb7b45178efb658cc2d73ebf643490ff7f6eb1146297506df8eacf0f694e6da31ee387ad77be08173dcd7a8982295c3b734f4dc1d5d3c43c242bfa5f88f39a0c3a52eda4a130413ba971fdd254d71388b921da8eb6a", 0xe5, 0x400000000000, 0x0, 0x2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0xac, r2, &(0x7f0000000840)="b6b60e5791c094fbef2edf5733d7b2794076b5814deba4", 0x17, 0x7, 0x0, 0x1, r8}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x9, r1, &(0x7f00000001c0)="927b042d3f4a56d8fa5b0f20a1ac3edf17de4e3de7f304ca58bf7044a91b647b4d813bb774e170b6690e1b19cae541b2566198871fa300e03d00a8b895c67e86d05e017b242ba0ef5fcc821f6d00b7984a7de2003409a90000", 0x59, 0x1, 0x0, 0x0, r2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f00000009c0)="49ceb363edaabfecd51566c724626a83e1a2e8b1a95ae1dbdfdae3f7d77061b4484543ca5cc0254e0eb6441fdc0406b8e4b06b8e52e25c3507c6f3c2447b35ffe6de0c882657f0229ccd37a1c326fa72debf6fe778962f12a55d425dd3f34c26306bc4fb0f52394dfc6c1adf87ee94a877601e470fb7aa0832546d3f6955edb05c9199a2f99adfe9e3d00d529963e5245cd1f3a69a0001f32eae2350810f257ef51b6531a4353f1e47f6fcc322757db1de9a057792d94c8e5818f517f4", 0xbd, 0x10000}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f0000000240)="35ca375410c46399322b9ebf7164bd3195797d53016c65b6383f5b36ed8edc8a3f3fc7aaf6391b74d8980aaa1306190c783ec3a0f574dec1944fc416fad6dff1831c883e5a474c921ba6800e1d172457f9dde0c2c785cd6bdc513d83af30a07061c64536", 0x64, 0xfffffffffffff801, 0x0, 0x2, r9}, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000940)="7bd3cd79a3d9aa5973bff9ef7bf7ce04aa141899f0b0ecc7", 0x18, 0x7f, 0x0, 0x3}]) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r10, 0x40, 0xf2ef, 0x7ff})

02:05:19 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r6, 0x400, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) (async)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) (async)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r6, 0x400, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async)

02:05:19 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

[ 1756.101662] nbd: must specify a size in bytes for the device
[ 1756.133950] nbd: must specify an index to disconnect
02:05:19 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80140, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, 0x0)
write$P9_RGETATTR(r6, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x1080, {0x20}, 0x98, 0xee00, 0xee00, 0x4, 0x7fffffff, 0x80000000, 0x5, 0x444, 0x100, 0x3, 0x3, 0x2, 0x7, 0x3, 0x8, 0x1f, 0x0, 0x2}}, 0xa0) (async)
dup2(r4, r1)

[ 1756.166323] nbd: must specify an index to disconnect
02:05:19 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async)

02:05:19 executing program 5:
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r0, 0xffffffffffffffff)

[ 1756.198338] nbd: must specify a size in bytes for the device
02:05:19 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) (async)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r6, 0x400, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800)

02:05:19 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:19 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={<r4=>r3, 0x100000005, 0x45c3, 0x2})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000100)=[@acquire_done], 0x94, 0x0, &(0x7f0000000140)="a2f93f6a64777eaf88f5da0053b32fc5e595c6a042c1af312413d03ff9d8d2402d5ed230e227f8b27f03de21e830dd3d9eb49895baf123e51899b3e75c31e99bb9a2f195ddf44950a7fd4f060538883c38727b9d54208f778cd3dd65d039e05b9ac64faf67259f242c7d77f1cb1b5bae25d1f23379fc64c49cf39e850db719a0a191006a881c40013b7170f721ce96579f7a7c7c"})
r5 = semget$private(0x0, 0x4, 0x10)
semctl$GETVAL(r5, 0x2, 0xc, &(0x7f0000000240)=""/56)

02:05:19 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
io_setup(0x5, &(0x7f0000001900)=<r3=>0x0)
io_cancel(r3, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/xt_recent', 0x40100, 0x6)
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, 0x0)
r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x123000, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00', 0x0, 0x8}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r8=>r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b./file0\x00'])
r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x3e3ce3220747e9ab, 0xa, &(0x7f0000000b40)=ANY=[@ANYBLOB="0822080004000000950028e10000000000008520000004000000181b0000", @ANYRES32=r7, @ANYBLOB="00000000000000000201800003000000182a0000", @ANYRES32, @ANYBLOB="0000000000000080"], &(0x7f0000000900)='GPL\x00', 0x81, 0x87, &(0x7f0000000c00)=""/135, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0xf, 0x7, 0xffffffb2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, r6, r9, r2, r8, r6]}, 0x80)
io_submit(r3, 0xb, &(0x7f0000000fc0)=[&(0x7f0000000e00)={0x0, 0x0, 0x0, 0x6, 0x7, r4, &(0x7f0000000080)="49904dd184b15f450b4769fcf7fe606dc72101b5e7e8664bd3f6a89d9ad6e7d2d64f727f28881b98193e08476a8ce70560dea5feb4cda01b0cf242e7ce3a2868f2c4ce6a96b2000e5bc2f822eee3b1636849daf42c3519e67c86fe86297a64ae1545c10b5648ab6c0c54073049ba672e043648b5c1d9d54f98ef1f2cde3e29032d695f697f9e54571b370b30aee76526a8ca164926cdd1d069790bd279f0a1615f7753bd4122411a7551b6623edd04d4481325089b63199f933c987b7f3ac76785717c97e93b61", 0xc7, 0x3, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000e40)="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", 0x13f, 0x100, 0x0, 0x1, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000000380)="1437957cb5d5250bbbd129d9db90d3eef71cca6ee3afd428cf0370dfc128667467bed53ea5911c901d7a9da75b78de804fa5d24726792285412b19e659726a4009cdf534dc633ef08e75773ae6a2c4ad4e787d3723ce85eb3ddde2d7c89910f654db12a9bbd82becd230c278fa3aa09f4e0500000064b8920703cfafe4f571f0066ec10f59a828f133353f9872fb12b41ca0cdb1edc157207500"/164, 0xa4, 0x8, 0x0, 0x4, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0xfff, 0xffffffffffffffff, &(0x7f0000000480)="5847e9a4fe6955f0a4cc54b1bad792c1c834e68e3cd4349a34d54822ab993b7f5a1d35f1b2a7efe5a82618719d34d78be2d7c8181147254371423d99a06f909413ef5d984ffbc84a836528f76c674e658be0021774b716c6434ac18fb41542979bfcacb70b4a196210b3a13101f7dec447df0dd7960e98c70262dfdf40d999e0236e998472e4487d72ff422e85c314aee025d8d28956a3e7070159c7d17fe511c4cb5e728773d53fd55d08c0ad3836b88b2e291b992a6b0d9c60cddf351f209109f0d71a1acc2e8ee5334b7d5cd8e743da78057b8928bad4b30a0bb4a63a", 0xde, 0x7, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0xfa0, r7, &(0x7f00000005c0)="22673295d30aed2f436f6a2ca9062e54dc135f9a3749d8ba42cf8d4a128eaf5c65619ac00e44bbd068de26e4", 0x2c, 0x4, 0x0, 0x0, r7}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0x80, r1, &(0x7f0000000700)="bdac999b321e2341c4cfa5fbbf55110388013e2f18ad853b8179e686da9533e9bde8120a97ba607f1d55fe448f88cdc3772256816458ea65b9627476efff0a9803c6efeb9e6fa75dda193f468239829d534c4b9da8af592c4350c4063f9b8a3de5dc565f22ab25bd802962abe119029b6e41611e94be011ce49c36d14d72426f27dbd40c82a6faca2e57e66cc0b0946cb7b45178efb658cc2d73ebf643490ff7f6eb1146297506df8eacf0f694e6da31ee387ad77be08173dcd7a8982295c3b734f4dc1d5d3c43c242bfa5f88f39a0c3a52eda4a130413ba971fdd254d71388b921da8eb6a", 0xe5, 0x400000000000, 0x0, 0x2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0xac, r2, &(0x7f0000000840)="b6b60e5791c094fbef2edf5733d7b2794076b5814deba4", 0x17, 0x7, 0x0, 0x1, r8}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x9, r1, &(0x7f00000001c0)="927b042d3f4a56d8fa5b0f20a1ac3edf17de4e3de7f304ca58bf7044a91b647b4d813bb774e170b6690e1b19cae541b2566198871fa300e03d00a8b895c67e86d05e017b242ba0ef5fcc821f6d00b7984a7de2003409a90000", 0x59, 0x1, 0x0, 0x0, r2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f00000009c0)="49ceb363edaabfecd51566c724626a83e1a2e8b1a95ae1dbdfdae3f7d77061b4484543ca5cc0254e0eb6441fdc0406b8e4b06b8e52e25c3507c6f3c2447b35ffe6de0c882657f0229ccd37a1c326fa72debf6fe778962f12a55d425dd3f34c26306bc4fb0f52394dfc6c1adf87ee94a877601e470fb7aa0832546d3f6955edb05c9199a2f99adfe9e3d00d529963e5245cd1f3a69a0001f32eae2350810f257ef51b6531a4353f1e47f6fcc322757db1de9a057792d94c8e5818f517f4", 0xbd, 0x10000}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f0000000240)="35ca375410c46399322b9ebf7164bd3195797d53016c65b6383f5b36ed8edc8a3f3fc7aaf6391b74d8980aaa1306190c783ec3a0f574dec1944fc416fad6dff1831c883e5a474c921ba6800e1d172457f9dde0c2c785cd6bdc513d83af30a07061c64536", 0x64, 0xfffffffffffff801, 0x0, 0x2, r9}, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000940)="7bd3cd79a3d9aa5973bff9ef7bf7ce04aa141899f0b0ecc7", 0x18, 0x7f, 0x0, 0x3}])
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r10, 0x40, 0xf2ef, 0x7ff})
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)
io_setup(0x5, &(0x7f0000001900)) (async)
io_cancel(r3, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/xt_recent', 0x40100, 0x6) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x123000, 0x0) (async)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00', 0x0, 0x8}, 0x10) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b./file0\x00']) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x3e3ce3220747e9ab, 0xa, &(0x7f0000000b40)=ANY=[@ANYBLOB="0822080004000000950028e10000000000008520000004000000181b0000", @ANYRES32=r7, @ANYBLOB="00000000000000000201800003000000182a0000", @ANYRES32, @ANYBLOB="0000000000000080"], &(0x7f0000000900)='GPL\x00', 0x81, 0x87, &(0x7f0000000c00)=""/135, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0xf, 0x7, 0xffffffb2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, r6, r9, r2, r8, r6]}, 0x80) (async)
io_submit(r3, 0xb, &(0x7f0000000fc0)=[&(0x7f0000000e00)={0x0, 0x0, 0x0, 0x6, 0x7, r4, &(0x7f0000000080)="49904dd184b15f450b4769fcf7fe606dc72101b5e7e8664bd3f6a89d9ad6e7d2d64f727f28881b98193e08476a8ce70560dea5feb4cda01b0cf242e7ce3a2868f2c4ce6a96b2000e5bc2f822eee3b1636849daf42c3519e67c86fe86297a64ae1545c10b5648ab6c0c54073049ba672e043648b5c1d9d54f98ef1f2cde3e29032d695f697f9e54571b370b30aee76526a8ca164926cdd1d069790bd279f0a1615f7753bd4122411a7551b6623edd04d4481325089b63199f933c987b7f3ac76785717c97e93b61", 0xc7, 0x3, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000000e40)="1f86b8b6ade4f9212c457924f754795d1851c8510d2fad47e38bddd7eff6df209b8800b373633109d9b972592b3bbfffb1c66023b9d3ed52f8c6986a2436dc49d4583da46dc7e0297f2cfc1131bbe9b62ffd43884f2c05aa967c9c069d555469a07e09066026f555310d598af32c2009998bde2a812425d464f7e5a48a81dabef9fe8c3fc96808bc9f28c866793b91b65f3f2edc64f903377d0332cae4425538cf2066d30af0c4693dfea98fa3ed9e406545b86e76d5e1a39b85d4f0c83cd71ff13bda7c0d0ec8fab572c97ba40c96479f0476bd816a019cfce020c72b7acd9caa5639147b346159484597bba18852d8789907d430d372a368742897479d24ec10e95db9a6a2da5f80a4dd6851400640800b6dd59ceede44cf521358f6d8fe49659c0feeb56bdd2deed6787508046bfcd639dcd834a9cbfdb01e723e85faaf", 0x13f, 0x100, 0x0, 0x1, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000000380)="1437957cb5d5250bbbd129d9db90d3eef71cca6ee3afd428cf0370dfc128667467bed53ea5911c901d7a9da75b78de804fa5d24726792285412b19e659726a4009cdf534dc633ef08e75773ae6a2c4ad4e787d3723ce85eb3ddde2d7c89910f654db12a9bbd82becd230c278fa3aa09f4e0500000064b8920703cfafe4f571f0066ec10f59a828f133353f9872fb12b41ca0cdb1edc157207500"/164, 0xa4, 0x8, 0x0, 0x4, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0xfff, 0xffffffffffffffff, &(0x7f0000000480)="5847e9a4fe6955f0a4cc54b1bad792c1c834e68e3cd4349a34d54822ab993b7f5a1d35f1b2a7efe5a82618719d34d78be2d7c8181147254371423d99a06f909413ef5d984ffbc84a836528f76c674e658be0021774b716c6434ac18fb41542979bfcacb70b4a196210b3a13101f7dec447df0dd7960e98c70262dfdf40d999e0236e998472e4487d72ff422e85c314aee025d8d28956a3e7070159c7d17fe511c4cb5e728773d53fd55d08c0ad3836b88b2e291b992a6b0d9c60cddf351f209109f0d71a1acc2e8ee5334b7d5cd8e743da78057b8928bad4b30a0bb4a63a", 0xde, 0x7, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0xfa0, r7, &(0x7f00000005c0)="22673295d30aed2f436f6a2ca9062e54dc135f9a3749d8ba42cf8d4a128eaf5c65619ac00e44bbd068de26e4", 0x2c, 0x4, 0x0, 0x0, r7}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0x80, r1, &(0x7f0000000700)="bdac999b321e2341c4cfa5fbbf55110388013e2f18ad853b8179e686da9533e9bde8120a97ba607f1d55fe448f88cdc3772256816458ea65b9627476efff0a9803c6efeb9e6fa75dda193f468239829d534c4b9da8af592c4350c4063f9b8a3de5dc565f22ab25bd802962abe119029b6e41611e94be011ce49c36d14d72426f27dbd40c82a6faca2e57e66cc0b0946cb7b45178efb658cc2d73ebf643490ff7f6eb1146297506df8eacf0f694e6da31ee387ad77be08173dcd7a8982295c3b734f4dc1d5d3c43c242bfa5f88f39a0c3a52eda4a130413ba971fdd254d71388b921da8eb6a", 0xe5, 0x400000000000, 0x0, 0x2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0xac, r2, &(0x7f0000000840)="b6b60e5791c094fbef2edf5733d7b2794076b5814deba4", 0x17, 0x7, 0x0, 0x1, r8}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x9, r1, &(0x7f00000001c0)="927b042d3f4a56d8fa5b0f20a1ac3edf17de4e3de7f304ca58bf7044a91b647b4d813bb774e170b6690e1b19cae541b2566198871fa300e03d00a8b895c67e86d05e017b242ba0ef5fcc821f6d00b7984a7de2003409a90000", 0x59, 0x1, 0x0, 0x0, r2}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f00000009c0)="49ceb363edaabfecd51566c724626a83e1a2e8b1a95ae1dbdfdae3f7d77061b4484543ca5cc0254e0eb6441fdc0406b8e4b06b8e52e25c3507c6f3c2447b35ffe6de0c882657f0229ccd37a1c326fa72debf6fe778962f12a55d425dd3f34c26306bc4fb0f52394dfc6c1adf87ee94a877601e470fb7aa0832546d3f6955edb05c9199a2f99adfe9e3d00d529963e5245cd1f3a69a0001f32eae2350810f257ef51b6531a4353f1e47f6fcc322757db1de9a057792d94c8e5818f517f4", 0xbd, 0x10000}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1f, 0xffffffffffffffff, &(0x7f0000000240)="35ca375410c46399322b9ebf7164bd3195797d53016c65b6383f5b36ed8edc8a3f3fc7aaf6391b74d8980aaa1306190c783ec3a0f574dec1944fc416fad6dff1831c883e5a474c921ba6800e1d172457f9dde0c2c785cd6bdc513d83af30a07061c64536", 0x64, 0xfffffffffffff801, 0x0, 0x2, r9}, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000940)="7bd3cd79a3d9aa5973bff9ef7bf7ce04aa141899f0b0ecc7", 0x18, 0x7f, 0x0, 0x3}]) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r10, 0x40, 0xf2ef, 0x7ff}) (async)

02:05:19 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async, rerun: 64)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80140, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, 0x0) (async)
write$P9_RGETATTR(r6, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x1080, {0x20}, 0x98, 0xee00, 0xee00, 0x4, 0x7fffffff, 0x80000000, 0x5, 0x444, 0x100, 0x3, 0x3, 0x2, 0x7, 0x3, 0x8, 0x1f, 0x0, 0x2}}, 0xa0) (async, rerun: 64)
dup2(r4, r1) (rerun: 64)

[ 1756.302360] nbd: must specify an index to disconnect
[ 1756.320590] nbd: must specify a size in bytes for the device
[ 1756.337914] nbd: must specify an index to disconnect
02:05:19 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={<r4=>r3, 0x100000005, 0x45c3, 0x2})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000100)=[@acquire_done], 0x94, 0x0, &(0x7f0000000140)="a2f93f6a64777eaf88f5da0053b32fc5e595c6a042c1af312413d03ff9d8d2402d5ed230e227f8b27f03de21e830dd3d9eb49895baf123e51899b3e75c31e99bb9a2f195ddf44950a7fd4f060538883c38727b9d54208f778cd3dd65d039e05b9ac64faf67259f242c7d77f1cb1b5bae25d1f23379fc64c49cf39e850db719a0a191006a881c40013b7170f721ce96579f7a7c7c"})
r5 = semget$private(0x0, 0x4, 0x10)
semctl$GETVAL(r5, 0x2, 0xc, &(0x7f0000000240)=""/56)

02:05:19 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:19 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2, 0x9, 0xc6, 0x6, 0x0, 0x200, 0x10080, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x800}, 0x1700, 0x80000001, 0x6, 0x6, 0x400, 0xe4f, 0xfffa, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

02:05:19 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100000000000c00078008000100", @ANYRES32, @ANYBLOB="e6daa958c5b6ebbad74b"], 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040c0}, 0x1)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:19 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
r3 = semget$private(0x0, 0x2, 0x20)
semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000000000)=""/55)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000041}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
semctl$IPC_SET(r3, 0x0, 0x1, 0x0)
semctl$GETVAL(r3, 0x1, 0xc, &(0x7f00000000c0)=""/140)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)

02:05:19 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={<r4=>r3, 0x100000005, 0x45c3, 0x2})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000100)=[@acquire_done], 0x94, 0x0, &(0x7f0000000140)="a2f93f6a64777eaf88f5da0053b32fc5e595c6a042c1af312413d03ff9d8d2402d5ed230e227f8b27f03de21e830dd3d9eb49895baf123e51899b3e75c31e99bb9a2f195ddf44950a7fd4f060538883c38727b9d54208f778cd3dd65d039e05b9ac64faf67259f242c7d77f1cb1b5bae25d1f23379fc64c49cf39e850db719a0a191006a881c40013b7170f721ce96579f7a7c7c"})
r5 = semget$private(0x0, 0x4, 0x10)
semctl$GETVAL(r5, 0x2, 0xc, &(0x7f0000000240)=""/56)

02:05:19 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x62c802, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x28000000)
dup2(r1, r0)

02:05:19 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:19 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x62c802, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x28000000) (async)
dup2(r1, r0)

02:05:19 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={<r4=>r3, 0x100000005, 0x45c3, 0x2})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000100)=[@acquire_done], 0x94, 0x0, &(0x7f0000000140)="a2f93f6a64777eaf88f5da0053b32fc5e595c6a042c1af312413d03ff9d8d2402d5ed230e227f8b27f03de21e830dd3d9eb49895baf123e51899b3e75c31e99bb9a2f195ddf44950a7fd4f060538883c38727b9d54208f778cd3dd65d039e05b9ac64faf67259f242c7d77f1cb1b5bae25d1f23379fc64c49cf39e850db719a0a191006a881c40013b7170f721ce96579f7a7c7c"})
semget$private(0x0, 0x4, 0x10)

02:05:19 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2, 0x9, 0xc6, 0x6, 0x0, 0x200, 0x10080, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x800}, 0x1700, 0x80000001, 0x6, 0x6, 0x400, 0xe4f, 0xfffa, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

02:05:19 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

[ 1756.556778] nbd: must specify a size in bytes for the device
02:05:19 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100000000000c00078008000100", @ANYRES32, @ANYBLOB="e6daa958c5b6ebbad74b"], 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040c0}, 0x1)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01"], 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100000000000c00078008000100", @ANYRES32, @ANYBLOB="e6daa958c5b6ebbad74b"], 0x28}}, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040c0}, 0x1) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01"], 0x24}}, 0x0) (async)

02:05:19 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
r3 = semget$private(0x0, 0x2, 0x20)
semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000000000)=""/55) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000041}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async, rerun: 64)
semctl$IPC_SET(r3, 0x0, 0x1, 0x0) (async, rerun: 64)
semctl$GETVAL(r3, 0x1, 0xc, &(0x7f00000000c0)=""/140) (async, rerun: 64)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (rerun: 64)

02:05:19 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x62c802, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x28000000)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x62c802, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x28000000) (async)
dup2(r1, r0) (async)

[ 1756.596890] nbd: must specify an index to disconnect
02:05:19 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={<r4=>r3, 0x100000005, 0x45c3, 0x2})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000100)=[@acquire_done], 0x94, 0x0, &(0x7f0000000140)="a2f93f6a64777eaf88f5da0053b32fc5e595c6a042c1af312413d03ff9d8d2402d5ed230e227f8b27f03de21e830dd3d9eb49895baf123e51899b3e75c31e99bb9a2f195ddf44950a7fd4f060538883c38727b9d54208f778cd3dd65d039e05b9ac64faf67259f242c7d77f1cb1b5bae25d1f23379fc64c49cf39e850db719a0a191006a881c40013b7170f721ce96579f7a7c7c"})

02:05:19 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0) (async)
perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2, 0x9, 0xc6, 0x6, 0x0, 0x200, 0x10080, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x800}, 0x1700, 0x80000001, 0x6, 0x6, 0x400, 0xe4f, 0xfffa, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

[ 1756.690596] nbd: must specify an index to disconnect
02:05:19 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/event_source', 0x1, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, r1, 0x4}, 0x10)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r2, r0)
socketpair(0x1e, 0x80000, 0x9, &(0x7f00000000c0))

02:05:19 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x20012, r0, 0xbd000)
dup2(r1, r0)

02:05:20 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

[ 1756.714856] nbd: must specify an index to disconnect
[ 1756.734762] nbd: must specify an index to disconnect
[ 1756.748355] nbd: must specify a size in bytes for the device
02:05:20 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r3, 0x100000005, 0x45c3, 0x2})

02:05:20 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/event_source', 0x1, 0x10) (rerun: 64)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, r1, 0x4}, 0x10) (async, rerun: 32)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 32)
dup2(r2, r0) (async)
socketpair(0x1e, 0x80000, 0x9, &(0x7f00000000c0))

02:05:20 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100000000000c00078008000100", @ANYRES32, @ANYBLOB="e6daa958c5b6ebbad74b"], 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040c0}, 0x1) (async)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01"], 0x24}}, 0x0)

[ 1756.762175] nbd: must specify an index to disconnect
[ 1756.772725] nbd: must specify an index to disconnect
[ 1756.793134] nbd: must specify an index to disconnect
[ 1756.812459] nbd: must specify an index to disconnect
02:05:20 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x20012, r0, 0xbd000) (async)
dup2(r1, r0)

02:05:20 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

[ 1756.837524] nbd: must specify an index to disconnect
[ 1756.855454] nbd: must specify an index to disconnect
[ 1756.874392] nbd: must specify an index to disconnect
[ 1756.901447] nbd: must specify an index to disconnect
[ 1756.923404] nbd: must specify an index to disconnect
[ 1756.935421] nbd: must specify an index to disconnect
[ 1756.948306] nbd: must specify an index to disconnect
[ 1756.954407] nbd: must specify an index to disconnect
[ 1756.963328] nbd: must specify an index to disconnect
[ 1756.968505] nbd: must specify an index to disconnect
[ 1756.974573] nbd: must specify an index to disconnect
[ 1756.979924] nbd: must specify an index to disconnect
[ 1756.985253] nbd: must specify an index to disconnect
[ 1756.990427] nbd: must specify an index to disconnect
[ 1756.996132] nbd: must specify an index to disconnect
[ 1757.001307] nbd: must specify an index to disconnect
[ 1757.006680] nbd: must specify an index to disconnect
[ 1757.012041] nbd: must specify an index to disconnect
[ 1757.017603] nbd: must specify an index to disconnect
[ 1757.022851] nbd: must specify an index to disconnect
[ 1757.031253] nbd: must specify an index to disconnect
[ 1757.037201] nbd: must specify an index to disconnect
[ 1757.042371] nbd: must specify an index to disconnect
[ 1757.047873] nbd: must specify an index to disconnect
[ 1757.053131] nbd: must specify an index to disconnect
[ 1757.058303] nbd: must specify an index to disconnect
[ 1757.064081] nbd: must specify an index to disconnect
[ 1757.069243] nbd: must specify an index to disconnect
[ 1757.074480] nbd: must specify an index to disconnect
[ 1757.079627] nbd: must specify an index to disconnect
[ 1757.084850] nbd: must specify an index to disconnect
[ 1757.090002] nbd: must specify an index to disconnect
[ 1757.095471] nbd: must specify an index to disconnect
[ 1757.100613] nbd: must specify an index to disconnect
[ 1757.105909] nbd: must specify an index to disconnect
[ 1757.111072] nbd: must specify an index to disconnect
[ 1757.116295] nbd: must specify an index to disconnect
[ 1757.121437] nbd: must specify an index to disconnect
[ 1757.126775] nbd: must specify an index to disconnect
[ 1757.131915] nbd: must specify an index to disconnect
[ 1757.137684] nbd: must specify an index to disconnect
[ 1757.142907] nbd: must specify an index to disconnect
[ 1757.148637] nbd: must specify an index to disconnect
[ 1757.153861] nbd: must specify an index to disconnect
[ 1757.159017] nbd: must specify an index to disconnect
[ 1757.164209] nbd: must specify an index to disconnect
[ 1757.169372] nbd: must specify an index to disconnect
[ 1757.174593] nbd: must specify an index to disconnect
[ 1757.179753] nbd: must specify an index to disconnect
[ 1757.184954] nbd: must specify an index to disconnect
[ 1757.190107] nbd: must specify an index to disconnect
[ 1757.195319] nbd: must specify an index to disconnect
[ 1757.200479] nbd: must specify an index to disconnect
[ 1757.205685] nbd: must specify an index to disconnect
[ 1757.210848] nbd: must specify an index to disconnect
[ 1757.216067] nbd: must specify an index to disconnect
02:05:20 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
r3 = semget$private(0x0, 0x2, 0x20)
semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000000000)=""/55)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000041}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
semctl$IPC_SET(r3, 0x0, 0x1, 0x0)
semctl$GETVAL(r3, 0x1, 0xc, &(0x7f00000000c0)=""/140)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
semget$private(0x0, 0x2, 0x20) (async)
semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000000000)=""/55) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000041}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async)
semctl$IPC_SET(r3, 0x0, 0x1, 0x0) (async)
semctl$GETVAL(r3, 0x1, 0xc, &(0x7f00000000c0)=""/140) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async)

02:05:20 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

02:05:20 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00#\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:20 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x20012, r0, 0xbd000) (async)
dup2(r1, r0)

02:05:20 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/event_source', 0x1, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, r1, 0x4}, 0x10)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r2, r0)
socketpair(0x1e, 0x80000, 0x9, &(0x7f00000000c0))

02:05:20 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r0, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

[ 1757.221219] nbd: must specify an index to disconnect
[ 1757.226439] nbd: must specify an index to disconnect
02:05:20 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)

02:05:20 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00#\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00#\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)

02:05:20 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0x5, 0x8, 0x9})

[ 1757.295904] nbd: must specify an index to disconnect
02:05:20 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000bf", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2c14004}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e40)=ANY=[@ANYBLOB="85e5810000009c0000000000000000", @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf25020000000c00080002000000000000000c00020007000000000000000c00080093b70000000000004c00078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08bd5552361e18ce35244fa0f4aaaafb43befc513d959bef9de0b5bfe0954bdc51a81263bbdf26456c1ee8d25f705fda24a7fe74f7d158d3f2eb66ec295d9a50a1a4574d830912e588edf8135e04fd427543c69f8940464800b79e0d348f356e21a2bbb6a194943a32de055179403901c0abb70fa71c0c5cf31d6aa16e238fd10736c3991a62c6", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00060001000000000000000c000600331872bf40fdb1f9"], 0x9c}, 0x1, 0x0, 0x0, 0x40085}, 0x48000)
r5 = inotify_init1(0x100000)
r6 = dup2(r1, r0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={<r7=>r5, 0x21200000000000, 0x8, 0x4})
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, &(0x7f00000000c0)=0x1)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000600)={0xa4, 0x0, &(0x7f00000004c0)=[@exit_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000d00)=ANY=[@ANYBLOB="8561646600000000090000004000000002000000000000001000000000002a2a72b0c17d4c56000002000000000000001300000000000000852a0000000e74837277b858b79ccb0d2256", @ANYRES32=r1, @ANYBLOB='\x00'/12], &(0x7f0000000300)={0x0, 0x20, 0x40}}, 0x400}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x100b, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/178, 0xb2, 0x1, 0x37}, @fda={0x66646185, 0xa, 0x2, 0x5}}, &(0x7f0000000480)={0x0, 0x18, 0x40}}}, @exit_looper, @free_buffer], 0x71, 0x0, &(0x7f0000000580)="f2355bf8c699afbf162647f149ec08af6c7f687983b0b155f154f69bc0c903d745518d83ac20e126ea496c678cf20730757cda5b415d2c05e1d4a60a8200d1350d93e1b7e84b6932e3843846241bd4f0ca7442efb45e99bf6b9939a1e7f9802848c47f0d0b83465ef1b0ed4859540ec5d8"})
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000100)={<r8=>r6, 0x1000, 0x780, 0x5})
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000140)={r1, 0x400, 0x8aa, 0x9})
r9 = socket$inet(0x2, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x428, 0x0, 0x200, 0xffffffff, 0x128, 0x128, 0x390, 0x390, 0xffffffff, 0x390, 0x390, 0x5, &(0x7f0000000180), {[{{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@unspec=@mark={{0x30}, {0x2, 0xffffffeb}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x0, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @multicast1, @icmp_id=0x66, @port=0x4e20}}}}, {{@ip={@rand_addr=0x64010101, @multicast1, 0xffffff, 0xff000000, 'veth1\x00', 'ip6gre0\x00', {}, {0xff}, 0x2e, 0x1, 0x40}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x3, 0xa8}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x18, @broadcast, @empty, @port=0x4e20, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @remote, @port=0x4e23, @port=0x4e20}}}}, {{@ip={@loopback, @private=0xa010100, 0xffffff00, 0xff000000, 'batadv0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x11, 0x1, 0x5}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x3, 0x2, 0x1, 0x4, 0x1, 0x1], 0x2, 0x4}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @local, @loopback, @icmp_id=0x66, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)

02:05:20 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0)
r3 = syz_open_dev$mouse(&(0x7f0000000140), 0x10000, 0x501000)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}]}]}, 0x58}}, 0x40001)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="905b9b5300a5a6b6b4243299e31f8fe0152afdaa0edff6c65e261b73bb42c9b22771551405f211302507fc43cb641e1e5e798407", @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r8=>r3}, './file0\x00'})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r7, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffffffffffff}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x40)

02:05:20 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r0, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:20 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00#\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:20 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0x5, 0x8, 0x9})
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0x5, 0x8, 0x9}) (async)

02:05:20 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r0, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:20 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async)
r3 = syz_open_dev$mouse(&(0x7f0000000140), 0x10000, 0x501000)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}]}]}, 0x58}}, 0x40001) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (rerun: 64)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="905b9b5300a5a6b6b4243299e31f8fe0152afdaa0edff6c65e261b73bb42c9b22771551405f211302507fc43cb641e1e5e798407", @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r8=>r3}, './file0\x00'}) (rerun: 64)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r7, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffffffffffff}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x40)

02:05:20 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

[ 1757.422957] nbd: must specify a size in bytes for the device
02:05:20 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000bf", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) (async)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0) (async)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2c14004}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e40)=ANY=[@ANYBLOB="85e5810000009c0000000000000000", @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf25020000000c00080002000000000000000c00020007000000000000000c00080093b70000000000004c00078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08bd5552361e18ce35244fa0f4aaaafb43befc513d959bef9de0b5bfe0954bdc51a81263bbdf26456c1ee8d25f705fda24a7fe74f7d158d3f2eb66ec295d9a50a1a4574d830912e588edf8135e04fd427543c69f8940464800b79e0d348f356e21a2bbb6a194943a32de055179403901c0abb70fa71c0c5cf31d6aa16e238fd10736c3991a62c6", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00060001000000000000000c000600331872bf40fdb1f9"], 0x9c}, 0x1, 0x0, 0x0, 0x40085}, 0x48000)
r5 = inotify_init1(0x100000) (async, rerun: 64)
r6 = dup2(r1, r0) (async, rerun: 64)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={<r7=>r5, 0x21200000000000, 0x8, 0x4})
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, &(0x7f00000000c0)=0x1) (async)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000600)={0xa4, 0x0, &(0x7f00000004c0)=[@exit_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000d00)=ANY=[@ANYBLOB="8561646600000000090000004000000002000000000000001000000000002a2a72b0c17d4c56000002000000000000001300000000000000852a0000000e74837277b858b79ccb0d2256", @ANYRES32=r1, @ANYBLOB='\x00'/12], &(0x7f0000000300)={0x0, 0x20, 0x40}}, 0x400}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x100b, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/178, 0xb2, 0x1, 0x37}, @fda={0x66646185, 0xa, 0x2, 0x5}}, &(0x7f0000000480)={0x0, 0x18, 0x40}}}, @exit_looper, @free_buffer], 0x71, 0x0, &(0x7f0000000580)="f2355bf8c699afbf162647f149ec08af6c7f687983b0b155f154f69bc0c903d745518d83ac20e126ea496c678cf20730757cda5b415d2c05e1d4a60a8200d1350d93e1b7e84b6932e3843846241bd4f0ca7442efb45e99bf6b9939a1e7f9802848c47f0d0b83465ef1b0ed4859540ec5d8"})
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000100)={<r8=>r6, 0x1000, 0x780, 0x5})
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000140)={r1, 0x400, 0x8aa, 0x9}) (async)
r9 = socket$inet(0x2, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x428, 0x0, 0x200, 0xffffffff, 0x128, 0x128, 0x390, 0x390, 0xffffffff, 0x390, 0x390, 0x5, &(0x7f0000000180), {[{{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@unspec=@mark={{0x30}, {0x2, 0xffffffeb}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x0, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @multicast1, @icmp_id=0x66, @port=0x4e20}}}}, {{@ip={@rand_addr=0x64010101, @multicast1, 0xffffff, 0xff000000, 'veth1\x00', 'ip6gre0\x00', {}, {0xff}, 0x2e, 0x1, 0x40}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x3, 0xa8}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x18, @broadcast, @empty, @port=0x4e20, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @remote, @port=0x4e23, @port=0x4e20}}}}, {{@ip={@loopback, @private=0xa010100, 0xffffff00, 0xff000000, 'batadv0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x11, 0x1, 0x5}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x3, 0x2, 0x1, 0x4, 0x1, 0x1], 0x2, 0x4}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @local, @loopback, @icmp_id=0x66, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)

02:05:20 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf0b}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x804)

02:05:20 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:20 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0x5, 0x8, 0x9})

02:05:20 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf0b}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x804)

02:05:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:20 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:20 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000140)={0x0, 0xdd, &(0x7f0000000040)=""/221})
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0), 0x218825479f3532a9, 0x5}}, 0x20)
sysfs$2(0x2, 0xe352, &(0x7f0000000400)=""/4096)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000e", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf251100000005003300000000000a0009000180c200000300000500290001000000060028000300000008002c000900000008003200018000000500380001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4008004}, 0x4010)
dup2(r1, r0)
prctl$PR_SET_TIMERSLACK(0x1d, 0x9)
syz_open_dev$ttys(0xc, 0x2, 0x0)

02:05:20 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0)
r3 = syz_open_dev$mouse(&(0x7f0000000140), 0x10000, 0x501000)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}]}]}, 0x58}}, 0x40001)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="905b9b5300a5a6b6b4243299e31f8fe0152afdaa0edff6c65e261b73bb42c9b22771551405f211302507fc43cb641e1e5e798407", @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r8=>r3}, './file0\x00'})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r7, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffffffffffff}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x40)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async)
syz_open_dev$mouse(&(0x7f0000000140), 0x10000, 0x501000) (async)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}]}]}, 0x58}}, 0x40001) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="905b9b5300a5a6b6b4243299e31f8fe0152afdaa0edff6c65e261b73bb42c9b22771551405f211302507fc43cb641e1e5e798407", @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r5) (async)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r7, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffffffffffff}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x40) (async)

02:05:20 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000bf", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2c14004}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e40)=ANY=[@ANYBLOB="85e5810000009c0000000000000000", @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf25020000000c00080002000000000000000c00020007000000000000000c00080093b70000000000004c00078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08bd5552361e18ce35244fa0f4aaaafb43befc513d959bef9de0b5bfe0954bdc51a81263bbdf26456c1ee8d25f705fda24a7fe74f7d158d3f2eb66ec295d9a50a1a4574d830912e588edf8135e04fd427543c69f8940464800b79e0d348f356e21a2bbb6a194943a32de055179403901c0abb70fa71c0c5cf31d6aa16e238fd10736c3991a62c6", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00060001000000000000000c000600331872bf40fdb1f9"], 0x9c}, 0x1, 0x0, 0x0, 0x40085}, 0x48000)
r5 = inotify_init1(0x100000)
r6 = dup2(r1, r0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={<r7=>r5, 0x21200000000000, 0x8, 0x4})
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, &(0x7f00000000c0)=0x1)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000600)={0xa4, 0x0, &(0x7f00000004c0)=[@exit_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000d00)=ANY=[@ANYBLOB="8561646600000000090000004000000002000000000000001000000000002a2a72b0c17d4c56000002000000000000001300000000000000852a0000000e74837277b858b79ccb0d2256", @ANYRES32=r1, @ANYBLOB='\x00'/12], &(0x7f0000000300)={0x0, 0x20, 0x40}}, 0x400}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x100b, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/178, 0xb2, 0x1, 0x37}, @fda={0x66646185, 0xa, 0x2, 0x5}}, &(0x7f0000000480)={0x0, 0x18, 0x40}}}, @exit_looper, @free_buffer], 0x71, 0x0, &(0x7f0000000580)="f2355bf8c699afbf162647f149ec08af6c7f687983b0b155f154f69bc0c903d745518d83ac20e126ea496c678cf20730757cda5b415d2c05e1d4a60a8200d1350d93e1b7e84b6932e3843846241bd4f0ca7442efb45e99bf6b9939a1e7f9802848c47f0d0b83465ef1b0ed4859540ec5d8"})
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000100)={<r8=>r6, 0x1000, 0x780, 0x5})
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000140)={r1, 0x400, 0x8aa, 0x9})
r9 = socket$inet(0x2, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x428, 0x0, 0x200, 0xffffffff, 0x128, 0x128, 0x390, 0x390, 0xffffffff, 0x390, 0x390, 0x5, &(0x7f0000000180), {[{{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@unspec=@mark={{0x30}, {0x2, 0xffffffeb}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x0, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @multicast1, @icmp_id=0x66, @port=0x4e20}}}}, {{@ip={@rand_addr=0x64010101, @multicast1, 0xffffff, 0xff000000, 'veth1\x00', 'ip6gre0\x00', {}, {0xff}, 0x2e, 0x1, 0x40}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x3, 0xa8}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x18, @broadcast, @empty, @port=0x4e20, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @remote, @port=0x4e23, @port=0x4e20}}}}, {{@ip={@loopback, @private=0xa010100, 0xffffff00, 0xff000000, 'batadv0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x11, 0x1, 0x5}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x3, 0x2, 0x1, 0x4, 0x1, 0x1], 0x2, 0x4}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @local, @loopback, @icmp_id=0x66, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000bf", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2c14004}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e40)=ANY=[@ANYBLOB="85e5810000009c0000000000000000", @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf25020000000c00080002000000000000000c00020007000000000000000c00080093b70000000000004c00078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08bd5552361e18ce35244fa0f4aaaafb43befc513d959bef9de0b5bfe0954bdc51a81263bbdf26456c1ee8d25f705fda24a7fe74f7d158d3f2eb66ec295d9a50a1a4574d830912e588edf8135e04fd427543c69f8940464800b79e0d348f356e21a2bbb6a194943a32de055179403901c0abb70fa71c0c5cf31d6aa16e238fd10736c3991a62c6", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00060001000000000000000c000600331872bf40fdb1f9"], 0x9c}, 0x1, 0x0, 0x0, 0x40085}, 0x48000) (async)
inotify_init1(0x100000) (async)
dup2(r1, r0) (async)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={r5, 0x21200000000000, 0x8, 0x4}) (async)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, &(0x7f00000000c0)=0x1) (async)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000600)={0xa4, 0x0, &(0x7f00000004c0)=[@exit_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000d00)=ANY=[@ANYBLOB="8561646600000000090000004000000002000000000000001000000000002a2a72b0c17d4c56000002000000000000001300000000000000852a0000000e74837277b858b79ccb0d2256", @ANYRES32=r1, @ANYBLOB='\x00'/12], &(0x7f0000000300)={0x0, 0x20, 0x40}}, 0x400}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x100b, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/178, 0xb2, 0x1, 0x37}, @fda={0x66646185, 0xa, 0x2, 0x5}}, &(0x7f0000000480)={0x0, 0x18, 0x40}}}, @exit_looper, @free_buffer], 0x71, 0x0, &(0x7f0000000580)="f2355bf8c699afbf162647f149ec08af6c7f687983b0b155f154f69bc0c903d745518d83ac20e126ea496c678cf20730757cda5b415d2c05e1d4a60a8200d1350d93e1b7e84b6932e3843846241bd4f0ca7442efb45e99bf6b9939a1e7f9802848c47f0d0b83465ef1b0ed4859540ec5d8"}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000100)={r6, 0x1000, 0x780, 0x5}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000140)={r1, 0x400, 0x8aa, 0x9}) (async)
socket$inet(0x2, 0x0, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x428, 0x0, 0x200, 0xffffffff, 0x128, 0x128, 0x390, 0x390, 0xffffffff, 0x390, 0x390, 0x5, &(0x7f0000000180), {[{{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@unspec=@mark={{0x30}, {0x2, 0xffffffeb}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x0, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @multicast1, @icmp_id=0x66, @port=0x4e20}}}}, {{@ip={@rand_addr=0x64010101, @multicast1, 0xffffff, 0xff000000, 'veth1\x00', 'ip6gre0\x00', {}, {0xff}, 0x2e, 0x1, 0x40}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x3, 0xa8}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x18, @broadcast, @empty, @port=0x4e20, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @remote, @port=0x4e23, @port=0x4e20}}}}, {{@ip={@loopback, @private=0xa010100, 0xffffff00, 0xff000000, 'batadv0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x11, 0x1, 0x5}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x3, 0x2, 0x1, 0x4, 0x1, 0x1], 0x2, 0x4}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @local, @loopback, @icmp_id=0x66, @icmp_id=0x68}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) (async)

[ 1757.615980] nbd: must specify a size in bytes for the device
02:05:20 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf0b}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x804)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf0b}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x804) (async)

02:05:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:20 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:21 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000140)={0x0, 0xdd, &(0x7f0000000040)=""/221}) (rerun: 32)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0), 0x218825479f3532a9, 0x5}}, 0x20) (async)
sysfs$2(0x2, 0xe352, &(0x7f0000000400)=""/4096) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000e", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf251100000005003300000000000a0009000180c200000300000500290001000000060028000300000008002c000900000008003200018000000500380001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4008004}, 0x4010) (async, rerun: 64)
dup2(r1, r0) (async, rerun: 64)
prctl$PR_SET_TIMERSLACK(0x1d, 0x9) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0)

[ 1757.717445] nbd: must specify a size in bytes for the device
02:05:21 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x100}}, 0x18)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)

02:05:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:21 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
r3 = inotify_init1(0x81800)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r3, 0x81, 0x4, 0x4})

02:05:21 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:21 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
r3 = inotify_init1(0x81800)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r3, 0x81, 0x4, 0x4})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)
inotify_init1(0x81800) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r3, 0x81, 0x4, 0x4}) (async)

02:05:21 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/187, 0xbb)
dup2(r1, r0)

02:05:21 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000140)={0x0, 0xdd, &(0x7f0000000040)=""/221})
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0), 0x218825479f3532a9, 0x5}}, 0x20)
sysfs$2(0x2, 0xe352, &(0x7f0000000400)=""/4096) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000e", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf251100000005003300000000000a0009000180c200000300000500290001000000060028000300000008002c000900000008003200018000000500380001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4008004}, 0x4010) (async)
dup2(r1, r0) (async)
prctl$PR_SET_TIMERSLACK(0x1d, 0x9) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0)

02:05:21 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r0, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:21 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

[ 1757.880726] nbd: must specify an index to disconnect
02:05:21 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x100}}, 0x18)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)

02:05:21 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/187, 0xbb)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/187, 0xbb) (async)
dup2(r1, r0) (async)

02:05:21 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0)
mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r0, 0x35000)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0xa0040, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000240)={r3, 0x5, 0x7, 0x117})
fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000000), &(0x7f00000000c0), 0x2, 0x2)
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2)

02:05:21 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)
r3 = inotify_init1(0x81800)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r3, 0x81, 0x4, 0x4})

02:05:21 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r0, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:21 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:21 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x100}}, 0x18) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)

[ 1757.995765] nbd: must specify an index to disconnect
02:05:21 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) (async)
mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r0, 0x35000) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0xa0040, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000240)={r3, 0x5, 0x7, 0x117}) (async)
fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000000), &(0x7f00000000c0), 0x2, 0x2) (async)
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2)

02:05:21 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/187, 0xbb)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/187, 0xbb) (async)
dup2(r1, r0) (async)

02:05:21 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r0, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:21 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0xc088)
sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x20000014}, 0x8000)

02:05:21 executing program 5:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:21 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) (async)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) (async)
mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r0, 0x35000) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0xa0040, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000240)={r3, 0x5, 0x7, 0x117})
fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000000), &(0x7f00000000c0), 0x2, 0x2) (async)
fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2)

02:05:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x20000080)

02:05:21 executing program 5:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:21 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0xc088) (async)
sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x20000014}, 0x8000)

02:05:21 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4841)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)

02:05:21 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2e0042, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
dup2(r1, r0)
syz_open_dev$ttys(0xc, 0x2, 0x1)

02:05:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x20000080)

02:05:21 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
pipe2$watch_queue(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(r1, r0)

02:05:21 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0xc088) (async)
sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x20000014}, 0x8000)

02:05:21 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
pipe2$watch_queue(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
dup2(r1, r0)

[ 1758.268522] nbd: must specify an index to disconnect
02:05:21 executing program 5:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:21 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4841)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)

02:05:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x20000080)

02:05:21 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2e0042, 0x0) (async, rerun: 32)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
dup2(r1, r0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1)

02:05:21 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/loop', 0x400000, 0x80)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRES16=r2, @ANYRES16=r1], 0x24}}, 0x0)

02:05:21 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

[ 1758.384511] nbd: must specify an index to disconnect
02:05:21 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4841) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)

02:05:21 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
pipe2$watch_queue(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
pipe2$watch_queue(&(0x7f0000000040), 0x80) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
dup2(r1, r0) (async)

02:05:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:21 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2e0042, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async)
dup2(r1, r0)
syz_open_dev$ttys(0xc, 0x2, 0x1)

02:05:21 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:21 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/loop', 0x400000, 0x80) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRES16=r2, @ANYRES16=r1], 0x24}}, 0x0)

02:05:21 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2)

02:05:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

[ 1758.519909] nbd: must specify an index to disconnect
02:05:21 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2468c2, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)

02:05:21 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:21 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84e, 0x0, 0x0, 0x0, 0x7fffffff}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x8, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r4, 0xffffffffffffffff]}, 0x80)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="14005d14", @ANYRES16=r2, @ANYBLOB="0123000000000000000002000000ce471e69fd0cd983d5330278dbd2269aa7049d5bad2e754f8318e5a8dd861e037f9ab06b14704c8103e9545fc7"], 0x14}}, 0x0)

02:05:21 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/loop', 0x400000, 0x80) (async, rerun: 64)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRES16=r2, @ANYRES16=r1], 0x24}}, 0x0)

02:05:21 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2)

02:05:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:21 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:21 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2468c2, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)

02:05:21 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84e, 0x0, 0x0, 0x0, 0x7fffffff}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x8, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r4, 0xffffffffffffffff]}, 0x80) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="14005d14", @ANYRES16=r2, @ANYBLOB="0123000000000000000002000000ce471e69fd0cd983d5330278dbd2269aa7049d5bad2e754f8318e5a8dd861e037f9ab06b14704c8103e9545fc7"], 0x14}}, 0x0)

02:05:21 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:21 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2)

02:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:22 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2468c2, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2468c2, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async)

02:05:22 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0) (async)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84e, 0x0, 0x0, 0x0, 0x7fffffff}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x8, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r4, 0xffffffffffffffff]}, 0x80)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="14005d14", @ANYRES16=r2, @ANYBLOB="0123000000000000000002000000ce471e69fd0cd983d5330278dbd2269aa7049d5bad2e754f8318e5a8dd861e037f9ab06b14704c8103e9545fc7"], 0x14}}, 0x0)

02:05:22 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

02:05:22 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:22 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
open_by_handle_at(r1, &(0x7f0000000040)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x7ff, 0x2, 0x63, 0x8, 0x7fff, 0xebd4}}, 0x0)

02:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:22 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

02:05:22 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x8080)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3)
setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000180)={0xcd4b}, 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r5, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x1, 0x70bd2a}, 0xfffffffffffffe8a}}, 0x20040004)

02:05:22 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x274842, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x20c0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:22 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0) (async)
open_by_handle_at(r1, &(0x7f0000000040)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x7ff, 0x2, 0x63, 0x8, 0x7fff, 0xebd4}}, 0x0)

02:05:22 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:22 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x274842, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x20c0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x274842, 0x0) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x20c0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)

02:05:22 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

02:05:22 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x8080)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3)
setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000180)={0xcd4b}, 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r5, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x1, 0x70bd2a}, 0xfffffffffffffe8a}}, 0x20040004)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) (async)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (async)
setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000180)={0xcd4b}, 0x4) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_RECONFIGURE(r5, 0x0, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x1, 0x70bd2a}, 0xfffffffffffffe8a}}, 0x20040004) (async)

02:05:22 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
open_by_handle_at(r1, &(0x7f0000000040)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x7ff, 0x2, 0x63, 0x8, 0x7fff, 0xebd4}}, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)
open_by_handle_at(r1, &(0x7f0000000040)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x7ff, 0x2, 0x63, 0x8, 0x7fff, 0xebd4}}, 0x0) (async)

02:05:22 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:22 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x274842, 0x0) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x20c0, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:22 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:22 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:22 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x4c1, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x202900, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:22 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r2}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3)
setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000180)={0xcd4b}, 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r5, 0x0, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x1, 0x70bd2a}, 0xfffffffffffffe8a}}, 0x20040004)

02:05:22 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)

02:05:22 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x367842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:22 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000000cb0300400072"], 0x14}}, 0x0)

02:05:22 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x4c1, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x202900, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x4c1, 0x0) (async)
openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x202900, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)

02:05:22 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x367842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:22 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:22 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)

02:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:22 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x4c1, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x202900, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:22 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000000cb0300400072"], 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000000cb0300400072"], 0x14}}, 0x0) (async)

02:05:22 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x367842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:22 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9d34080dabc37cb81ad2e8d0fec1b109d1f9a0cbffdc1af95ef11744a4fe00423d52302678a7e93b51c3000000000000003798970a26a4d68821dac6c2e7aa1968c082c18441d0240c44e1e211f293f0c1a2d03634897c6caea1afc7c54dedc4a35f5cb243412c879458f7920d880ca83ed489893f047bef3d0124c18516ecb5b99cc40eb2adf0214e7629970068890d169fc3785031b813c6dc89895d0000", @ANYRES16=r2, @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3)

02:05:22 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:22 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000000cb0300400072"], 0x14}}, 0x0)

02:05:22 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(r2, r1)
dup2(r1, r0)

02:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20ed3e31881163b5, 0x0, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:22 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x4, &(0x7f0000000080)=@raw=[@ldst={0x2, 0x1, 0x7, 0x2, 0x0, 0xfffffffffffffffe, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r2}, @alu={0x4, 0x1, 0x8, 0xa, 0x9, 0x100, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x9, 0x97, &(0x7f00000001c0)=""/151, 0x41000, 0x1, '\x00', 0x0, 0xa, r2, 0x8, &(0x7f0000000100)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x7, 0x4, 0x5}, 0x10, 0x0, r2, 0x0, &(0x7f0000000280)=[r0, 0xffffffffffffffff, 0x1, r2, r2, r0]}, 0x80)
dup2(r3, r1)

02:05:22 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9d34080dabc37cb81ad2e8d0fec1b109d1f9a0cbffdc1af95ef11744a4fe00423d52302678a7e93b51c3000000000000003798970a26a4d68821dac6c2e7aa1968c082c18441d0240c44e1e211f293f0c1a2d03634897c6caea1afc7c54dedc4a35f5cb243412c879458f7920d880ca83ed489893f047bef3d0124c18516ecb5b99cc40eb2adf0214e7629970068890d169fc3785031b813c6dc89895d0000", @ANYRES16=r2, @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9d34080dabc37cb81ad2e8d0fec1b109d1f9a0cbffdc1af95ef11744a4fe00423d52302678a7e93b51c3000000000000003798970a26a4d68821dac6c2e7aa1968c082c18441d0240c44e1e211f293f0c1a2d03634897c6caea1afc7c54dedc4a35f5cb243412c879458f7920d880ca83ed489893f047bef3d0124c18516ecb5b99cc40eb2adf0214e7629970068890d169fc3785031b813c6dc89895d0000", @ANYRES16=r2, @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) (async)

02:05:22 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
dup2(r2, r1) (async)
dup2(r1, r0)

02:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20ed3e31881163b5, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:22 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:22 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ff", @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

02:05:22 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x4, &(0x7f0000000080)=@raw=[@ldst={0x2, 0x1, 0x7, 0x2, 0x0, 0xfffffffffffffffe, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r2}, @alu={0x4, 0x1, 0x8, 0xa, 0x9, 0x100, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x9, 0x97, &(0x7f00000001c0)=""/151, 0x41000, 0x1, '\x00', 0x0, 0xa, r2, 0x8, &(0x7f0000000100)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x7, 0x4, 0x5}, 0x10, 0x0, r2, 0x0, &(0x7f0000000280)=[r0, 0xffffffffffffffff, 0x1, r2, r2, r0]}, 0x80)
dup2(r3, r1)

02:05:22 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x20ed3e31881163b5, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:22 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(r2, r1)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
dup2(r2, r1) (async)
dup2(r1, r0) (async)

02:05:22 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ff", @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

02:05:22 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9d34080dabc37cb81ad2e8d0fec1b109d1f9a0cbffdc1af95ef11744a4fe00423d52302678a7e93b51c3000000000000003798970a26a4d68821dac6c2e7aa1968c082c18441d0240c44e1e211f293f0c1a2d03634897c6caea1afc7c54dedc4a35f5cb243412c879458f7920d880ca83ed489893f047bef3d0124c18516ecb5b99cc40eb2adf0214e7629970068890d169fc3785031b813c6dc89895d0000", @ANYRES16=r2, @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9d34080dabc37cb81ad2e8d0fec1b109d1f9a0cbffdc1af95ef11744a4fe00423d52302678a7e93b51c3000000000000003798970a26a4d68821dac6c2e7aa1968c082c18441d0240c44e1e211f293f0c1a2d03634897c6caea1afc7c54dedc4a35f5cb243412c879458f7920d880ca83ed489893f047bef3d0124c18516ecb5b99cc40eb2adf0214e7629970068890d169fc3785031b813c6dc89895d0000", @ANYRES16=r2, @ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) (async)

02:05:22 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0)

02:05:22 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x4, &(0x7f0000000080)=@raw=[@ldst={0x2, 0x1, 0x7, 0x2, 0x0, 0xfffffffffffffffe, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r2}, @alu={0x4, 0x1, 0x8, 0xa, 0x9, 0x100, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x9, 0x97, &(0x7f00000001c0)=""/151, 0x41000, 0x1, '\x00', 0x0, 0xa, r2, 0x8, &(0x7f0000000100)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x7, 0x4, 0x5}, 0x10, 0x0, r2, 0x0, &(0x7f0000000280)=[r0, 0xffffffffffffffff, 0x1, r2, r2, r0]}, 0x80)
dup2(r3, r1)

02:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x20ed3e31881163b5, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x20ed3e31881163b5, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:22 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:22 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0xfd968150ce97a651, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000540)=ANY=[@ANYBLOB="010000080e00090018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"])
r3 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x100000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
io_submit(0x0, 0x5, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfff8, r1, &(0x7f0000000080)="0b7e9093e6be2907b4c2393c258473f0fd603dac8254fa4b36d0ccbdaae4029cd12e82ce717ec50c9999f689a08a5bd87db5faab13d638166b112f157846ce46a838d9c337", 0x45, 0xff, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f0000000140)="0e77de6d558a05665e8a03e566d28c56d5b8413e8ada357ce0c8116a173fd74c50be35e769cf91f0d34833bf83e00d2bbc4fdb94458046323950c228f897ea83a2a2225d640bc3dc0df7984debe6e7d9fb73d3f207e5", 0x56, 0x1, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x9, r3, &(0x7f0000000240)="cc973e26f57ad2edb1a46ef2f574b2cc0efdb2d5c4aca8640f318e5f80262054be7f2518405d1cc7f1214c9e6219dd474a546cb0a21bc50ea9e773d10edf1d5f8f21951ee3123e67a8e747b3fa631417a6d79c1b369482b32b85907aff06b076b44f2a05eaec8cfe8e28b4928c4d6a3bcd635290318592f5e2232163f121acab243416983787ab3ffa9a6de5f5ecae4909e6481687c4318b9481c3674038b36ff81af10b20f51ad9c4d1276172740fac50476c3918ebe1217de5d9ea06564e83eda9d45d4b97b355ad11ed727d349dc8abb86c9ffef08377288d56a09dbd47413331eb609693e07c32f77f7250ccfd", 0xef, 0x2, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x1000, r4, &(0x7f0000000380)="480095e90d67cc6a0f2ea33704ad15fe1fe6e6caee3f", 0x16, 0xffffffffffff825f}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000400)="21dae311a118309442f9cb99024c43117521412906d3f39425be24c87fb7d27616a3c6bbabd2765c6689110c34040ecaf5d8eb0f0f0d3739b745e17a12f9351e9581", 0x42, 0x7fffffffffffffff}])
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x520, 0x1a8, 0xb0, 0x0, 0x2c0, 0xb0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, &(0x7f00000006c0), {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffff00, 0xffffffff, 'vcan0\x00', 'bridge0\x00', {0xff}, {}, 0x92dc4b5a806f2894, 0x2, 0x8}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x81, @ipv6=@private2, 0x4e23}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xff000000, 'pimreg0\x00', 'sit0\x00', {}, {}, 0x32, 0x2, 0x8}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xe9, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x8, 0xc, [0x18, 0x3c, 0x27, 0x1c, 0x4, 0x25, 0xc, 0x21, 0x2c, 0x7, 0x3a, 0x30, 0x2f, 0x6, 0x35, 0x2d], 0x1, 0x3, 0x2}}}, {{@ip={@multicast1, @local, 0xff, 0xff, 'team0\x00', 'hsr0\x00', {}, {0xff}, 0x5c, 0x2, 0x18}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x0, 0x2}}, @common=@ah={{0x30}, {[0x0, 0xddd2]}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x8b, 0x1}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e22, 0x4e24], [0x4e21, 0x4e20]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'ipvlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x67, 0x2, 0x1}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x0, "d9641dbf9ed70003ae1fcf3542ff4985276b157a8af8e8f0e7f07e72fca8"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1833e46d4844"}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0xc000)
write$P9_RUNLINKAT(r1, &(0x7f0000000d40)={0x7, 0x4d, 0x2}, 0x7)
write$P9_RSTAT(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="460000007d020000003f0000040200000000040000000500000000000000000001000300000007000000030000007f000000000001002c030027405b08006272696467653000"], 0x46)
r6 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r6, r0)

02:05:22 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ff", @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ff", @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)

02:05:22 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
dup2(r1, r0)

02:05:22 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0)

02:05:22 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:22 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
dup2(r1, r0) (async)

02:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x20ed3e31881163b5}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:22 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0)

02:05:22 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd27}, 0x14}}, 0x0)

02:05:22 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async, rerun: 32)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0xfd968150ce97a651, 0x0) (rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000540)=ANY=[@ANYBLOB="010000080e00090018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"])
r3 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x100000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
io_submit(0x0, 0x5, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfff8, r1, &(0x7f0000000080)="0b7e9093e6be2907b4c2393c258473f0fd603dac8254fa4b36d0ccbdaae4029cd12e82ce717ec50c9999f689a08a5bd87db5faab13d638166b112f157846ce46a838d9c337", 0x45, 0xff, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f0000000140)="0e77de6d558a05665e8a03e566d28c56d5b8413e8ada357ce0c8116a173fd74c50be35e769cf91f0d34833bf83e00d2bbc4fdb94458046323950c228f897ea83a2a2225d640bc3dc0df7984debe6e7d9fb73d3f207e5", 0x56, 0x1, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x9, r3, &(0x7f0000000240)="cc973e26f57ad2edb1a46ef2f574b2cc0efdb2d5c4aca8640f318e5f80262054be7f2518405d1cc7f1214c9e6219dd474a546cb0a21bc50ea9e773d10edf1d5f8f21951ee3123e67a8e747b3fa631417a6d79c1b369482b32b85907aff06b076b44f2a05eaec8cfe8e28b4928c4d6a3bcd635290318592f5e2232163f121acab243416983787ab3ffa9a6de5f5ecae4909e6481687c4318b9481c3674038b36ff81af10b20f51ad9c4d1276172740fac50476c3918ebe1217de5d9ea06564e83eda9d45d4b97b355ad11ed727d349dc8abb86c9ffef08377288d56a09dbd47413331eb609693e07c32f77f7250ccfd", 0xef, 0x2, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x1000, r4, &(0x7f0000000380)="480095e90d67cc6a0f2ea33704ad15fe1fe6e6caee3f", 0x16, 0xffffffffffff825f}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000400)="21dae311a118309442f9cb99024c43117521412906d3f39425be24c87fb7d27616a3c6bbabd2765c6689110c34040ecaf5d8eb0f0f0d3739b745e17a12f9351e9581", 0x42, 0x7fffffffffffffff}]) (async, rerun: 32)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x520, 0x1a8, 0xb0, 0x0, 0x2c0, 0xb0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, &(0x7f00000006c0), {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffff00, 0xffffffff, 'vcan0\x00', 'bridge0\x00', {0xff}, {}, 0x92dc4b5a806f2894, 0x2, 0x8}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x81, @ipv6=@private2, 0x4e23}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xff000000, 'pimreg0\x00', 'sit0\x00', {}, {}, 0x32, 0x2, 0x8}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xe9, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x8, 0xc, [0x18, 0x3c, 0x27, 0x1c, 0x4, 0x25, 0xc, 0x21, 0x2c, 0x7, 0x3a, 0x30, 0x2f, 0x6, 0x35, 0x2d], 0x1, 0x3, 0x2}}}, {{@ip={@multicast1, @local, 0xff, 0xff, 'team0\x00', 'hsr0\x00', {}, {0xff}, 0x5c, 0x2, 0x18}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x0, 0x2}}, @common=@ah={{0x30}, {[0x0, 0xddd2]}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x8b, 0x1}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e22, 0x4e24], [0x4e21, 0x4e20]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'ipvlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x67, 0x2, 0x1}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x0, "d9641dbf9ed70003ae1fcf3542ff4985276b157a8af8e8f0e7f07e72fca8"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) (rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1833e46d4844"}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) (async)
write$P9_RUNLINKAT(r1, &(0x7f0000000d40)={0x7, 0x4d, 0x2}, 0x7) (async, rerun: 64)
write$P9_RSTAT(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="460000007d020000003f0000040200000000040000000500000000000000000001000300000007000000030000007f000000000001002c030027405b08006272696467653000"], 0x46) (async, rerun: 64)
r6 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r6, r0)

02:05:22 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)

02:05:22 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd27}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd27}, 0x14}}, 0x0) (async)

02:05:22 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:22 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
dup2(r1, r0) (async)

[ 1759.570730] nbd: must specify an index to disconnect
02:05:22 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0xfd968150ce97a651, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000540)=ANY=[@ANYBLOB="010000080e00090018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) (async)
r3 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x100000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
io_submit(0x0, 0x5, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfff8, r1, &(0x7f0000000080)="0b7e9093e6be2907b4c2393c258473f0fd603dac8254fa4b36d0ccbdaae4029cd12e82ce717ec50c9999f689a08a5bd87db5faab13d638166b112f157846ce46a838d9c337", 0x45, 0xff, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f0000000140)="0e77de6d558a05665e8a03e566d28c56d5b8413e8ada357ce0c8116a173fd74c50be35e769cf91f0d34833bf83e00d2bbc4fdb94458046323950c228f897ea83a2a2225d640bc3dc0df7984debe6e7d9fb73d3f207e5", 0x56, 0x1, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x9, r3, &(0x7f0000000240)="cc973e26f57ad2edb1a46ef2f574b2cc0efdb2d5c4aca8640f318e5f80262054be7f2518405d1cc7f1214c9e6219dd474a546cb0a21bc50ea9e773d10edf1d5f8f21951ee3123e67a8e747b3fa631417a6d79c1b369482b32b85907aff06b076b44f2a05eaec8cfe8e28b4928c4d6a3bcd635290318592f5e2232163f121acab243416983787ab3ffa9a6de5f5ecae4909e6481687c4318b9481c3674038b36ff81af10b20f51ad9c4d1276172740fac50476c3918ebe1217de5d9ea06564e83eda9d45d4b97b355ad11ed727d349dc8abb86c9ffef08377288d56a09dbd47413331eb609693e07c32f77f7250ccfd", 0xef, 0x2, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x1000, r4, &(0x7f0000000380)="480095e90d67cc6a0f2ea33704ad15fe1fe6e6caee3f", 0x16, 0xffffffffffff825f}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000000400)="21dae311a118309442f9cb99024c43117521412906d3f39425be24c87fb7d27616a3c6bbabd2765c6689110c34040ecaf5d8eb0f0f0d3739b745e17a12f9351e9581", 0x42, 0x7fffffffffffffff}])
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x520, 0x1a8, 0xb0, 0x0, 0x2c0, 0xb0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, &(0x7f00000006c0), {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffff00, 0xffffffff, 'vcan0\x00', 'bridge0\x00', {0xff}, {}, 0x92dc4b5a806f2894, 0x2, 0x8}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x81, @ipv6=@private2, 0x4e23}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xff000000, 'pimreg0\x00', 'sit0\x00', {}, {}, 0x32, 0x2, 0x8}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xe9, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x8, 0xc, [0x18, 0x3c, 0x27, 0x1c, 0x4, 0x25, 0xc, 0x21, 0x2c, 0x7, 0x3a, 0x30, 0x2f, 0x6, 0x35, 0x2d], 0x1, 0x3, 0x2}}}, {{@ip={@multicast1, @local, 0xff, 0xff, 'team0\x00', 'hsr0\x00', {}, {0xff}, 0x5c, 0x2, 0x18}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x0, 0x2}}, @common=@ah={{0x30}, {[0x0, 0xddd2]}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x8b, 0x1}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e22, 0x4e24], [0x4e21, 0x4e20]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'ipvlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x67, 0x2, 0x1}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x0, "d9641dbf9ed70003ae1fcf3542ff4985276b157a8af8e8f0e7f07e72fca8"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1833e46d4844"}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) (async)
write$P9_RUNLINKAT(r1, &(0x7f0000000d40)={0x7, 0x4d, 0x2}, 0x7)
write$P9_RSTAT(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="460000007d020000003f0000040200000000040000000500000000000000000001000300000007000000030000007f000000000001002c030027405b08006272696467653000"], 0x46) (async)
r6 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r6, r0)

02:05:22 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a11a37af2fd19d8b85ccadbce57313738e896fddbb2bce083892750fb0adf155fdc32418a420d9b01f11bcb0351c57d2a0f3e37dab8f200863c82d60eb05261adbc6ee792ff70f8be21659b5d0aa083c1c431eb1aca25a00e7c8483ec95f67dea028b1246633f597ef"], 0x24}}, 0x0)

02:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x20ed3e31881163b5}, 0x14}}, 0x20000080)

[ 1759.651351] nbd: must specify an index to disconnect
02:05:22 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040))
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r2, r0)
syz_open_dev$ttys(0xc, 0x2, 0x0)

02:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x20ed3e31881163b5}, 0x14}}, 0x0)

[ 1759.679314] nbd: must specify an index to disconnect
02:05:22 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a11a37af2fd19d8b85ccadbce57313738e896fddbb2bce083892750fb0adf155fdc32418a420d9b01f11bcb0351c57d2a0f3e37dab8f200863c82d60eb05261adbc6ee792ff70f8be21659b5d0aa083c1c431eb1aca25a00e7c8483ec95f67dea028b1246633f597ef"], 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a11a37af2fd19d8b85ccadbce57313738e896fddbb2bce083892750fb0adf155fdc32418a420d9b01f11bcb0351c57d2a0f3e37dab8f200863c82d60eb05261adbc6ee792ff70f8be21659b5d0aa083c1c431eb1aca25a00e7c8483ec95f67dea028b1246633f597ef"], 0x24}}, 0x0) (async)

02:05:22 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x70bd27}, 0x14}}, 0x0)

02:05:22 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
sendto$llc(r2, &(0x7f0000000040)="6d924c65676762b2fef285c56d65915877c921b322ffadee767de5eb0ae65641a1d141735705f5fe0aa2affcfc4fab38ca3a1c09d5ef704dda5f64b874a2f95ff54750e0267aecc90ec8f2c9acb711320e3869581063759f17acc56c2ad90255281e8d34c43072c7133db9c98c97b45549eab6fbc41fe406d90a013b1e", 0x7d, 0x40084, &(0x7f00000000c0)={0x1a, 0x201, 0x5, 0x2, 0x46, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x10)

02:05:22 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x20ed3e31881163b5}, 0x14}}, 0x20000080)

02:05:23 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:23 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) (async)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r2, r0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0)

02:05:23 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0)

02:05:23 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
sendto$llc(r2, &(0x7f0000000040)="6d924c65676762b2fef285c56d65915877c921b322ffadee767de5eb0ae65641a1d141735705f5fe0aa2affcfc4fab38ca3a1c09d5ef704dda5f64b874a2f95ff54750e0267aecc90ec8f2c9acb711320e3869581063759f17acc56c2ad90255281e8d34c43072c7133db9c98c97b45549eab6fbc41fe406d90a013b1e", 0x7d, 0x40084, &(0x7f00000000c0)={0x1a, 0x201, 0x5, 0x2, 0x46, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x10)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)
sendto$llc(r2, &(0x7f0000000040)="6d924c65676762b2fef285c56d65915877c921b322ffadee767de5eb0ae65641a1d141735705f5fe0aa2affcfc4fab38ca3a1c09d5ef704dda5f64b874a2f95ff54750e0267aecc90ec8f2c9acb711320e3869581063759f17acc56c2ad90255281e8d34c43072c7133db9c98c97b45549eab6fbc41fe406d90a013b1e", 0x7d, 0x40084, &(0x7f00000000c0)={0x1a, 0x201, 0x5, 0x2, 0x46, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x10) (async)

02:05:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x20ed3e31881163b5, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:23 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a11a37af2fd19d8b85ccadbce57313738e896fddbb2bce083892750fb0adf155fdc32418a420d9b01f11bcb0351c57d2a0f3e37dab8f200863c82d60eb05261adbc6ee792ff70f8be21659b5d0aa083c1c431eb1aca25a00e7c8483ec95f67dea028b1246633f597ef"], 0x24}}, 0x0)

[ 1759.780978] nbd: must specify an index to disconnect
02:05:23 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
sendto$llc(r2, &(0x7f0000000040)="6d924c65676762b2fef285c56d65915877c921b322ffadee767de5eb0ae65641a1d141735705f5fe0aa2affcfc4fab38ca3a1c09d5ef704dda5f64b874a2f95ff54750e0267aecc90ec8f2c9acb711320e3869581063759f17acc56c2ad90255281e8d34c43072c7133db9c98c97b45549eab6fbc41fe406d90a013b1e", 0x7d, 0x40084, &(0x7f00000000c0)={0x1a, 0x201, 0x5, 0x2, 0x46, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x10)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)
sendto$llc(r2, &(0x7f0000000040)="6d924c65676762b2fef285c56d65915877c921b322ffadee767de5eb0ae65641a1d141735705f5fe0aa2affcfc4fab38ca3a1c09d5ef704dda5f64b874a2f95ff54750e0267aecc90ec8f2c9acb711320e3869581063759f17acc56c2ad90255281e8d34c43072c7133db9c98c97b45549eab6fbc41fe406d90a013b1e", 0x7d, 0x40084, &(0x7f00000000c0)={0x1a, 0x201, 0x5, 0x2, 0x46, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x10) (async)

02:05:23 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040))
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r2, r0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x0)

02:05:23 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0)

02:05:23 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r2=>0xffffffffffffffff, 0x8, 0x7efffffffffffeff, 0x4})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r3=>0x0})
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x5, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa, 0xb, 0x5, 0x4, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0xfffffff8, 0x9e, &(0x7f0000000100)=""/158, 0x41000, 0x2, '\x00', r3, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x5, 0x2, 0xcb99}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[r4, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x1}, 0x14}}, 0x0)

02:05:23 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0)

02:05:23 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cbe3841bce8bdf8a1647e877c9a24e54532b416bac5fbfae4bdc825abe19ebf989c7e2439de1a2ee1a17d714f10b7bb15f9c02636c2a097d38d254f0126e65b93f90325babe3f6c01bf387c34ce4403dc632a610cbd07dc3bb71d8fbacfd6c1e6192411c7eaf8dfe7a5033aa34909023837ea119b222def1a4c21ec076a4378ae1e10010000000000000f9a481bdeda68a9ca1e150"], 0x24}}, 0x0)

02:05:23 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r2=>0xffffffffffffffff, 0x8, 0x7efffffffffffeff, 0x4}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r3=>0x0}) (async)
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x5, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa, 0xb, 0x5, 0x4, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0xfffffff8, 0x9e, &(0x7f0000000100)=""/158, 0x41000, 0x2, '\x00', r3, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x5, 0x2, 0xcb99}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[r4, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x1}, 0x14}}, 0x0)

[ 1759.856034] nbd: must specify an index to disconnect
02:05:23 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4040c0, 0x0)
read$proc_mixer(r2, &(0x7f0000000080)=""/199, 0xc7)
dup2(r1, r0)

02:05:23 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:23 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'})
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="00032abd7000fcdbdf2502000000060003000600000008001800e000000106001a004e2400000c000f00f500000000000000050021000000000006001b004e2100000c000f00400000000000000006001c00090000000600030000000000"], 0x64}, 0x1, 0x0, 0x0, 0x24008800}, 0xc0d0)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r4, r0)

02:05:23 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cbe3841bce8bdf8a1647e877c9a24e54532b416bac5fbfae4bdc825abe19ebf989c7e2439de1a2ee1a17d714f10b7bb15f9c02636c2a097d38d254f0126e65b93f90325babe3f6c01bf387c34ce4403dc632a610cbd07dc3bb71d8fbacfd6c1e6192411c7eaf8dfe7a5033aa34909023837ea119b222def1a4c21ec076a4378ae1e10010000000000000f9a481bdeda68a9ca1e150"], 0x24}}, 0x0)

02:05:23 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)

02:05:23 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4040c0, 0x0)
read$proc_mixer(r2, &(0x7f0000000080)=""/199, 0xc7) (async)
dup2(r1, r0)

02:05:23 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r2=>0xffffffffffffffff, 0x8, 0x7efffffffffffeff, 0x4})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r3=>0x0})
pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x5, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa, 0xb, 0x5, 0x4, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0xfffffff8, 0x9e, &(0x7f0000000100)=""/158, 0x41000, 0x2, '\x00', r3, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x5, 0x2, 0xcb99}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[r4, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x1}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x7efffffffffffeff, 0x4}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async)
pipe2$watch_queue(&(0x7f0000000280), 0x80) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x5, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa, 0xb, 0x5, 0x4, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0xfffffff8, 0x9e, &(0x7f0000000100)=""/158, 0x41000, 0x2, '\x00', r3, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x5, 0x2, 0xcb99}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[r4, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x1}, 0x14}}, 0x0) (async)

[ 1759.931563] nbd: must specify an index to disconnect
02:05:23 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)

02:05:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:23 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'})
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="00032abd7000fcdbdf2502000000060003000600000008001800e000000106001a004e2400000c000f00f500000000000000050021000000000006001b004e2100000c000f00400000000000000006001c00090000000600030000000000"], 0x64}, 0x1, 0x0, 0x0, 0x24008800}, 0xc0d0) (async)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r4, r0)

02:05:23 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4040c0, 0x0)
read$proc_mixer(r2, &(0x7f0000000080)=""/199, 0xc7) (async)
dup2(r1, r0)

[ 1759.980215] nbd: must specify an index to disconnect
02:05:23 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cbe3841bce8bdf8a1647e877c9a24e54532b416bac5fbfae4bdc825abe19ebf989c7e2439de1a2ee1a17d714f10b7bb15f9c02636c2a097d38d254f0126e65b93f90325babe3f6c01bf387c34ce4403dc632a610cbd07dc3bb71d8fbacfd6c1e6192411c7eaf8dfe7a5033aa34909023837ea119b222def1a4c21ec076a4378ae1e10010000000000000f9a481bdeda68a9ca1e150"], 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cbe3841bce8bdf8a1647e877c9a24e54532b416bac5fbfae4bdc825abe19ebf989c7e2439de1a2ee1a17d714f10b7bb15f9c02636c2a097d38d254f0126e65b93f90325babe3f6c01bf387c34ce4403dc632a610cbd07dc3bb71d8fbacfd6c1e6192411c7eaf8dfe7a5033aa34909023837ea119b222def1a4c21ec076a4378ae1e10010000000000000f9a481bdeda68a9ca1e150"], 0x24}}, 0x0) (async)

02:05:23 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = dup2(r2, r1)
write$P9_RUNLINKAT(r5, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = dup2(r2, r0)
pipe2$9p(&(0x7f00000001c0), 0x80)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100000000000c00078008000100", @ANYRES32, @ANYBLOB="e086a02dd992d98b8471fa654c82572227b342fb4acb25ce9ab6c7c10203c4600b00992539af52246f6dfb63c5f37c88cdda924d39987b0d5f2925286afcaf20017ada4aab7c628611f2d1ad7e7bd243d206c204817983be6336c434a5db229c12a1f6ab51873d38b585fd04ff9993953b197330b563c0d4d8291f215f6c6a85279ffa56602db68ae2307079874eaddaa6e4f121936ee2e3a1164e2806f2c0779027"], 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe7}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '/dev/fb0\x00'}]}, 0x30}}, 0x24040004)

02:05:23 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)

02:05:23 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="00032abd7000fcdbdf2502000000060003000600000008001800e000000106001a004e2400000c000f00f500000000000000050021000000000006001b004e2100000c000f00400000000000000006001c00090000000600030000000000"], 0x64}, 0x1, 0x0, 0x0, 0x24008800}, 0xc0d0) (async)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r4, r0)

02:05:23 executing program 2:
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/21)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x50000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8001)

02:05:23 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2468c2, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)

02:05:23 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r1], 0x24}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r4=>0x0})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r2, {0x3}}, './file0\x00'})
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, 0x0)
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff, 0x0, 0x0, 0x0, 0x2}, [@exit, @generic={0x0, 0xf, 0xf, 0xf2, 0x2}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @generic={0x8, 0xe, 0x9, 0x6, 0x18000000}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x2, 0x834f, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1, r6, r7, 0xffffffffffffffff]}, 0x80)

02:05:23 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)

02:05:23 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = dup2(r2, r1)
write$P9_RUNLINKAT(r5, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = dup2(r2, r0)
pipe2$9p(&(0x7f00000001c0), 0x80)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100000000000c00078008000100", @ANYRES32, @ANYBLOB="e086a02dd992d98b8471fa654c82572227b342fb4acb25ce9ab6c7c10203c4600b00992539af52246f6dfb63c5f37c88cdda924d39987b0d5f2925286afcaf20017ada4aab7c628611f2d1ad7e7bd243d206c204817983be6336c434a5db229c12a1f6ab51873d38b585fd04ff9993953b197330b563c0d4d8291f215f6c6a85279ffa56602db68ae2307079874eaddaa6e4f121936ee2e3a1164e2806f2c0779027"], 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe7}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '/dev/fb0\x00'}]}, 0x30}}, 0x24040004)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
dup2(r2, r1) (async)
write$P9_RUNLINKAT(r5, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
dup2(r2, r0) (async)
pipe2$9p(&(0x7f00000001c0), 0x80) (async)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4) (async)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100000000000c00078008000100", @ANYRES32, @ANYBLOB="e086a02dd992d98b8471fa654c82572227b342fb4acb25ce9ab6c7c10203c4600b00992539af52246f6dfb63c5f37c88cdda924d39987b0d5f2925286afcaf20017ada4aab7c628611f2d1ad7e7bd243d206c204817983be6336c434a5db229c12a1f6ab51873d38b585fd04ff9993953b197330b563c0d4d8291f215f6c6a85279ffa56602db68ae2307079874eaddaa6e4f121936ee2e3a1164e2806f2c0779027"], 0x28}}, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe7}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '/dev/fb0\x00'}]}, 0x30}}, 0x24040004) (async)

02:05:23 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2e0042, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
dup2(r1, r0)
syz_open_dev$ttys(0xc, 0x2, 0x1)

02:05:23 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r1], 0x24}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r4=>0x0})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r2, {0x3}}, './file0\x00'})
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, 0x0)
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff, 0x0, 0x0, 0x0, 0x2}, [@exit, @generic={0x0, 0xf, 0xf, 0xf2, 0x2}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @generic={0x8, 0xe, 0x9, 0x6, 0x18000000}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x2, 0x834f, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1, r6, r7, 0xffffffffffffffff]}, 0x80)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r1], 0x24}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff, 0x0, 0x0, 0x0, 0x2}, [@exit, @generic={0x0, 0xf, 0xf, 0xf2, 0x2}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @generic={0x8, 0xe, 0x9, 0x6, 0x18000000}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x2, 0x834f, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1, r6, r7, 0xffffffffffffffff]}, 0x80) (async)

02:05:23 executing program 2:
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/21)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x50000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8001)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/21) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) (async)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x50000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8001) (async)

02:05:23 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)

[ 1760.095307] nbd: must specify a size in bytes for the device
[ 1760.115576] nbd: must specify an index to disconnect
02:05:23 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000040)={0x336, 0x7fff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r2, r0)

02:05:23 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2e0042, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
dup2(r1, r0)
syz_open_dev$ttys(0xc, 0x2, 0x1)

02:05:23 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)

02:05:23 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r1], 0x24}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r4=>0x0})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r2, {0x3}}, './file0\x00'})
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, 0x0)
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff, 0x0, 0x0, 0x0, 0x2}, [@exit, @generic={0x0, 0xf, 0xf, 0xf2, 0x2}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @generic={0x8, 0xe, 0x9, 0x6, 0x18000000}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x2, 0x834f, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1, r6, r7, 0xffffffffffffffff]}, 0x80)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r1], 0x24}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff, 0x0, 0x0, 0x0, 0x2}, [@exit, @generic={0x0, 0xf, 0xf, 0xf2, 0x2}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @generic={0x8, 0xe, 0x9, 0x6, 0x18000000}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x2, 0x834f, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1, r6, r7, 0xffffffffffffffff]}, 0x80) (async)

02:05:23 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 32)
r2 = dup2(r1, r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = dup2(r2, r1)
write$P9_RUNLINKAT(r5, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = dup2(r2, r0) (async)
pipe2$9p(&(0x7f00000001c0), 0x80)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100000000000c00078008000100", @ANYRES32, @ANYBLOB="e086a02dd992d98b8471fa654c82572227b342fb4acb25ce9ab6c7c10203c4600b00992539af52246f6dfb63c5f37c88cdda924d39987b0d5f2925286afcaf20017ada4aab7c628611f2d1ad7e7bd243d206c204817983be6336c434a5db229c12a1f6ab51873d38b585fd04ff9993953b197330b563c0d4d8291f215f6c6a85279ffa56602db68ae2307079874eaddaa6e4f121936ee2e3a1164e2806f2c0779027"], 0x28}}, 0x0) (async, rerun: 64)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe7}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '/dev/fb0\x00'}]}, 0x30}}, 0x24040004) (rerun: 64)

02:05:23 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000040)={0x336, 0x7fff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r2, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000040)={0x336, 0x7fff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r2, r0) (async)

[ 1760.165615] nbd: must specify a size in bytes for the device
[ 1760.190389] nbd: must specify an index to disconnect
02:05:23 executing program 2:
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/21)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x50000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8001)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000000c0)=""/21) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) (async)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x50000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8001) (async)

02:05:23 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2e0042, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
dup2(r1, r0)
syz_open_dev$ttys(0xc, 0x2, 0x1)

02:05:23 executing program 5:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)

02:05:23 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000055f3bccfdc351f02233d3f29115883f02512c18f25dfb7a46ce096e600cf33d9749cbf6b2ea856f72719b5816aee7ccc4d01ba71cb3682b33d2b5efd8e358c705758", @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:23 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2e0042, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
syz_open_dev$ttys(0xc, 0x2, 0x1)

02:05:23 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000040)={0x336, 0x7fff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r2, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000040)={0x336, 0x7fff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r2, r0) (async)

[ 1760.285611] nbd: must specify an index to disconnect
02:05:23 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2e0042, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)

02:05:23 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x3, 0x80000000, 0x8})
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)

02:05:23 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9e9f0000", @ANYRES16=r1, @ANYBLOB="0101000200000000000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x0)

02:05:23 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2e0042, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$ttys(0xc, 0x2, 0x1)

02:05:23 executing program 5:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)

02:05:23 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x440001, 0x0)

02:05:23 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000055f3bccfdc351f02233d3f29115883f02512c18f25dfb7a46ce096e600cf33d9749cbf6b2ea856f72719b5816aee7ccc4d01ba71cb3682b33d2b5efd8e358c705758", @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000055f3bccfdc351f02233d3f29115883f02512c18f25dfb7a46ce096e600cf33d9749cbf6b2ea856f72719b5816aee7ccc4d01ba71cb3682b33d2b5efd8e358c705758", @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0) (async)

02:05:23 executing program 5:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)

02:05:23 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9e9f0000", @ANYRES16=r1, @ANYBLOB="0101000200000000000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9e9f0000", @ANYRES16=r1, @ANYBLOB="0101000200000000000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (async)

02:05:23 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0) (async, rerun: 64)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x3, 0x80000000, 0x8}) (rerun: 64)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)

02:05:23 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2e0042, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$ttys(0xc, 0x2, 0x1)

02:05:23 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x440001, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x440001, 0x0) (async)

02:05:23 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x3, 0x80000000, 0x8}) (async)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)

02:05:23 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000055f3bccfdc351f02233d3f29115883f02512c18f25dfb7a46ce096e600cf33d9749cbf6b2ea856f72719b5816aee7ccc4d01ba71cb3682b33d2b5efd8e358c705758", @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:23 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0)

02:05:23 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2e0042, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)

02:05:23 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9e9f0000", @ANYRES16=r1, @ANYBLOB="0101000200000000000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9e9f0000", @ANYRES16=r1, @ANYBLOB="0101000200000000000003000000"], 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x0) (async)

02:05:23 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
open_by_handle_at(r1, &(0x7f0000000040)=@orangefs_parent={0x28, 0x2, {{"7adbcda6dee60e75d102f6a6d1e57786", 0x4}, {"b8cf47449b95c93b500047c632578d41", 0xfffff000}}}, 0x212401)
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000080)={0xf0b, 0x20, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
syz_open_dev$ttys(0xc, 0x2, 0x1)

02:05:23 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x0, 0x0, [0x8, 0x10000, 0x80000000, 0x0, 0x4, 0x1f, 0x47, 0x1, 0xff, 0x4, 0x3, 0x7f414a26, 0x3, 0x3, 0x0, 0x4]}, {0x0, 0x0, [0x2, 0x100, 0x8, 0x0, 0x7fffffff, 0x3, 0x8, 0x227, 0xc0000000, 0x1000, 0x6, 0x1ff, 0x7fff, 0x54e, 0x9, 0x400]}, {0x2, 0x0, [0xfffffff9, 0x6, 0xdff2ae1, 0x7, 0x10001, 0xf42, 0x1, 0x57, 0x200, 0x8000, 0x6, 0x8, 0x0, 0x3, 0xfffff700, 0x81]}, {0x24, 0x0, [0x2, 0x7d3, 0xf9ab, 0x30000, 0x80000001, 0x300000, 0x0, 0x0, 0xffffffff, 0x1, 0x2, 0x6, 0x1, 0x4, 0x100, 0x7]}], 0xffffffffffffffff, 0x1, 0x1, 0x120}}, 0x20)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:23 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x440001, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x440001, 0x0) (async)

02:05:23 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0)

02:05:23 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2e0042, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)

02:05:23 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xbf4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '(-::),*!-'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000)

02:05:23 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0) (async)
open_by_handle_at(r1, &(0x7f0000000040)=@orangefs_parent={0x28, 0x2, {{"7adbcda6dee60e75d102f6a6d1e57786", 0x4}, {"b8cf47449b95c93b500047c632578d41", 0xfffff000}}}, 0x212401)
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000080)={0xf0b, 0x20, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1)

02:05:23 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2e0042, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)

02:05:23 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x0, 0x0, [0x8, 0x10000, 0x80000000, 0x0, 0x4, 0x1f, 0x47, 0x1, 0xff, 0x4, 0x3, 0x7f414a26, 0x3, 0x3, 0x0, 0x4]}, {0x0, 0x0, [0x2, 0x100, 0x8, 0x0, 0x7fffffff, 0x3, 0x8, 0x227, 0xc0000000, 0x1000, 0x6, 0x1ff, 0x7fff, 0x54e, 0x9, 0x400]}, {0x2, 0x0, [0xfffffff9, 0x6, 0xdff2ae1, 0x7, 0x10001, 0xf42, 0x1, 0x57, 0x200, 0x8000, 0x6, 0x8, 0x0, 0x3, 0xfffff700, 0x81]}, {0x24, 0x0, [0x2, 0x7d3, 0xf9ab, 0x30000, 0x80000001, 0x300000, 0x0, 0x0, 0xffffffff, 0x1, 0x2, 0x6, 0x1, 0x4, 0x100, 0x7]}], 0xffffffffffffffff, 0x1, 0x1, 0x120}}, 0x20) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:23 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
dup2(0xffffffffffffffff, r0)

02:05:23 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0)

02:05:23 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
open_by_handle_at(r1, &(0x7f0000000040)=@orangefs_parent={0x28, 0x2, {{"7adbcda6dee60e75d102f6a6d1e57786", 0x4}, {"b8cf47449b95c93b500047c632578d41", 0xfffff000}}}, 0x212401)
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000080)={0xf0b, 0x20, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async, rerun: 32)
syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 32)

02:05:23 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
dup2(0xffffffffffffffff, r0)

02:05:23 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (rerun: 64)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) (async, rerun: 32)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xbf4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '(-::),*!-'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) (rerun: 32)

02:05:23 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)

[ 1760.636333] nbd: must specify a size in bytes for the device
02:05:23 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$ttys(0xc, 0x2, 0x1)

02:05:23 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async, rerun: 64)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x0, 0x0, [0x8, 0x10000, 0x80000000, 0x0, 0x4, 0x1f, 0x47, 0x1, 0xff, 0x4, 0x3, 0x7f414a26, 0x3, 0x3, 0x0, 0x4]}, {0x0, 0x0, [0x2, 0x100, 0x8, 0x0, 0x7fffffff, 0x3, 0x8, 0x227, 0xc0000000, 0x1000, 0x6, 0x1ff, 0x7fff, 0x54e, 0x9, 0x400]}, {0x2, 0x0, [0xfffffff9, 0x6, 0xdff2ae1, 0x7, 0x10001, 0xf42, 0x1, 0x57, 0x200, 0x8000, 0x6, 0x8, 0x0, 0x3, 0xfffff700, 0x81]}, {0x24, 0x0, [0x2, 0x7d3, 0xf9ab, 0x30000, 0x80000001, 0x300000, 0x0, 0x0, 0xffffffff, 0x1, 0x2, 0x6, 0x1, 0x4, 0x100, 0x7]}], 0xffffffffffffffff, 0x1, 0x1, 0x120}}, 0x20) (rerun: 64)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:23 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)

02:05:23 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
dup2(0xffffffffffffffff, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
dup2(0xffffffffffffffff, r0) (async)

02:05:24 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2e0042, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$ttys(0xc, 0x2, 0x1)

02:05:24 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000440)=@xfs_parent={0x1c, 0x82, {0x2, 0x80000001, 0x1, 0xffffffe0}}, 0x4000)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0xcc002, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340), 0x210000, 0x0)
r2 = dup2(r1, r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/nfs_layout_nfsv41_files', 0x1, 0x6e)
r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x4, 0x90000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1863000006000000000000000300000018400000fdffffff00000000008000008520000002000000"], &(0x7f0000000140)='syzkaller\x00', 0x2f5, 0x75, &(0x7f0000000180)=""/117, 0x40f00, 0xa, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000280)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xd, 0x8001, 0x1}, 0x10}, 0x80)

02:05:24 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)

02:05:24 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)

02:05:24 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffa}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x114}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000080}, 0x80)

02:05:24 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)

02:05:24 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xbf4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '(-::),*!-'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) (async)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xbf4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '(-::),*!-'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) (async)

02:05:24 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000440)=@xfs_parent={0x1c, 0x82, {0x2, 0x80000001, 0x1, 0xffffffe0}}, 0x4000)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0xcc002, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340), 0x210000, 0x0)
r2 = dup2(r1, r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r3=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/nfs_layout_nfsv41_files', 0x1, 0x6e)
r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x4, 0x90000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1863000006000000000000000300000018400000fdffffff00000000008000008520000002000000"], &(0x7f0000000140)='syzkaller\x00', 0x2f5, 0x75, &(0x7f0000000180)=""/117, 0x40f00, 0xa, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000280)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xd, 0x8001, 0x1}, 0x10}, 0x80)

02:05:24 executing program 4:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/55)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="01"], 0x24}, 0x1, 0x0, 0x0, 0x4044844}, 0x0)

02:05:24 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)

02:05:24 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r0, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:24 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffa}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x114}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000080}, 0x80)

02:05:24 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0)

02:05:24 executing program 4:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/55)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="01"], 0x24}, 0x1, 0x0, 0x0, 0x4044844}, 0x0)

02:05:24 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000440)=@xfs_parent={0x1c, 0x82, {0x2, 0x80000001, 0x1, 0xffffffe0}}, 0x4000)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0xcc002, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340), 0x210000, 0x0)
r2 = dup2(r1, r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r3=>0x0}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/nfs_layout_nfsv41_files', 0x1, 0x6e)
r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x4, 0x90000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1863000006000000000000000300000018400000fdffffff00000000008000008520000002000000"], &(0x7f0000000140)='syzkaller\x00', 0x2f5, 0x75, &(0x7f0000000180)=""/117, 0x40f00, 0xa, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000280)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xd, 0x8001, 0x1}, 0x10}, 0x80)

02:05:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:24 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, 0x0, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffa}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x114}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000080}, 0x80)

02:05:24 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)

[ 1760.924243] nbd: must specify a size in bytes for the device
02:05:24 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28eb4737173d6eaa53b2c00be3836eacea84e2a1c4641ae9", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000c00078008000100", @ANYRES32, @ANYBLOB], 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x804)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012abd7000fedbdf25030000000c000400080000000000000008000100000000000c00020000000080000000001400078008000100", @ANYRES32=r5, @ANYBLOB="087705a7", @ANYRES32, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4040800}, 0x40000c1)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000500)={0xa, 0x4}, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r7, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0xfffffffffffffd5b, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x2c}}, 0x4c090)

02:05:24 executing program 3:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
write$cgroup_devices(r2, &(0x7f00000000c0)={'a', ' *:* ', 'wm\x00'}, 0x9)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/mtd', 0x101041, 0x50)
dup2(r0, r1)

02:05:24 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)

02:05:24 executing program 4:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/55) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="01"], 0x24}, 0x1, 0x0, 0x0, 0x4044844}, 0x0)

02:05:24 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28eb4737173d6eaa53b2c00be3836eacea84e2a1c4641ae9", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000c00078008000100", @ANYRES32, @ANYBLOB], 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x804)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012abd7000fedbdf25030000000c000400080000000000000008000100000000000c00020000000080000000001400078008000100", @ANYRES32=r5, @ANYBLOB="087705a7", @ANYRES32, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4040800}, 0x40000c1)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000500)={0xa, 0x4}, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r7, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0xfffffffffffffd5b, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x2c}}, 0x4c090)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28eb4737173d6eaa53b2c00be3836eacea84e2a1c4641ae9", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000c00078008000100", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x804) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x0) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012abd7000fedbdf25030000000c000400080000000000000008000100000000000c00020000000080000000001400078008000100", @ANYRES32=r5, @ANYBLOB="087705a7", @ANYRES32, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4040800}, 0x40000c1) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000500)={0xa, 0x4}, 0xc) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6) (async)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r7, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0xfffffffffffffd5b, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x2c}}, 0x4c090) (async)

02:05:24 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28eb4737173d6eaa53b2c00be3836eacea84e2a1c4641ae9", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000c00078008000100", @ANYRES32, @ANYBLOB], 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x804)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012abd7000fedbdf25030000000c000400080000000000000008000100000000000c00020000000080000000001400078008000100", @ANYRES32=r5, @ANYBLOB="087705a7", @ANYRES32, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4040800}, 0x40000c1)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000500)={0xa, 0x4}, 0xc)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r7, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0xfffffffffffffd5b, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x2c}}, 0x4c090)

02:05:24 executing program 3:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) (async)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) (async)
write$cgroup_devices(r2, &(0x7f00000000c0)={'a', ' *:* ', 'wm\x00'}, 0x9)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/mtd', 0x101041, 0x50) (async)
dup2(r0, r1)

02:05:24 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)

02:05:24 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x10101)
dup2(r1, r0)

02:05:24 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a7af8b27aee769e2fe3ea096337f43a6fd7389201225a705bd9f287de7c3189d0052f5d073156a2dacbb619fc46384fdc666041449d58140bf35663315b2138dd6f1", @ANYRES16=r1, @ANYBLOB="01"], 0x24}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="00082abd7000fcdbdf2502000000af3664064b38382e53fb0fbc4a4fc7533956eaaee7f7deeca0ed1678eec0301c3041355b1a27"], 0x14}, 0x1, 0x0, 0x0, 0x404c094}, 0x4010)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000140)={r3, 0x5, 0x80, 0x96a5})

02:05:24 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

02:05:24 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={<r4=>r3, 0x100000005, 0x45c3, 0x2})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000100)=[@acquire_done], 0x94, 0x0, &(0x7f0000000140)="a2f93f6a64777eaf88f5da0053b32fc5e595c6a042c1af312413d03ff9d8d2402d5ed230e227f8b27f03de21e830dd3d9eb49895baf123e51899b3e75c31e99bb9a2f195ddf44950a7fd4f060538883c38727b9d54208f778cd3dd65d039e05b9ac64faf67259f242c7d77f1cb1b5bae25d1f23379fc64c49cf39e850db719a0a191006a881c40013b7170f721ce96579f7a7c7c"})
semget$private(0x0, 0x4, 0x10)

02:05:24 executing program 3:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) (async)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) (async)
write$cgroup_devices(r2, &(0x7f00000000c0)={'a', ' *:* ', 'wm\x00'}, 0x9) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/mtd', 0x101041, 0x50) (async)
dup2(r0, r1)

02:05:24 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

02:05:24 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28eb4737173d6eaa53b2c00be3836eacea84e2a1c4641ae9", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000c00078008000100", @ANYRES32, @ANYBLOB], 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x804) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x0) (async)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012abd7000fedbdf25030000000c000400080000000000000008000100000000000c00020000000080000000001400078008000100", @ANYRES32=r5, @ANYBLOB="087705a7", @ANYRES32, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4040800}, 0x40000c1) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000500)={0xa, 0x4}, 0xc) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r7, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0xfffffffffffffd5b, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x2c}}, 0x4c090)

02:05:24 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={<r4=>r3, 0x100000005, 0x45c3, 0x2})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000100)=[@acquire_done], 0x94, 0x0, &(0x7f0000000140)="a2f93f6a64777eaf88f5da0053b32fc5e595c6a042c1af312413d03ff9d8d2402d5ed230e227f8b27f03de21e830dd3d9eb49895baf123e51899b3e75c31e99bb9a2f195ddf44950a7fd4f060538883c38727b9d54208f778cd3dd65d039e05b9ac64faf67259f242c7d77f1cb1b5bae25d1f23379fc64c49cf39e850db719a0a191006a881c40013b7170f721ce96579f7a7c7c"})
semget$private(0x0, 0x4, 0x10)

02:05:24 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

02:05:24 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x10101) (async)
dup2(r1, r0)

02:05:24 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
open_by_handle_at(r1, &(0x7f0000000280)=@reiserfs_5={0x14, 0x5, {0x7, 0x9, 0x9, 0x3ff, 0x691}}, 0x30040)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_setup(0x4, &(0x7f0000000140)=<r3=>0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={<r4=>r0, 0x1, 0x7, 0x8})
io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)="11588030beeeef7ead63e9f25e2bf8b4d651bc21cfb9f2abe2e00b9b7382b26f7ffaf3102d34926581e7a6", 0x2b, 0x2}])
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r5, 0x7}}, 0x10)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$P9_RWSTAT(r6, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7)
sendto$llc(0xffffffffffffffff, &(0x7f0000000040)="cb9af4f9746c2b7bf52c7d78", 0xc, 0x4040, &(0x7f0000000080)={0x1a, 0x13, 0x8c, 0x9, 0x7, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x10)
r7 = syz_open_dev$ttys(0xc, 0x2, 0x0)
dup2(r7, r6)

02:05:24 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a7af8b27aee769e2fe3ea096337f43a6fd7389201225a705bd9f287de7c3189d0052f5d073156a2dacbb619fc46384fdc666041449d58140bf35663315b2138dd6f1", @ANYRES16=r1, @ANYBLOB="01"], 0x24}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="00082abd7000fcdbdf2502000000af3664064b38382e53fb0fbc4a4fc7533956eaaee7f7deeca0ed1678eec0301c3041355b1a27"], 0x14}, 0x1, 0x0, 0x0, 0x404c094}, 0x4010) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000140)={r3, 0x5, 0x80, 0x96a5})

02:05:24 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x10101)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x10101) (async)
dup2(r1, r0) (async)

02:05:24 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20ed3e31881163b5, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)

02:05:24 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)

02:05:24 executing program 2:
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008804}, 0x840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x1, 0xffffffff}, 0x14}}, 0x0)

02:05:24 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x62c802, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x28000000)
dup2(r1, r0)

02:05:24 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a7af8b27aee769e2fe3ea096337f43a6fd7389201225a705bd9f287de7c3189d0052f5d073156a2dacbb619fc46384fdc666041449d58140bf35663315b2138dd6f1", @ANYRES16=r1, @ANYBLOB="01"], 0x24}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="00082abd7000fcdbdf2502000000af3664064b38382e53fb0fbc4a4fc7533956eaaee7f7deeca0ed1678eec0301c3041355b1a27"], 0x14}, 0x1, 0x0, 0x0, 0x404c094}, 0x4010)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000140)={r3, 0x5, 0x80, 0x96a5})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a7af8b27aee769e2fe3ea096337f43a6fd7389201225a705bd9f287de7c3189d0052f5d073156a2dacbb619fc46384fdc666041449d58140bf35663315b2138dd6f1", @ANYRES16=r1, @ANYBLOB="01"], 0x24}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="00082abd7000fcdbdf2502000000af3664064b38382e53fb0fbc4a4fc7533956eaaee7f7deeca0ed1678eec0301c3041355b1a27"], 0x14}, 0x1, 0x0, 0x0, 0x404c094}, 0x4010) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000140)={r3, 0x5, 0x80, 0x96a5}) (async)

02:05:24 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:24 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
dup2(0xffffffffffffffff, r0)

02:05:24 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
open_by_handle_at(r1, &(0x7f0000000280)=@reiserfs_5={0x14, 0x5, {0x7, 0x9, 0x9, 0x3ff, 0x691}}, 0x30040)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_setup(0x4, &(0x7f0000000140)=<r3=>0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={<r4=>r0, 0x1, 0x7, 0x8})
io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)="11588030beeeef7ead63e9f25e2bf8b4d651bc21cfb9f2abe2e00b9b7382b26f7ffaf3102d34926581e7a6", 0x2b, 0x2}]) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r5}}, 0x10) (async)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r5, 0x7}}, 0x10) (async)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$P9_RWSTAT(r6, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7) (async)
sendto$llc(0xffffffffffffffff, &(0x7f0000000040)="cb9af4f9746c2b7bf52c7d78", 0xc, 0x4040, &(0x7f0000000080)={0x1a, 0x13, 0x8c, 0x9, 0x7, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x10) (async)
r7 = syz_open_dev$ttys(0xc, 0x2, 0x0)
dup2(r7, r6)

02:05:24 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
open_by_handle_at(r1, &(0x7f0000000280)=@reiserfs_5={0x14, 0x5, {0x7, 0x9, 0x9, 0x3ff, 0x691}}, 0x30040)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_setup(0x4, &(0x7f0000000140)=<r3=>0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={<r4=>r0, 0x1, 0x7, 0x8})
io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)="11588030beeeef7ead63e9f25e2bf8b4d651bc21cfb9f2abe2e00b9b7382b26f7ffaf3102d34926581e7a6", 0x2b, 0x2}])
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r5, 0x7}}, 0x10)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$P9_RWSTAT(r6, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7)
sendto$llc(0xffffffffffffffff, &(0x7f0000000040)="cb9af4f9746c2b7bf52c7d78", 0xc, 0x4040, &(0x7f0000000080)={0x1a, 0x13, 0x8c, 0x9, 0x7, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x10)
r7 = syz_open_dev$ttys(0xc, 0x2, 0x0)
dup2(r7, r6)

02:05:24 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:24 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:24 executing program 2:
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008804}, 0x840) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) (async, rerun: 32)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x1, 0xffffffff}, 0x14}}, 0x0) (rerun: 32)

02:05:24 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
dup2(0xffffffffffffffff, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
dup2(0xffffffffffffffff, r0) (async)

[ 1761.274451] nbd: must specify a size in bytes for the device
[ 1761.303524] nbd: must specify an index to disconnect
02:05:24 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:24 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:24 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:24 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
dup2(0xffffffffffffffff, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
dup2(0xffffffffffffffff, r0) (async)

02:05:24 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
open_by_handle_at(r1, &(0x7f0000000280)=@reiserfs_5={0x14, 0x5, {0x7, 0x9, 0x9, 0x3ff, 0x691}}, 0x30040) (async, rerun: 32)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32)
io_setup(0x4, &(0x7f0000000140)=<r3=>0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={<r4=>r0, 0x1, 0x7, 0x8})
io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)="11588030beeeef7ead63e9f25e2bf8b4d651bc21cfb9f2abe2e00b9b7382b26f7ffaf3102d34926581e7a6", 0x2b, 0x2}]) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r5}}, 0x10) (async)
write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r5, 0x7}}, 0x10) (async)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$P9_RWSTAT(r6, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7)
sendto$llc(0xffffffffffffffff, &(0x7f0000000040)="cb9af4f9746c2b7bf52c7d78", 0xc, 0x4040, &(0x7f0000000080)={0x1a, 0x13, 0x8c, 0x9, 0x7, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x10)
r7 = syz_open_dev$ttys(0xc, 0x2, 0x0)
dup2(r7, r6)

[ 1761.386800] nbd: must specify a size in bytes for the device
[ 1761.396855] nbd: must specify an index to disconnect
[ 1761.407404] nbd: must specify an index to disconnect
02:05:24 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:24 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x24}}, 0x0)

02:05:24 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])
socket$nl_generic(0x10, 0x3, 0x10)

[ 1761.433370] nbd: must specify a size in bytes for the device
[ 1761.439278] nbd: must specify an index to disconnect
[ 1761.445110] nbd: must specify a size in bytes for the device
[ 1761.457145] nbd: must specify an index to disconnect
[ 1761.474244] nbd: must specify an index to disconnect
02:05:24 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:24 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

[ 1761.488504] nbd: must specify a size in bytes for the device
[ 1761.495426] nbd: must specify a size in bytes for the device
[ 1761.517710] nbd: must specify an index to disconnect
[ 1761.524010] nbd: must specify an index to disconnect
[ 1761.542731] nbd: must specify a size in bytes for the device
[ 1761.554321] nbd: must specify a size in bytes for the device
[ 1761.560357] nbd: must specify an index to disconnect
[ 1761.573860] nbd: must specify an index to disconnect
[ 1761.579102] nbd: must specify a size in bytes for the device
[ 1761.586018] nbd: must specify a size in bytes for the device
[ 1761.591872] nbd: must specify an index to disconnect
[ 1761.597855] nbd: must specify an index to disconnect
[ 1761.603850] nbd: must specify a size in bytes for the device
[ 1761.609855] nbd: must specify a size in bytes for the device
[ 1761.617825] nbd: must specify an index to disconnect
[ 1761.623477] nbd: must specify a size in bytes for the device
[ 1761.629450] nbd: must specify an index to disconnect
[ 1761.635620] nbd: must specify a size in bytes for the device
[ 1761.641584] nbd: must specify an index to disconnect
[ 1761.647690] nbd: must specify a size in bytes for the device
[ 1761.654059] nbd: must specify an index to disconnect
[ 1761.659388] nbd: must specify an index to disconnect
[ 1761.665075] nbd: must specify a size in bytes for the device
[ 1761.670909] nbd: must specify an index to disconnect
[ 1761.676136] nbd: must specify a size in bytes for the device
[ 1761.681980] nbd: must specify an index to disconnect
[ 1761.687420] nbd: must specify an index to disconnect
[ 1761.692698] nbd: must specify a size in bytes for the device
[ 1761.698544] nbd: must specify an index to disconnect
[ 1761.703819] nbd: must specify an index to disconnect
[ 1761.708953] nbd: must specify a size in bytes for the device
[ 1761.714970] nbd: must specify a size in bytes for the device
[ 1761.721111] nbd: must specify an index to disconnect
[ 1761.726302] nbd: must specify a size in bytes for the device
[ 1761.732140] nbd: must specify an index to disconnect
[ 1761.737392] nbd: must specify an index to disconnect
[ 1761.742656] nbd: must specify a size in bytes for the device
[ 1761.748477] nbd: must specify an index to disconnect
[ 1761.753901] nbd: must specify an index to disconnect
[ 1761.759073] nbd: must specify a size in bytes for the device
[ 1761.764966] nbd: must specify an index to disconnect
[ 1761.770116] nbd: must specify a size in bytes for the device
[ 1761.776107] nbd: must specify a size in bytes for the device
[ 1761.781922] nbd: must specify an index to disconnect
[ 1761.787166] nbd: must specify a size in bytes for the device
[ 1761.793057] nbd: must specify an index to disconnect
[ 1761.798208] nbd: must specify a size in bytes for the device
[ 1761.804255] nbd: must specify a size in bytes for the device
[ 1761.810106] nbd: must specify an index to disconnect
[ 1761.815444] nbd: must specify an index to disconnect
[ 1761.820559] nbd: must specify a size in bytes for the device
[ 1761.826472] nbd: must specify an index to disconnect
[ 1761.831626] nbd: must specify a size in bytes for the device
[ 1761.837579] nbd: must specify a size in bytes for the device
02:05:25 executing program 2:
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008804}, 0x840)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x1, 0xffffffff}, 0x14}}, 0x0)

02:05:25 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100e2b2021465749c34df03b400000000000000b2c1e5ed2c9dfb8bfa20670002000000"], 0x14}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000000c0)={0x3, 0x26, 0x3, 0x4, 0x4, [{0xfff, 0x8, 0x8, '\x00', 0x200}, {0x3, 0x7, 0x4, '\x00', 0x88}, {0x9, 0x7, 0x656}, {0x515c, 0x5b3, 0x1, '\x00', 0x8}]})
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
r5 = getuid()
getresuid(&(0x7f0000000200)=<r6=>0x0, &(0x7f0000000240), &(0x7f0000000280))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x148080, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}, {@nodevmap}, {@cache_none}, {@aname={'aname', 0x3d, '#{V]%*$*/'}}, {@cache_fscache}, {@cache_none}], [{@fowner_gt={'fowner>', r5}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@appraise}, {@audit}, {@euid_gt={'euid>', r6}}, {@uid_gt={'uid>', 0xee00}}]}})

02:05:25 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

02:05:25 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:25 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async, rerun: 32)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 32)
dup2(r1, r0)

02:05:25 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x408500, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

[ 1761.843522] nbd: must specify an index to disconnect
[ 1761.848630] nbd: must specify a size in bytes for the device
[ 1761.854561] nbd: must specify a size in bytes for the device
[ 1761.860393] nbd: must specify a size in bytes for the device
02:05:25 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

02:05:25 executing program 4:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bind$llc(r2, &(0x7f0000000080)={0x1a, 0x338, 0x6, 0x81, 0x81, 0x6, @random="011f0000803d"}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)
dup2(r1, r0)

02:05:25 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)

02:05:25 executing program 5:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:25 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x408500, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:25 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

02:05:25 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x2}, 0x14}}, 0x0)

02:05:25 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
io_destroy(0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

[ 1761.956390] nbd: must specify an index to disconnect
[ 1761.961745] nbd: must specify a size in bytes for the device
02:05:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x0, 0x28880)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000858)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x6f03c0, 0x0)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r4, r4)

02:05:25 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x408500, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:25 executing program 5:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:25 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x2}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x2}, 0x14}}, 0x0) (async)

02:05:25 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])
socket$nl_generic(0x10, 0x3, 0x10)

02:05:25 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
io_destroy(0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

[ 1762.028153] nbd: must specify an index to disconnect
[ 1762.048150] nbd: must specify an index to disconnect
02:05:25 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(0xffffffffffffffff, r0)

02:05:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x0, 0x28880)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000858)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x6f03c0, 0x0)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r4, r4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8004) (async)
syz_open_dev$mouse(&(0x7f00000001c0), 0x0, 0x28880) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) (async)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000858) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x6f03c0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r4, r4) (async)

02:05:25 executing program 5:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

[ 1762.114907] nbd: must specify an index to disconnect
02:05:25 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])
socket$nl_generic(0x10, 0x3, 0x10)

02:05:25 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(0xffffffffffffffff, r0)

[ 1762.136603] nbd: must specify an index to disconnect
02:05:25 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x2}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x2}, 0x14}}, 0x0) (async)

02:05:25 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="4175a20f69643c67b71d8ff439ec8ba8e68e57899ac9789ea6bd7aa8c09f610b63022ae533aaabcf7f4341693a6322d93db482e92a03b176a8ac77b26d8109ea4a3f7aa67e3b6c6470fa8817ac6c1bec490da8cf7eedb6412b4cbf578fa3e3d0ce0a319edc65c07c7611f3d921cade644dc0a61ad80314c0ba2c191b2ad9ef7f545e6b70748a5d8a4a4910fabe4c55fe515396a8abcc8104ec807a42647b1f99958cd502846c40a92241243cbfa29b4b3a0848366a4d6b874753c03a00be7c2395617f31f57087c5226307612e4bb7c4167107633a3b1a13e8e4496186fcebc7a577f04466cd013c4e3fb4bd486b3023ae15bab17be55ae202bbe82b4bbacc4df01b78e263315673b20637d456a249ebbd8c2674ebc5ea0abfc3f866f95caf25c905a635f7b54aab072e23a77034d8bd85ae0c89cb5cb2852e30e1ea9845d3adc10d", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])

02:05:25 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:25 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup2(0xffffffffffffffff, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
dup2(0xffffffffffffffff, r0) (async)

[ 1762.170736] nbd: must specify an index to disconnect
02:05:25 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="4175a20f69643c67b71d8ff439ec8ba8e68e57899ac9789ea6bd7aa8c09f610b63022ae533aaabcf7f4341693a6322d93db482e92a03b176a8ac77b26d8109ea4a3f7aa67e3b6c6470fa8817ac6c1bec490da8cf7eedb6412b4cbf578fa3e3d0ce0a319edc65c07c7611f3d921cade644dc0a61ad80314c0ba2c191b2ad9ef7f545e6b70748a5d8a4a4910fabe4c55fe515396a8abcc8104ec807a42647b1f99958cd502846c40a92241243cbfa29b4b3a0848366a4d6b874753c03a00be7c2395617f31f57087c5226307612e4bb7c4167107633a3b1a13e8e4496186fcebc7a577f04466cd013c4e3fb4bd486b3023ae15bab17be55ae202bbe82b4bbacc4df01b78e263315673b20637d456a249ebbd8c2674ebc5ea0abfc3f866f95caf25c905a635f7b54aab072e23a77034d8bd85ae0c89cb5cb2852e30e1ea9845d3adc10d", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])
socket$nl_generic(0x10, 0x3, 0x10)

02:05:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x0, 0x28880) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000858) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x6f03c0, 0x0)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r4, r4)

[ 1762.224339] nbd: must specify an index to disconnect
02:05:25 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:25 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])

02:05:25 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0)
r2 = syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x8400)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x18440, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffa9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10001}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x4)

[ 1762.251576] nbd: must specify an index to disconnect
02:05:25 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
semget(0x3, 0x4, 0x2)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:25 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:25 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x3e000)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4}}, 0x10)
r6 = dup2(r0, r1)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="01ffdf000100000018f7ff00", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120)
r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, 0x0)
write$P9_RWSTAT(r8, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7)
pipe2$watch_queue(&(0x7f0000000300), 0x80)

02:05:25 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])

02:05:25 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])

02:05:25 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
semget(0x3, 0x4, 0x2) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:25 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

[ 1762.325510] nbd: must specify an index to disconnect
02:05:25 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0)
r2 = syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x8400) (async)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) (async)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x18440, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffa9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10001}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x4)

02:05:25 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)

02:05:25 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
semget(0x3, 0x4, 0x2) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:25 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:25 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (rerun: 32)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async)
r2 = syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x8400) (async)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x18440, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffa9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10001}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x4)

[ 1762.390922] nbd: must specify an index to disconnect
02:05:25 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20) (async)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x3e000)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4}}, 0x10)
r6 = dup2(r0, r1)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="01ffdf000100000018f7ff00", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async, rerun: 32)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120) (rerun: 32)
r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, 0x0) (async)
write$P9_RWSTAT(r8, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) (async)
pipe2$watch_queue(&(0x7f0000000300), 0x80)

02:05:25 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x3e000)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4}}, 0x10)
r6 = dup2(r0, r1)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="01ffdf000100000018f7ff00", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120)
r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, 0x0)
write$P9_RWSTAT(r8, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7)
pipe2$watch_queue(&(0x7f0000000300), 0x80)

02:05:25 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)

02:05:25 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
io_setup(0x8, &(0x7f0000000040))
dup2(r1, r0)

02:05:25 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:25 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x3e000)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4}}, 0x10)
r6 = dup2(r0, r1)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="01ffdf000100000018f7ff00", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120)
r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, 0x0)
write$P9_RWSTAT(r8, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7)
pipe2$watch_queue(&(0x7f0000000300), 0x80)

02:05:25 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01004e0000000000000002000000"], 0x14}}, 0x0)

[ 1762.502851] nbd: must specify an index to disconnect
02:05:25 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x3e000)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4}}, 0x10)
r6 = dup2(r0, r1)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="01ffdf000100000018f7ff00", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120)
r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, 0x0)
write$P9_RWSTAT(r8, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7)
pipe2$watch_queue(&(0x7f0000000300), 0x80)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x3e000) (async)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4}}, 0x10) (async)
dup2(r0, r1) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="01ffdf000100000018f7ff00", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, 0x0) (async)
write$P9_RWSTAT(r8, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) (async)
pipe2$watch_queue(&(0x7f0000000300), 0x80) (async)

02:05:25 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:25 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

02:05:25 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
io_setup(0x8, &(0x7f0000000040))
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
io_setup(0x8, &(0x7f0000000040)) (async)
dup2(r1, r0) (async)

02:05:25 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01004e0000000000000002000000"], 0x14}}, 0x0)

02:05:25 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

[ 1762.585061] nbd: must specify an index to disconnect
02:05:25 executing program 1:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x10000, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x400280, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1104401, &(0x7f0000000300)=ANY=[@ANYBLOB="7472460000cf2d7266646a6f3dc575bc1df40100cf0000941fc65664a9b668740b35337d7f3ae767bc8bf65b8545555cb215ac84f530120a787fd3edab9c57d898845efc89ce4726573a85423cfde3fc6336881d6e93ba2291d270caa48181f971", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',access=user,dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB="2c616669643d3078303030303030303030303030303030342c6f626a5f726f6c653d2f6465762f666230002c686173682c726f6f74636f6e746578743d726f6f742c6f626a5f747970653d2f6465762f666230002c736d61636b6673666c6f6f723d21ab2c00"])
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4f6d}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r3, r2)

02:05:25 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

02:05:25 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x3e000)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4}}, 0x10)
r6 = dup2(r0, r1)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="01ffdf000100000018f7ff00", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120)
r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, 0x0)
write$P9_RWSTAT(r8, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7)
pipe2$watch_queue(&(0x7f0000000300), 0x80)

02:05:25 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01004e0000000000000002000000"], 0x14}}, 0x0)

[ 1762.639510] nbd: must specify an index to disconnect
02:05:25 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:25 executing program 1:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 64)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x10000, 0x4) (rerun: 32)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x400280, 0x0) (async, rerun: 32)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1104401, &(0x7f0000000300)=ANY=[@ANYBLOB="7472460000cf2d7266646a6f3dc575bc1df40100cf0000941fc65664a9b668740b35337d7f3ae767bc8bf65b8545555cb215ac84f530120a787fd3edab9c57d898845efc89ce4726573a85423cfde3fc6336881d6e93ba2291d270caa48181f971", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',access=user,dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB="2c616669643d3078303030303030303030303030303030342c6f626a5f726f6c653d2f6465762f666230002c686173682c726f6f74636f6e746578743d726f6f742c6f626a5f747970653d2f6465762f666230002c736d61636b6673666c6f6f723d21ab2c00"]) (rerun: 32)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4f6d}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000) (async)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r3, r2)

02:05:25 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

02:05:25 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
io_setup(0x8, &(0x7f0000000040)) (async)
dup2(r1, r0)

02:05:25 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x3e000)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4}}, 0x10)
r6 = dup2(r0, r1)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="01ffdf000100000018f7ff00", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120)
r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, 0x0)
write$P9_RWSTAT(r8, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7)

02:05:26 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)

02:05:26 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

[ 1762.715642] nbd: must specify an index to disconnect
02:05:26 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)

02:05:26 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:26 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x3e000)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4}}, 0x10)
r6 = dup2(r0, r1)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="01ffdf000100000018f7ff00", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "7d1239f5c127103e7463c6ad31c76475dc078b6665eacc8835bbf52fa2a686216b76105160c20c1c50bf7f67cfbb887d87e0ff3e50d11f3608ba64fd25c94bddc522ef4a749eef30536612bab43f898ab473d6938cdbfda1b0afd13ceaa201c11e7779aaa87cfa03492cac631bc017f2cf89cd0e8f2b286fa9516cf2f43723c6a4c3761b19fc311306b8c4ce7325379f93f9d7166b0bf1e8c269da51e74a18820bf113d9169e8973f467b170b576a6a5863d22830aff260efbef737eb29d2fb553f4ec9038b14dbbbd44e1b7300e723c4fadfcdb573237625602bd897c4d81d0a8cbb8b8cd1e154374075799a45b438f165e5f8e2d42e019cbaef10fa55eb352", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120)
r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, 0x0)

[ 1762.789304] nbd: must specify an index to disconnect
02:05:26 executing program 1:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x10000, 0x4) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x400280, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1104401, &(0x7f0000000300)=ANY=[@ANYBLOB="7472460000cf2d7266646a6f3dc575bc1df40100cf0000941fc65664a9b668740b35337d7f3ae767bc8bf65b8545555cb215ac84f530120a787fd3edab9c57d898845efc89ce4726573a85423cfde3fc6336881d6e93ba2291d270caa48181f971", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',access=user,dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB="2c616669643d3078303030303030303030303030303030342c6f626a5f726f6c653d2f6465762f666230002c686173682c726f6f74636f6e746578743d726f6f742c6f626a5f747970653d2f6465762f666230002c736d61636b6673666c6f6f723d21ab2c00"])
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4f6d}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000) (async)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r3, r2)

02:05:26 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) (async, rerun: 64)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (rerun: 64)

02:05:26 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x202402, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000080)={0x770, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
dup2(r1, r0)

02:05:26 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)

02:05:26 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:26 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0080, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x10, 0x3, 0xe339, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7000000000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000040)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(r0, r1)

02:05:26 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x3e000)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4}}, 0x10)
r6 = dup2(r0, r1)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="01ffdf000100000018f7ff00", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

02:05:26 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x202402, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000080)={0x770, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
dup2(r1, r0)

[ 1762.897858] nbd: must specify an index to disconnect
02:05:26 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
dup2(r1, r0)

02:05:26 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

[ 1762.931755] nbd: must specify an index to disconnect
[ 1762.948301] nbd: must specify an index to disconnect
02:05:26 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
dup2(r1, r0)

02:05:26 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0080, 0x0) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socketpair(0x10, 0x3, 0xe339, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7000000000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000040)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
dup2(r0, r1)

02:05:26 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x202402, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000080)={0x770, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x202402, 0x0) (async)
ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000080)={0x770, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
dup2(r1, r0) (async)

[ 1762.975072] nbd: must specify an index to disconnect
[ 1762.991786] nbd: must specify an index to disconnect
[ 1763.005029] nbd: must specify an index to disconnect
[ 1763.025051] nbd: must specify an index to disconnect
[ 1763.037890] nbd: must specify an index to disconnect
[ 1763.050210] nbd: must specify an index to disconnect
[ 1763.055731] nbd: must specify an index to disconnect
[ 1763.061003] nbd: must specify an index to disconnect
[ 1763.066994] nbd: must specify an index to disconnect
[ 1763.072316] nbd: must specify an index to disconnect
[ 1763.078281] nbd: must specify an index to disconnect
[ 1763.083725] nbd: must specify an index to disconnect
[ 1763.088976] nbd: must specify an index to disconnect
[ 1763.094439] nbd: must specify an index to disconnect
[ 1763.099651] nbd: must specify an index to disconnect
[ 1763.105161] nbd: must specify an index to disconnect
[ 1763.110381] nbd: must specify an index to disconnect
[ 1763.115666] nbd: must specify an index to disconnect
[ 1763.123839] nbd: must specify an index to disconnect
[ 1763.129009] nbd: must specify an index to disconnect
[ 1763.134456] nbd: must specify an index to disconnect
[ 1763.139620] nbd: must specify an index to disconnect
[ 1763.144866] nbd: must specify an index to disconnect
[ 1763.150043] nbd: must specify an index to disconnect
[ 1763.155271] nbd: must specify an index to disconnect
[ 1763.160447] nbd: must specify an index to disconnect
[ 1763.166079] nbd: must specify an index to disconnect
[ 1763.171250] nbd: must specify an index to disconnect
[ 1763.177666] nbd: must specify an index to disconnect
[ 1763.183388] nbd: must specify an index to disconnect
[ 1763.188631] nbd: must specify an index to disconnect
[ 1763.194821] nbd: must specify an index to disconnect
[ 1763.200070] nbd: must specify an index to disconnect
[ 1763.206055] nbd: must specify an index to disconnect
[ 1763.211482] nbd: must specify an index to disconnect
[ 1763.217584] nbd: must specify an index to disconnect
[ 1763.223214] nbd: must specify an index to disconnect
[ 1763.228453] nbd: must specify an index to disconnect
[ 1763.234561] nbd: must specify an index to disconnect
[ 1763.239804] nbd: must specify an index to disconnect
[ 1763.246003] nbd: must specify an index to disconnect
[ 1763.251177] nbd: must specify an index to disconnect
[ 1763.256850] nbd: must specify an index to disconnect
[ 1763.261987] nbd: must specify an index to disconnect
[ 1763.267647] nbd: must specify an index to disconnect
[ 1763.273363] nbd: must specify an index to disconnect
[ 1763.278494] nbd: must specify an index to disconnect
[ 1763.284421] nbd: must specify an index to disconnect
[ 1763.289561] nbd: must specify an index to disconnect
[ 1763.295242] nbd: must specify an index to disconnect
[ 1763.300384] nbd: must specify an index to disconnect
[ 1763.306072] nbd: must specify an index to disconnect
[ 1763.311200] nbd: must specify an index to disconnect
[ 1763.316913] nbd: must specify an index to disconnect
02:05:26 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r3, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)

02:05:26 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0)

02:05:26 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x3e000)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4}}, 0x10)
r6 = dup2(r0, r1)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="01ffdf000100000018f7ff00", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120)

02:05:26 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
dup2(r1, r0)

02:05:26 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0080, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x10, 0x3, 0xe339, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7000000000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000040)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(r0, r1)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0080, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair(0x10, 0x3, 0xe339, &(0x7f0000000080)) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7000000000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
dup2(r0, r1) (async)

02:05:26 executing program 3:
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(r0, r1)

[ 1763.322043] nbd: must specify an index to disconnect
[ 1763.327999] nbd: must specify an index to disconnect
[ 1763.333730] nbd: must specify an index to disconnect
[ 1763.338872] nbd: must specify an index to disconnect
[ 1763.344759] nbd: must specify an index to disconnect
[ 1763.349952] nbd: must specify an index to disconnect
[ 1763.355243] nbd: must specify an index to disconnect
[ 1763.360382] nbd: must specify an index to disconnect
02:05:26 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0)

02:05:26 executing program 3:
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(r0, r1)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000080)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
dup2(r0, r1) (async)

02:05:26 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0)

02:05:26 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x3e000)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4}}, 0x10)
dup2(r0, r1)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120)

02:05:26 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
dup2(r1, r0)

[ 1763.436713] nbd: must specify an index to disconnect
02:05:26 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, './file0\x00'})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nbd', 0x10000, 0x26)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x7}}, './file0\x00'})
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40)

02:05:26 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2262c2, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0)
r2 = dup2(r1, r0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)

02:05:26 executing program 3:
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
dup2(r0, r1)

02:05:26 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)

02:05:26 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x3e000)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4}}, 0x10)
dup2(r0, r1)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120)

02:05:26 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
dup2(r1, r0)

02:05:26 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, './file0\x00'})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nbd', 0x10000, 0x26)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x7}}, './file0\x00'})
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nbd', 0x10000, 0x26) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async)

[ 1763.523256] nbd: must specify an index to disconnect
02:05:26 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0)

02:05:26 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2262c2, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) (async)
r2 = dup2(r1, r0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)

02:05:26 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_mount_image$pvfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="e40584c3c7fac7896e8e7813e841562c32177ce59b5ab30cfc255238339bb4e8d9464c414ad750bca7efc07af4e4d355b4a09f23bee154c95c9b057910f8b8eaa8e4ea9b319a9070202d2f2e2a177d72cdd467d249af388f3a26cb7acc2f5a35fe7f66114fc3f7581c081fcde3c8548c131c49c2d264de37ba7e8d4e6765aed892c51985dc25b98dc8c4c64875d0", 0x8e}], 0x2000, &(0x7f00000001c0)={[{'/dev/fb0\x00'}, {'/dev/fb0\x00'}, {'-'}, {'/dev/fb0\x00'}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise}, {@appraise}, {@hash}, {@dont_hash}]})
dup2(r1, r0)

02:05:26 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
dup2(r1, r0)

02:05:26 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x3e000)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4}}, 0x10)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120)

02:05:26 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2262c2, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0)
r2 = dup2(r1, r0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)

02:05:26 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2262c2, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0)
r2 = dup2(r1, r0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2262c2, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) (async)
dup2(r1, r0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)

[ 1763.616436] nbd: must specify an index to disconnect
02:05:26 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
dup2(0xffffffffffffffff, r0)

02:05:26 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, './file0\x00'})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nbd', 0x10000, 0x26)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x7}}, './file0\x00'})
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nbd', 0x10000, 0x26) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async)

[ 1763.677070] nbd: must specify an index to disconnect
02:05:26 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x3e000)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4}}, 0x10)
r6 = dup2(r0, r1)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="01ffdf000100000018f7ff00", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120)

02:05:26 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x3e000)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120)

02:05:27 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_mount_image$pvfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="e40584c3c7fac7896e8e7813e841562c32177ce59b5ab30cfc255238339bb4e8d9464c414ad750bca7efc07af4e4d355b4a09f23bee154c95c9b057910f8b8eaa8e4ea9b319a9070202d2f2e2a177d72cdd467d249af388f3a26cb7acc2f5a35fe7f66114fc3f7581c081fcde3c8548c131c49c2d264de37ba7e8d4e6765aed892c51985dc25b98dc8c4c64875d0", 0x8e}], 0x2000, &(0x7f00000001c0)={[{'/dev/fb0\x00'}, {'/dev/fb0\x00'}, {'-'}, {'/dev/fb0\x00'}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise}, {@appraise}, {@hash}, {@dont_hash}]})
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
syz_mount_image$pvfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="e40584c3c7fac7896e8e7813e841562c32177ce59b5ab30cfc255238339bb4e8d9464c414ad750bca7efc07af4e4d355b4a09f23bee154c95c9b057910f8b8eaa8e4ea9b319a9070202d2f2e2a177d72cdd467d249af388f3a26cb7acc2f5a35fe7f66114fc3f7581c081fcde3c8548c131c49c2d264de37ba7e8d4e6765aed892c51985dc25b98dc8c4c64875d0", 0x8e}], 0x2000, &(0x7f00000001c0)={[{'/dev/fb0\x00'}, {'/dev/fb0\x00'}, {'-'}, {'/dev/fb0\x00'}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise}, {@appraise}, {@hash}, {@dont_hash}]}) (async)
dup2(r1, r0) (async)

02:05:27 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)

02:05:27 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
dup2(0xffffffffffffffff, r0)

[ 1763.748793] nbd: must specify an index to disconnect
02:05:27 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_mount_image$pvfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="e40584c3c7fac7896e8e7813e841562c32177ce59b5ab30cfc255238339bb4e8d9464c414ad750bca7efc07af4e4d355b4a09f23bee154c95c9b057910f8b8eaa8e4ea9b319a9070202d2f2e2a177d72cdd467d249af388f3a26cb7acc2f5a35fe7f66114fc3f7581c081fcde3c8548c131c49c2d264de37ba7e8d4e6765aed892c51985dc25b98dc8c4c64875d0", 0x8e}], 0x2000, &(0x7f00000001c0)={[{'/dev/fb0\x00'}, {'/dev/fb0\x00'}, {'-'}, {'/dev/fb0\x00'}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise}, {@appraise}, {@hash}, {@dont_hash}]})
dup2(r1, r0)

02:05:27 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "7d1239f5c127103e7463c6ad31c76475dc078b6665eacc8835bbf52fa2a686216b76105160c20c1c50bf7f67cfbb887d87e0ff3e50d11f3608ba64fd25c94bddc522ef4a749eef30536612bab43f898ab473d6938cdbfda1b0afd13ceaa201c11e7779aaa87cfa03492cac631bc017f2cf89cd0e8f2b286fa9516cf2f43723c6a4c3761b19fc311306b8c4ce7325379f93f9d7166b0bf1e8c269da51e74a18820bf113d9169e8973f467b170b576a6a5863d22830aff260efbef737eb29d2fb553f4ec9038b14dbbbd44e1b7300e723c4fadfcdb573237625602bd897c4d81d0a8cbb8b8cd1e154374075799a45b438f165e5f8e2d42e019cbaef10fa55eb352", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120)

02:05:27 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r2)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r9, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8010)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000981}, 0x40)

02:05:27 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)

02:05:27 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
dup2(0xffffffffffffffff, r0)

02:05:27 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)

02:05:27 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120)

02:05:27 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_mount_image$pvfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="e40584c3c7fac7896e8e7813e841562c32177ce59b5ab30cfc255238339bb4e8d9464c414ad750bca7efc07af4e4d355b4a09f23bee154c95c9b057910f8b8eaa8e4ea9b319a9070202d2f2e2a177d72cdd467d249af388f3a26cb7acc2f5a35fe7f66114fc3f7581c081fcde3c8548c131c49c2d264de37ba7e8d4e6765aed892c51985dc25b98dc8c4c64875d0", 0x8e}], 0x2000, &(0x7f00000001c0)={[{'/dev/fb0\x00'}, {'/dev/fb0\x00'}, {'-'}, {'/dev/fb0\x00'}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise}, {@appraise}, {@hash}, {@dont_hash}]}) (async)
dup2(r1, r0)

[ 1763.879688] nbd: must specify an index to disconnect
02:05:27 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
dup2(r0, 0xffffffffffffffff)

02:05:27 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r2)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r9, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8010)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000981}, 0x40)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r2) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7) (async)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r9, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8010) (async)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000981}, 0x40) (async)

02:05:27 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r2)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r9, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8010)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000981}, 0x40)

02:05:27 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x80)

[ 1763.914697] nbd: must specify a size in bytes for the device
02:05:27 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:27 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
dup2(r0, 0xffffffffffffffff)

[ 1764.002811] nbd: must specify an index to disconnect
02:05:27 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) (rerun: 64)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x80)

02:05:27 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000040)={0x7, 0x1, 0x3, 0xff, 0x8, [{0x5, 0x7fffffffffffffff, 0xffffffffffffffff, '\x00', 0xc}, {0xba6, 0x8, 0x943, '\x00', 0x186}, {0x3f, 0x2, 0x0, '\x00', 0x2}, {0xffffffff00000000, 0x0, 0x1ff, '\x00', 0x1118}, {0x10001, 0x7f, 0x80000000, '\x00', 0x100e}, {0xfff, 0x9, 0xef}, {0x80, 0x100000000, 0x101, '\x00', 0xf8e}, {0x8, 0x101, 0x7fff, '\x00', 0xc00}]})

02:05:27 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
dup2(r0, 0xffffffffffffffff)

[ 1764.023699] nbd: must specify a size in bytes for the device
[ 1764.047060] nbd: must specify an index to disconnect
02:05:27 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "7d1239f5c127103e7463c6ad31c76475dc078b6665eacc8835bbf52fa2a686216b76105160c20c1c50bf7f67cfbb887d87e0ff3e50d11f3608ba64fd25c94bddc522ef4a749eef30536612bab43f898ab473d6938cdbfda1b0afd13ceaa201c11e7779aaa87cfa03492cac631bc017f2cf89cd0e8f2b286fa9516cf2f43723c6a4c3761b19fc311306b8c4ce7325379f93f9d7166b0bf1e8c269da51e74a18820bf113d9169e8973f467b170b576a6a5863d22830aff260efbef737eb29d2fb553f4ec9038b14dbbbd44e1b7300e723c4fadfcdb573237625602bd897c4d81d0a8cbb8b8cd1e154374075799a45b438f165e5f8e2d42e019cbaef10fa55eb352", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:27 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000040)={0x7, 0x1, 0x3, 0xff, 0x8, [{0x5, 0x7fffffffffffffff, 0xffffffffffffffff, '\x00', 0xc}, {0xba6, 0x8, 0x943, '\x00', 0x186}, {0x3f, 0x2, 0x0, '\x00', 0x2}, {0xffffffff00000000, 0x0, 0x1ff, '\x00', 0x1118}, {0x10001, 0x7f, 0x80000000, '\x00', 0x100e}, {0xfff, 0x9, 0xef}, {0x80, 0x100000000, 0x101, '\x00', 0xf8e}, {0x8, 0x101, 0x7fff, '\x00', 0xc00}]})

02:05:27 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r2)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r9, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8010)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000981}, 0x40)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r2) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_RECONFIGURE(r4, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r7) (async)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x28}}, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r9, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8010) (async)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000981}, 0x40) (async)

02:05:27 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
dup2(r1, r0)

[ 1764.084100] nbd: must specify a size in bytes for the device
02:05:27 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0080, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x10, 0x3, 0xe339, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7000000000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000040)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(r0, r1)

02:05:27 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
dup2(0xffffffffffffffff, r0)

02:05:27 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:27 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000040)={0x7, 0x1, 0x3, 0xff, 0x8, [{0x5, 0x7fffffffffffffff, 0xffffffffffffffff, '\x00', 0xc}, {0xba6, 0x8, 0x943, '\x00', 0x186}, {0x3f, 0x2, 0x0, '\x00', 0x2}, {0xffffffff00000000, 0x0, 0x1ff, '\x00', 0x1118}, {0x10001, 0x7f, 0x80000000, '\x00', 0x100e}, {0xfff, 0x9, 0xef}, {0x80, 0x100000000, 0x101, '\x00', 0xf8e}, {0x8, 0x101, 0x7fff, '\x00', 0xc00}]})

[ 1764.167341] nbd: must specify an index to disconnect
02:05:27 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0080, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x10, 0x3, 0xe339, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7000000000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000040)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(r0, r1)

[ 1764.206642] nbd: must specify a size in bytes for the device
02:05:27 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x80)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
dup2(r1, r0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x80) (async)

02:05:27 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:27 executing program 2:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)

02:05:27 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
dup2(0xffffffffffffffff, r0)

02:05:27 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0080, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x10, 0x3, 0xe339, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7000000000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000040)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(r0, r1)

02:05:27 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0)
dup2(r1, r0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

02:05:27 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0)
dup2(r1, r0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) (async)
dup2(r1, r0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)

02:05:27 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:27 executing program 0:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
dup2(0xffffffffffffffff, r0)

02:05:27 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0080, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x10, 0x3, 0xe339, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7000000000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000040)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

02:05:27 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x3e000)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4}}, 0x10)
r6 = dup2(r0, r1)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="01ffdf000100000018f7ff00", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120)
r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, 0x0)

02:05:27 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:27 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040))
dup2(r1, r0)

02:05:27 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
dup2(r0, 0xffffffffffffffff)

02:05:27 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) (async)
dup2(r1, r0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

02:05:27 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0080, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x10, 0x3, 0xe339, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7000000000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000040)

02:05:27 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "7d1239f5c127103e7463c6ad31c76475dc078b6665eacc8835bbf52fa2a686216b76105160c20c1c50bf7f67cfbb887d87e0ff3e50d11f3608ba64fd25c94bddc522ef4a749eef30536612bab43f898ab473d6938cdbfda1b0afd13ceaa201c11e7779aaa87cfa03492cac631bc017f2cf89cd0e8f2b286fa9516cf2f43723c6a4c3761b19fc311306b8c4ce7325379f93f9d7166b0bf1e8c269da51e74a18820bf113d9169e8973f467b170b576a6a5863d22830aff260efbef737eb29d2fb553f4ec9038b14dbbbd44e1b7300e723c4fadfcdb573237625602bd897c4d81d0a8cbb8b8cd1e154374075799a45b438f165e5f8e2d42e019cbaef10fa55eb352", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:27 executing program 2:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
dup2(0xffffffffffffffff, r0)

02:05:27 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 32)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040))
dup2(r1, r0)

02:05:27 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
dup2(r0, 0xffffffffffffffff)

02:05:27 executing program 2:
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
dup2(r0, 0xffffffffffffffff)

02:05:27 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:27 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0080, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x10, 0x3, 0xe339, &(0x7f0000000080))

02:05:27 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
dup2(r0, 0xffffffffffffffff)

02:05:27 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
dup2(r1, r0)

02:05:27 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
dup2(r1, r0)

02:05:27 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040))
dup2(r1, r0)

02:05:27 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:27 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc0080, 0x0)
socketpair(0x10, 0x3, 0xe339, &(0x7f0000000080))

02:05:27 executing program 2:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:27 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x111}}, 0x20)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r5, 0x3e000)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4}}, 0x10)
r6 = dup2(r0, r1)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="01ffdf000100000018f7ff00", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}, r4}}, 0x120)
r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, 0x0)
write$P9_RWSTAT(r8, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7)
pipe2$watch_queue(&(0x7f0000000300), 0x80)

02:05:27 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
dup2(r1, r0)

02:05:27 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:27 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
socketpair(0x10, 0x3, 0xe339, &(0x7f0000000080))

02:05:27 executing program 2:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
dup2(r1, r0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900020, &(0x7f0000000680)=ANY=[@ANYBLOB="747261877266646e6f3dac3d536996d66c9483c64e2dade27d1b8a4bac88bcc7ad7383ebb13eb211b399e6201d3136fc4e412fc8f89e55f1c9b566cfe5fea154e8218378617571b868b7d8d6090000006f8130387a44884301c76ff76ae80920a97dcd0780731ee669f943054aa8b4d40b3b6e92e2", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,noextend,access=any,version=9p2000.u,obj_type=/dev/fb0\x00,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB="2c66736e616d653d2f6465762f666230002c736d61636b66736465663d403a5e2c646f6e745f6d6561737572652c00c878be149f5a8e53d883950167f1acad12ac83070c1a2dc7c7172a8aaea998df16da754e6b5db8355629c4b936b2b5665d4b24fc7a4c74aab9f41f00a2d023b179c9d4873c69365aff4e524efc04d237b778887964112e6f2eab676debd66e0eaf65eee42d4f16bb38db906a643c7a5225313076e72d5c7e82898fd48ad60000000000000000087affc9cde6a07bd9aed7851ff535e6027a3d7e501a85349e0b016111cdbd10181eb07c54a67cf72df6e87f01156a25da3c66000000000000"])

02:05:27 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x181600, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
io_setup(0x5, &(0x7f0000001900)=<r3=>0x0)
io_cancel(r3, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
socketpair(0x36, 0x2, 0x2, &(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r10=>r2, @ANYBLOB="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"])
r11 = dup2(r0, r2)
io_submit(r3, 0x8, &(0x7f0000002580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x9a29, r4, &(0x7f0000000080), 0x0, 0x200, 0x0, 0x2, r5}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x4, r6, &(0x7f0000000180)="3e964245d320e97c85309bd2beb6cadbca757978c3bf69623dcea413351800b3a41d6d28a131ef96", 0x28, 0xee, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0xd6, r1, &(0x7f0000000200)="dd4252e1eaa818fe96cc714c5c1275d2750aa5980f2d0492", 0x18, 0xfffffffffffffff8, 0x0, 0x1, r7}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x5408, r8, &(0x7f0000000280)="a6f2c8b49e6d3cdc0f46b943665b7774728b0693581e27b536a7f6f7bc824afee0e5425af88022e125b79d7bfdd91d769ae4672b1ae6325a0c2b807684b96cff3d226ba49ddc83d04f2562b30a86546d2807632b9ab0ce8d", 0x58, 0x7fffffffffffffff}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x100, r9, &(0x7f0000000340)="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", 0x1000, 0x5e68f9e9, 0x0, 0x1, r2}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000001380)="926ca39ccca6cc65b942da714be2fe176aad83b7dad05b0acd5c77ac38f8bcb40df20bf1f0b5e7e3b4d1f50c0864a9dc0f7e6b610f46eae3ada447cddb34a7646b7fea7d2bd3e9e3eeca161ca6a218d6028fd5fda32de7b6bc96b3e05adaeddc96f31683926eca0b663f6a353879bc196ba7d48f1d3df18122dc553400854cd59ef5fd1e495e", 0x86, 0x3ff, 0x0, 0x0, r2}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x4, 0x9c37, r1, &(0x7f0000002780)="300c2f7a2e35f5e851813301818ff2a06684de9573f5b89c619fa5c0f4d7d54b0745feec2bab1134b9e66491d31049dfef05132bb027691387e89d21854c671b13a2c281d71997d0b94b13cc96869106c4ecb805f2618219f372cbf5b1cb08342389a8091a8d22459ebf1c7f97bd0e08ef51f6bbf187e908bb68e241f9f35841aa88114e4b47c42d589e4910d6affb34", 0x90, 0x101, 0x0, 0x3, r10}, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000001540)="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", 0x1000, 0x1, 0x0, 0x2, r11}])
mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x30112, r2, 0xac000)
dup2(r1, r0)

02:05:28 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/hfcsusb', 0x401600, 0x180)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000380)={0x9, 0x5, 0x1, 0x5b, 0x4, [{0x1, 0xa2e4, 0x0, '\x00', 0x184}, {0x7, 0xbb28, 0x0, '\x00', 0x1001}, {0x82c0, 0x2, 0x8, '\x00', 0x501}, {0x100000000, 0x6, 0x4, '\x00', 0x2900}]})
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
write$proc_mixer(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="4241535320277374657220436170747530303030303030300a434420274d618274657220506c61796261636b20537769746368272030303030303030303030303030303030303030300a4c494e45310a0000"], 0x62)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r6, 0x1, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000009b60a51b6e249b645b7288c2ffda00b2079e9b79cf782e5a7e0b3c504b1c349eaabe0a9739364f8078204aae9ce7e37c43dc05d697094c63c1874f52db341c6a9876ed7d97b52d885a035f56648e7ad2e8d95d04bb9ea33a8ec46a28d2591703ad7f049ba55c70b06929522a13242e76a582be9d075b0688256c2041c0cca9deacbf58b982ccbe8b010ff766447630c16b8a7ed6f1aacca38a0e4771308123735a95f14b8d17955320d35d3f3d2c565bb5236c6eae467e24c396d8758a5cf99862f6344740761ba840e447f46868389d93b875fcab", @ANYRES16=r6, @ANYBLOB="100029bd7000fddbdf2507000000080039006008000008003a000800000005002f00010000000a000900ffffffffffff0000040034007f000000"], 0x40}, 0x1, 0x0, 0x0, 0xe6e71d32b9e6e654}, 0x4044800)

02:05:28 executing program 4:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:28 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)

02:05:28 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
socketpair(0x10, 0x3, 0xe339, &(0x7f0000000080))

02:05:28 executing program 2:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
dup2(r1, r0) (fail_nth: 1)

02:05:28 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) (fail_nth: 1)

02:05:28 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0) (async)
r3 = socket$l2tp(0x2, 0x2, 0x73) (async)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/hfcsusb', 0x401600, 0x180)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000380)={0x9, 0x5, 0x1, 0x5b, 0x4, [{0x1, 0xa2e4, 0x0, '\x00', 0x184}, {0x7, 0xbb28, 0x0, '\x00', 0x1001}, {0x82c0, 0x2, 0x8, '\x00', 0x501}, {0x100000000, 0x6, 0x4, '\x00', 0x2900}]}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
write$proc_mixer(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="4241535320277374657220436170747530303030303030300a434420274d618274657220506c61796261636b20537769746368272030303030303030303030303030303030303030300a4c494e45310a0000"], 0x62)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r6, 0x1, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000009b60a51b6e249b645b7288c2ffda00b2079e9b79cf782e5a7e0b3c504b1c349eaabe0a9739364f8078204aae9ce7e37c43dc05d697094c63c1874f52db341c6a9876ed7d97b52d885a035f56648e7ad2e8d95d04bb9ea33a8ec46a28d2591703ad7f049ba55c70b06929522a13242e76a582be9d075b0688256c2041c0cca9deacbf58b982ccbe8b010ff766447630c16b8a7ed6f1aacca38a0e4771308123735a95f14b8d17955320d35d3f3d2c565bb5236c6eae467e24c396d8758a5cf99862f6344740761ba840e447f46868389d93b875fcab", @ANYRES16=r6, @ANYBLOB="100029bd7000fddbdf2507000000080039006008000008003a000800000005002f00010000000a000900ffffffffffff0000040034007f000000"], 0x40}, 0x1, 0x0, 0x0, 0xe6e71d32b9e6e654}, 0x4044800)

02:05:28 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:28 executing program 5:
socketpair(0x10, 0x3, 0xe339, &(0x7f0000000080))

02:05:28 executing program 2:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = dup2(r1, r0)
bind$llc(r2, &(0x7f0000000040)={0x1a, 0x104, 0x20, 0x4, 0xb7, 0x4, @remote}, 0x10)

02:05:28 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x181600, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
io_setup(0x5, &(0x7f0000001900)=<r3=>0x0)
io_cancel(r3, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
socketpair(0x36, 0x2, 0x2, &(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r10=>r2, @ANYBLOB="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"])
r11 = dup2(r0, r2)
io_submit(r3, 0x8, &(0x7f0000002580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x9a29, r4, &(0x7f0000000080), 0x0, 0x200, 0x0, 0x2, r5}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x4, r6, &(0x7f0000000180)="3e964245d320e97c85309bd2beb6cadbca757978c3bf69623dcea413351800b3a41d6d28a131ef96", 0x28, 0xee, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0xd6, r1, &(0x7f0000000200)="dd4252e1eaa818fe96cc714c5c1275d2750aa5980f2d0492", 0x18, 0xfffffffffffffff8, 0x0, 0x1, r7}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x5408, r8, &(0x7f0000000280)="a6f2c8b49e6d3cdc0f46b943665b7774728b0693581e27b536a7f6f7bc824afee0e5425af88022e125b79d7bfdd91d769ae4672b1ae6325a0c2b807684b96cff3d226ba49ddc83d04f2562b30a86546d2807632b9ab0ce8d", 0x58, 0x7fffffffffffffff}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x100, r9, &(0x7f0000000340)="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", 0x1000, 0x5e68f9e9, 0x0, 0x1, r2}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000001380)="926ca39ccca6cc65b942da714be2fe176aad83b7dad05b0acd5c77ac38f8bcb40df20bf1f0b5e7e3b4d1f50c0864a9dc0f7e6b610f46eae3ada447cddb34a7646b7fea7d2bd3e9e3eeca161ca6a218d6028fd5fda32de7b6bc96b3e05adaeddc96f31683926eca0b663f6a353879bc196ba7d48f1d3df18122dc553400854cd59ef5fd1e495e", 0x86, 0x3ff, 0x0, 0x0, r2}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x4, 0x9c37, r1, &(0x7f0000002780)="300c2f7a2e35f5e851813301818ff2a06684de9573f5b89c619fa5c0f4d7d54b0745feec2bab1134b9e66491d31049dfef05132bb027691387e89d21854c671b13a2c281d71997d0b94b13cc96869106c4ecb805f2618219f372cbf5b1cb08342389a8091a8d22459ebf1c7f97bd0e08ef51f6bbf187e908bb68e241f9f35841aa88114e4b47c42d589e4910d6affb34", 0x90, 0x101, 0x0, 0x3, r10}, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000001540)="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", 0x1000, 0x1, 0x0, 0x2, r11}])
mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x30112, r2, 0xac000)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x181600, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
pipe2$watch_queue(&(0x7f0000000040), 0x80) (async)
io_setup(0x5, &(0x7f0000001900)) (async)
io_cancel(r3, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async)
socketpair(0x36, 0x2, 0x2, &(0x7f0000000140)) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="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"]) (async)
dup2(r0, r2) (async)
io_submit(r3, 0x8, &(0x7f0000002580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x9a29, r4, &(0x7f0000000080), 0x0, 0x200, 0x0, 0x2, r5}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x4, r6, &(0x7f0000000180)="3e964245d320e97c85309bd2beb6cadbca757978c3bf69623dcea413351800b3a41d6d28a131ef96", 0x28, 0xee, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0xd6, r1, &(0x7f0000000200)="dd4252e1eaa818fe96cc714c5c1275d2750aa5980f2d0492", 0x18, 0xfffffffffffffff8, 0x0, 0x1, r7}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x5408, r8, &(0x7f0000000280)="a6f2c8b49e6d3cdc0f46b943665b7774728b0693581e27b536a7f6f7bc824afee0e5425af88022e125b79d7bfdd91d769ae4672b1ae6325a0c2b807684b96cff3d226ba49ddc83d04f2562b30a86546d2807632b9ab0ce8d", 0x58, 0x7fffffffffffffff}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x100, r9, &(0x7f0000000340)="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", 0x1000, 0x5e68f9e9, 0x0, 0x1, r2}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000001380)="926ca39ccca6cc65b942da714be2fe176aad83b7dad05b0acd5c77ac38f8bcb40df20bf1f0b5e7e3b4d1f50c0864a9dc0f7e6b610f46eae3ada447cddb34a7646b7fea7d2bd3e9e3eeca161ca6a218d6028fd5fda32de7b6bc96b3e05adaeddc96f31683926eca0b663f6a353879bc196ba7d48f1d3df18122dc553400854cd59ef5fd1e495e", 0x86, 0x3ff, 0x0, 0x0, r2}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x4, 0x9c37, r1, &(0x7f0000002780)="300c2f7a2e35f5e851813301818ff2a06684de9573f5b89c619fa5c0f4d7d54b0745feec2bab1134b9e66491d31049dfef05132bb027691387e89d21854c671b13a2c281d71997d0b94b13cc96869106c4ecb805f2618219f372cbf5b1cb08342389a8091a8d22459ebf1c7f97bd0e08ef51f6bbf187e908bb68e241f9f35841aa88114e4b47c42d589e4910d6affb34", 0x90, 0x101, 0x0, 0x3, r10}, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000001540)="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", 0x1000, 0x1, 0x0, 0x2, r11}]) (async)
mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x30112, r2, 0xac000) (async)
dup2(r1, r0) (async)

02:05:28 executing program 5:
socketpair(0x0, 0x3, 0xe339, &(0x7f0000000080))

02:05:28 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

[ 1764.884209] FAULT_INJECTION: forcing a failure.
[ 1764.884209] name failslab, interval 1, probability 0, space 0, times 0
02:05:28 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0) (async)
r3 = socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 64)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/hfcsusb', 0x401600, 0x180) (rerun: 64)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000380)={0x9, 0x5, 0x1, 0x5b, 0x4, [{0x1, 0xa2e4, 0x0, '\x00', 0x184}, {0x7, 0xbb28, 0x0, '\x00', 0x1001}, {0x82c0, 0x2, 0x8, '\x00', 0x501}, {0x100000000, 0x6, 0x4, '\x00', 0x2900}]})
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
write$proc_mixer(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="4241535320277374657220436170747530303030303030300a434420274d618274657220506c61796261636b20537769746368272030303030303030303030303030303030303030300a4c494e45310a0000"], 0x62)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r6, 0x1, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000009b60a51b6e249b645b7288c2ffda00b2079e9b79cf782e5a7e0b3c504b1c349eaabe0a9739364f8078204aae9ce7e37c43dc05d697094c63c1874f52db341c6a9876ed7d97b52d885a035f56648e7ad2e8d95d04bb9ea33a8ec46a28d2591703ad7f049ba55c70b06929522a13242e76a582be9d075b0688256c2041c0cca9deacbf58b982ccbe8b010ff766447630c16b8a7ed6f1aacca38a0e4771308123735a95f14b8d17955320d35d3f3d2c565bb5236c6eae467e24c396d8758a5cf99862f6344740761ba840e447f46868389d93b875fcab", @ANYRES16=r6, @ANYBLOB="100029bd7000fddbdf2507000000080039006008000008003a000800000005002f00010000000a000900ffffffffffff0000040034007f000000"], 0x40}, 0x1, 0x0, 0x0, 0xe6e71d32b9e6e654}, 0x4044800) (rerun: 32)

02:05:28 executing program 5:
socketpair(0x0, 0x3, 0xe339, &(0x7f0000000080))

[ 1764.934172] CPU: 1 PID: 2648 Comm: syz-executor.0 Not tainted 4.14.288-syzkaller #0
[ 1764.941973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 1764.951320] Call Trace:
[ 1764.953906]  dump_stack+0x1b2/0x281
[ 1764.957542]  should_fail.cold+0x10a/0x149
[ 1764.961691]  should_failslab+0xd6/0x130
[ 1764.965662]  __kmalloc+0x2c1/0x400
[ 1764.969198]  ? tty_write+0x4e0/0x740
[ 1764.972912]  tty_write+0x4e0/0x740
[ 1764.976448]  ? aa_path_link+0x3a0/0x3a0
[ 1764.980418]  ? n_tty_open+0x160/0x160
02:05:28 executing program 5:
socketpair(0x0, 0x3, 0xe339, &(0x7f0000000080))

[ 1764.984219]  __vfs_write+0xe4/0x630
[ 1764.987847]  ? tty_compat_ioctl+0x240/0x240
[ 1764.992164]  ? debug_check_no_obj_freed+0x2c0/0x680
[ 1764.997174]  ? kernel_read+0x110/0x110
[ 1765.001055]  ? common_file_perm+0x3ee/0x580
[ 1765.005375]  ? security_file_permission+0x82/0x1e0
[ 1765.010301]  ? rw_verify_area+0xe1/0x2a0
[ 1765.014361]  vfs_write+0x17f/0x4d0
[ 1765.017898]  SyS_write+0xf2/0x210
[ 1765.021347]  ? SyS_read+0x210/0x210
[ 1765.024972]  ? do_syscall_64+0x4c/0x640
[ 1765.028938]  ? SyS_read+0x210/0x210
02:05:28 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x1)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0)
dup2(r1, r0)

[ 1765.032562]  do_syscall_64+0x1d5/0x640
[ 1765.036446]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1765.041625] RIP: 0033:0x7f75c6d3d1f9
[ 1765.045328] RSP: 002b:00007f75c56b2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1765.053030] RAX: ffffffffffffffda RBX: 00007f75c6e4ff60 RCX: 00007f75c6d3d1f9
[ 1765.060289] RDX: 0000000000000020 RSI: 0000000020000080 RDI: 0000000000000003
[ 1765.067548] RBP: 00007f75c56b21d0 R08: 0000000000000000 R09: 0000000000000000
[ 1765.074807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1765.082065] R13: 00007ffe3fb02dcf R14: 00007f75c56b2300 R15: 0000000000022000
02:05:28 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) (fail_nth: 2)

02:05:28 executing program 5:
socketpair(0x10, 0x0, 0xe339, &(0x7f0000000080))

02:05:28 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x1)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0)
dup2(r1, r0)

02:05:28 executing program 2:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = dup2(r1, r0)
bind$llc(r2, &(0x7f0000000040)={0x1a, 0x104, 0x20, 0x4, 0xb7, 0x4, @remote}, 0x10)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
dup2(r1, r0) (async)
bind$llc(r2, &(0x7f0000000040)={0x1a, 0x104, 0x20, 0x4, 0xb7, 0x4, @remote}, 0x10) (async)

02:05:28 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:28 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x181600, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80) (async)
io_setup(0x5, &(0x7f0000001900)=<r3=>0x0)
io_cancel(r3, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80) (async)
socketpair(0x36, 0x2, 0x2, &(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r10=>r2, @ANYBLOB="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"]) (async)
r11 = dup2(r0, r2)
io_submit(r3, 0x8, &(0x7f0000002580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x9a29, r4, &(0x7f0000000080), 0x0, 0x200, 0x0, 0x2, r5}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x4, r6, &(0x7f0000000180)="3e964245d320e97c85309bd2beb6cadbca757978c3bf69623dcea413351800b3a41d6d28a131ef96", 0x28, 0xee, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0xd6, r1, &(0x7f0000000200)="dd4252e1eaa818fe96cc714c5c1275d2750aa5980f2d0492", 0x18, 0xfffffffffffffff8, 0x0, 0x1, r7}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x5408, r8, &(0x7f0000000280)="a6f2c8b49e6d3cdc0f46b943665b7774728b0693581e27b536a7f6f7bc824afee0e5425af88022e125b79d7bfdd91d769ae4672b1ae6325a0c2b807684b96cff3d226ba49ddc83d04f2562b30a86546d2807632b9ab0ce8d", 0x58, 0x7fffffffffffffff}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x100, r9, &(0x7f0000000340)="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", 0x1000, 0x5e68f9e9, 0x0, 0x1, r2}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000001380)="926ca39ccca6cc65b942da714be2fe176aad83b7dad05b0acd5c77ac38f8bcb40df20bf1f0b5e7e3b4d1f50c0864a9dc0f7e6b610f46eae3ada447cddb34a7646b7fea7d2bd3e9e3eeca161ca6a218d6028fd5fda32de7b6bc96b3e05adaeddc96f31683926eca0b663f6a353879bc196ba7d48f1d3df18122dc553400854cd59ef5fd1e495e", 0x86, 0x3ff, 0x0, 0x0, r2}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x4, 0x9c37, r1, &(0x7f0000002780)="300c2f7a2e35f5e851813301818ff2a06684de9573f5b89c619fa5c0f4d7d54b0745feec2bab1134b9e66491d31049dfef05132bb027691387e89d21854c671b13a2c281d71997d0b94b13cc96869106c4ecb805f2618219f372cbf5b1cb08342389a8091a8d22459ebf1c7f97bd0e08ef51f6bbf187e908bb68e241f9f35841aa88114e4b47c42d589e4910d6affb34", 0x90, 0x101, 0x0, 0x3, r10}, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000001540)="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", 0x1000, 0x1, 0x0, 0x2, r11}]) (async)
mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x30112, r2, 0xac000) (async)
dup2(r1, r0)

02:05:28 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x1)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x1) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) (async)
dup2(r1, r0) (async)

02:05:28 executing program 2:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = dup2(r1, r0)
bind$llc(r2, &(0x7f0000000040)={0x1a, 0x104, 0x20, 0x4, 0xb7, 0x4, @remote}, 0x10)

02:05:28 executing program 5:
socketpair(0x10, 0x0, 0xe339, &(0x7f0000000080))

[ 1765.221453] FAULT_INJECTION: forcing a failure.
[ 1765.221453] name failslab, interval 1, probability 0, space 0, times 0
[ 1765.233561] CPU: 0 PID: 2720 Comm: syz-executor.0 Not tainted 4.14.288-syzkaller #0
[ 1765.241341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 1765.250682] Call Trace:
[ 1765.253262]  dump_stack+0x1b2/0x281
[ 1765.256883]  should_fail.cold+0x10a/0x149
[ 1765.261022]  should_failslab+0xd6/0x130
[ 1765.264992]  __kmalloc+0x6d/0x400
[ 1765.268441]  ? tty_buffer_alloc+0xc0/0x270
[ 1765.272674]  tty_buffer_alloc+0xc0/0x270
[ 1765.276736]  __tty_buffer_request_room+0x12c/0x290
[ 1765.281665]  tty_insert_flip_string_fixed_flag+0x8b/0x210
[ 1765.287195]  pty_write+0x10d/0x1d0
[ 1765.290726]  n_tty_write+0x85e/0xda0
[ 1765.294436]  ? n_tty_open+0x160/0x160
[ 1765.298232]  ? do_wait_intr_irq+0x270/0x270
[ 1765.302541]  ? __might_fault+0x177/0x1b0
[ 1765.306596]  tty_write+0x410/0x740
[ 1765.310123]  ? n_tty_open+0x160/0x160
[ 1765.313916]  __vfs_write+0xe4/0x630
[ 1765.317529]  ? tty_compat_ioctl+0x240/0x240
02:05:28 executing program 2:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
dup2(r1, r0)

02:05:28 executing program 2:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async)
dup2(r1, r0)

[ 1765.321844]  ? debug_check_no_obj_freed+0x2c0/0x680
[ 1765.326850]  ? kernel_read+0x110/0x110
[ 1765.330731]  ? common_file_perm+0x3ee/0x580
[ 1765.335046]  ? security_file_permission+0x82/0x1e0
[ 1765.339972]  ? rw_verify_area+0xe1/0x2a0
[ 1765.344034]  vfs_write+0x17f/0x4d0
[ 1765.347574]  SyS_write+0xf2/0x210
[ 1765.351020]  ? SyS_read+0x210/0x210
[ 1765.354636]  ? do_syscall_64+0x4c/0x640
[ 1765.358604]  ? SyS_read+0x210/0x210
[ 1765.362219]  do_syscall_64+0x1d5/0x640
[ 1765.366106]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
02:05:28 executing program 2:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
dup2(r1, r0)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async)
dup2(r1, r0) (async)

[ 1765.371283] RIP: 0033:0x7f75c6d3d1f9
[ 1765.374982] RSP: 002b:00007f75c56b2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1765.382712] RAX: ffffffffffffffda RBX: 00007f75c6e4ff60 RCX: 00007f75c6d3d1f9
[ 1765.390001] RDX: 0000000000000020 RSI: 0000000020000080 RDI: 0000000000000003
[ 1765.397259] RBP: 00007f75c56b21d0 R08: 0000000000000000 R09: 0000000000000000
[ 1765.404516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1765.411778] R13: 00007ffe3fb02dcf R14: 00007f75c56b2300 R15: 0000000000022000
[ 1765.419503] 
[ 1765.419507] ======================================================
[ 1765.419510] WARNING: possible circular locking dependency detected
[ 1765.419512] 4.14.288-syzkaller #0 Not tainted
[ 1765.419516] ------------------------------------------------------
[ 1765.419519] syz-executor.0/2720 is trying to acquire lock:
[ 1765.419520]  (console_owner){....}, at: [<ffffffff8143f7a7>] console_unlock+0x307/0xf20
[ 1765.419527] 
[ 1765.419530] but task is already holding lock:
[ 1765.419535]  (&(&port->lock)->rlock){-.-.}, at: [<ffffffff83560c8b>] pty_write+0xdb/0x1d0
[ 1765.419543] 
[ 1765.419545] which lock already depends on the new lock.
[ 1765.419547] 
[ 1765.419548] 
[ 1765.419551] the existing dependency chain (in reverse order) is:
[ 1765.419552] 
[ 1765.419554] -> #2 (&(&port->lock)->rlock){-.-.}:
[ 1765.419562]        _raw_spin_lock_irqsave+0x8c/0xc0
[ 1765.419564]        tty_port_tty_get+0x1d/0x80
[ 1765.419567]        tty_port_default_wakeup+0x11/0x40
[ 1765.419569]        serial8250_tx_chars+0x3fe/0xc70
[ 1765.419572]        serial8250_handle_irq.part.0+0x28d/0x330
[ 1765.419575]        serial8250_default_handle_irq+0x8a/0x1f0
[ 1765.419578]        serial8250_interrupt+0xf3/0x210
[ 1765.419580]        __handle_irq_event_percpu+0xee/0x7f0
[ 1765.419583]        handle_irq_event+0xed/0x240
[ 1765.419585]        handle_edge_irq+0x224/0xc40
[ 1765.419587]        handle_irq+0x35/0x50
[ 1765.419589]        do_IRQ+0x93/0x1d0
[ 1765.419592]        ret_from_intr+0x0/0x1e
[ 1765.419594]        native_safe_halt+0xe/0x10
[ 1765.419596]        default_idle+0x47/0x370
[ 1765.419598]        do_idle+0x250/0x3c0
[ 1765.419601]        cpu_startup_entry+0x14/0x20
[ 1765.419603]        start_kernel+0x743/0x763
[ 1765.419605]        secondary_startup_64+0xa5/0xb0
[ 1765.419607] 
[ 1765.419608] -> #1 (&port_lock_key){-.-.}:
[ 1765.419616]        _raw_spin_lock_irqsave+0x8c/0xc0
[ 1765.419618]        serial8250_console_write+0x7d5/0xa10
[ 1765.419621]        console_unlock+0x99d/0xf20
[ 1765.419623]        vprintk_emit+0x224/0x620
[ 1765.419625]        vprintk_func+0x58/0x160
[ 1765.419627]        printk+0x9e/0xbc
[ 1765.419630]        register_console+0x6f4/0xad0
[ 1765.419632]        univ8250_console_init+0x2f/0x3a
[ 1765.419634]        console_init+0x46/0x53
[ 1765.419637]        start_kernel+0x521/0x763
[ 1765.419639]        secondary_startup_64+0xa5/0xb0
[ 1765.419640] 
[ 1765.419642] -> #0 (console_owner){....}:
[ 1765.419649]        lock_acquire+0x170/0x3f0
[ 1765.419651]        console_unlock+0x36f/0xf20
[ 1765.419654]        vprintk_emit+0x224/0x620
[ 1765.419656]        vprintk_func+0x58/0x160
[ 1765.419658]        printk+0x9e/0xbc
[ 1765.419660]        should_fail.cold+0xdf/0x149
[ 1765.419663]        should_failslab+0xd6/0x130
[ 1765.419665]        __kmalloc+0x6d/0x400
[ 1765.419667]        tty_buffer_alloc+0xc0/0x270
[ 1765.419670]        __tty_buffer_request_room+0x12c/0x290
[ 1765.419673]        tty_insert_flip_string_fixed_flag+0x8b/0x210
[ 1765.419675]        pty_write+0x10d/0x1d0
[ 1765.419677]        n_tty_write+0x85e/0xda0
[ 1765.419679]        tty_write+0x410/0x740
[ 1765.419682]        __vfs_write+0xe4/0x630
[ 1765.419684]        vfs_write+0x17f/0x4d0
[ 1765.419686]        SyS_write+0xf2/0x210
[ 1765.419688]        do_syscall_64+0x1d5/0x640
[ 1765.419691]        entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1765.419692] 
[ 1765.419695] other info that might help us debug this:
[ 1765.419696] 
[ 1765.419698] Chain exists of:
[ 1765.419699]   console_owner --> &port_lock_key --> &(&port->lock)->rlock
[ 1765.419709] 
[ 1765.419711]  Possible unsafe locking scenario:
[ 1765.419712] 
[ 1765.419714]        CPU0                    CPU1
[ 1765.419716]        ----                    ----
[ 1765.419717]   lock(&(&port->lock)->rlock);
[ 1765.419722]                                lock(&port_lock_key);
[ 1765.419726]                                lock(&(&port->lock)->rlock);
[ 1765.419730]   lock(console_owner);
[ 1765.419734] 
[ 1765.419736]  *** DEADLOCK ***
[ 1765.419737] 
[ 1765.419739] 6 locks held by syz-executor.0/2720:
[ 1765.419740]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff83554e22>] tty_ldisc_ref_wait+0x22/0x80
[ 1765.419747]  #1:  (&tty->atomic_write_lock){+.+.}, at: [<ffffffff8353da9d>] tty_write+0x22d/0x740
[ 1765.419755]  #2:  (&tty->termios_rwsem){++++}, at: [<ffffffff83548cda>] n_tty_write+0x18a/0xda0
[ 1765.419762]  #3:  (&ldata->output_lock){+.+.}, at: [<ffffffff8354937b>] n_tty_write+0x82b/0xda0
[ 1765.419769]  #4:  (&(&port->lock)->rlock){-.-.}, at: [<ffffffff83560c8b>] pty_write+0xdb/0x1d0
[ 1765.419777]  #5:  (console_lock){+.+.}, at: [<ffffffff81443108>] vprintk_func+0x58/0x160
[ 1765.419783] 
[ 1765.419785] stack backtrace:
[ 1765.419788] CPU: 0 PID: 2720 Comm: syz-executor.0 Not tainted 4.14.288-syzkaller #0
[ 1765.419792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 1765.419793] Call Trace:
[ 1765.419795]  dump_stack+0x1b2/0x281
[ 1765.419797]  print_circular_bug.constprop.0.cold+0x2d7/0x41e
[ 1765.419799]  __lock_acquire+0x2e0e/0x3f20
[ 1765.419801]  ? trace_hardirqs_on+0x10/0x10
[ 1765.419803]  ? snprintf+0xd0/0xd0
[ 1765.419805]  ? console_unlock+0x34a/0xf20
[ 1765.419806]  lock_acquire+0x170/0x3f0
[ 1765.419808]  ? console_unlock+0x307/0xf20
[ 1765.419810]  console_unlock+0x36f/0xf20
[ 1765.419812]  ? console_unlock+0x307/0xf20
[ 1765.419813]  vprintk_emit+0x224/0x620
[ 1765.419815]  vprintk_func+0x58/0x160
[ 1765.419816]  printk+0x9e/0xbc
[ 1765.419818]  ? log_store.cold+0x16/0x16
[ 1765.419820]  should_fail.cold+0xdf/0x149
[ 1765.419821]  should_failslab+0xd6/0x130
[ 1765.419823]  __kmalloc+0x6d/0x400
[ 1765.419825]  ? tty_buffer_alloc+0xc0/0x270
[ 1765.419827]  tty_buffer_alloc+0xc0/0x270
[ 1765.419833]  __tty_buffer_request_room+0x12c/0x290
[ 1765.419836]  tty_insert_flip_string_fixed_flag+0x8b/0x210
[ 1765.419837]  pty_write+0x10d/0x1d0
[ 1765.419839]  n_tty_write+0x85e/0xda0
[ 1765.419841]  ? n_tty_open+0x160/0x160
[ 1765.419842]  ? do_wait_intr_irq+0x270/0x270
[ 1765.419844]  ? __might_fault+0x177/0x1b0
[ 1765.419846]  tty_write+0x410/0x740
[ 1765.419848]  ? n_tty_open+0x160/0x160
[ 1765.419849]  __vfs_write+0xe4/0x630
[ 1765.419851]  ? tty_compat_ioctl+0x240/0x240
[ 1765.419854]  ? debug_check_no_obj_freed+0x2c0/0x680
[ 1765.419855]  ? kernel_read+0x110/0x110
[ 1765.419857]  ? common_file_perm+0x3ee/0x580
[ 1765.419860]  ? security_file_permission+0x82/0x1e0
[ 1765.419862]  ? rw_verify_area+0xe1/0x2a0
[ 1765.419864]  vfs_write+0x17f/0x4d0
[ 1765.419865]  SyS_write+0xf2/0x210
[ 1765.419867]  ? SyS_read+0x210/0x210
[ 1765.419869]  ? do_syscall_64+0x4c/0x640
[ 1765.419871]  ? SyS_read+0x210/0x210
[ 1765.419873]  do_syscall_64+0x1d5/0x640
[ 1765.419875]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1765.419876] RIP: 0033:0x7f75c6d3d1f9
[ 1765.419879] RSP: 002b:00007f75c56b2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1765.419884] RAX: ffffffffffffffda RBX: 00007f75c6e4ff60 RCX: 00007f75c6d3d1f9
[ 1765.419886] RDX: 0000000000000020 RSI: 0000000020000080 RDI: 0000000000000003
[ 1765.419889] RBP: 00007f75c56b21d0 R08: 0000000000000000 R09: 0000000000000000
[ 1765.419892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1765.419895] R13: 00007ffe3fb02dcf R14: 00007f75c56b2300 R15: 0000000000022000
02:05:29 executing program 5:
socketpair(0x10, 0x0, 0xe339, &(0x7f0000000080))

02:05:29 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x7}}, './file0\x00'})
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0xffffffff}, 0x4)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x6, 0x525901)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1ff}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xc0}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
dup2(r2, r1)

02:05:29 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000101000018000000", @ANYRES32=<r2=>r0, @ANYBLOB="00000080000000002e2f66696c653000"])
write$tcp_congestion(r2, &(0x7f0000000080)='bbr\x00', 0x4)
dup2(r1, r0)

02:05:29 executing program 3:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
dup2(r0, 0xffffffffffffffff)
socket$l2tp6(0xa, 0x2, 0x73)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
mmap$fb(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000000, 0x110, r2, 0x36000)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0x6}, {0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, r1, 0xfffff946}}, 0x48)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x8000000, 0xfffc0000, "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", 0x80, 0xff, 0x8, 0xcf, 0x3, 0x4, 0x1, 0x1}, r1}}, 0x120)

02:05:29 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x8000}}, './file0\x00'})
r3 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r5, 0xe}}, 0x10)

02:05:29 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 5:
socketpair(0x10, 0x3, 0x0, &(0x7f0000000080))

02:05:29 executing program 3:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20) (async)
dup2(r0, 0xffffffffffffffff)
socket$l2tp6(0xa, 0x2, 0x73)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) (async)
mmap$fb(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000000, 0x110, r2, 0x36000)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0x6}, {0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, r1, 0xfffff946}}, 0x48)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x8000000, 0xfffc0000, "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", 0x80, 0xff, 0x8, 0xcf, 0x3, 0x4, 0x1, 0x1}, r1}}, 0x120)

02:05:29 executing program 5:
socketpair(0x10, 0x3, 0x0, &(0x7f0000000080))

02:05:29 executing program 3:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20) (rerun: 32)
dup2(r0, 0xffffffffffffffff) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) (async)
mmap$fb(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000000, 0x110, r2, 0x36000) (async)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0x6}, {0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, r1, 0xfffff946}}, 0x48)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x8000000, 0xfffc0000, "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", 0x80, 0xff, 0x8, 0xcf, 0x3, 0x4, 0x1, 0x1}, r1}}, 0x120)

02:05:29 executing program 5:
socketpair(0x10, 0x3, 0x0, &(0x7f0000000080))

02:05:29 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x8000}}, './file0\x00'})
r3 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r5, 0xe}}, 0x10)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x8000}}, './file0\x00'}) (async)
dup2(r1, r0) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) (async)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r5}}, 0x10) (async)
write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r5, 0xe}}, 0x10) (async)

02:05:29 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000101000018000000", @ANYRES32=<r2=>r0, @ANYBLOB="00000080000000002e2f66696c653000"]) (async)
write$tcp_congestion(r2, &(0x7f0000000080)='bbr\x00', 0x4) (async)
dup2(r1, r0)

02:05:29 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x7}}, './file0\x00'})
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0xffffffff}, 0x4)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x6, 0x525901) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1ff}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xc0}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) (async)
socket$nl_route(0x10, 0x3, 0x0)
dup2(r2, r1)

02:05:29 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 5:
socketpair(0x10, 0x3, 0xe339, 0x0)

02:05:29 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x680300, 0x0)
dup2(r1, r0)

02:05:29 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000101000018000000", @ANYRES32=<r2=>r0, @ANYBLOB="00000080000000002e2f66696c653000"])
write$tcp_congestion(r2, &(0x7f0000000080)='bbr\x00', 0x4)
dup2(r1, r0)

02:05:29 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x7}}, './file0\x00'})
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0xffffffff}, 0x4) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x6, 0x525901) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1ff}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xc0}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
dup2(r2, r1)

02:05:29 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x8000}}, './file0\x00'}) (async)
r3 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) (async)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r5}}, 0x10) (async)
write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r5, 0xe}}, 0x10)

02:05:29 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x680300, 0x0)
dup2(r1, r0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x680300, 0x0) (async)
dup2(r1, r0) (async)

02:05:29 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(r1, r2)

02:05:29 executing program 2:
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4b, 0x1}, 0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(r0, r2)

02:05:29 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x680300, 0x0)
dup2(r1, r0)

02:05:29 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'erspan0\x00', &(0x7f0000001340)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=<r3=>0x0, @ANYBLOB="0080008000010000000004064f26003c00640000052f9078ac1e0101000000000986691430ac89072ce0000002ff0000891742e0000002ac1414aae0000001ac1414aae0000001001817d2cf693a40461d438d1f7b13a3b075a6eca9a2b8e2bc622ba4d675254b0000000000daa28019a0ffb2c19abf73f1cc8ae8989e5378235046bdd408a3189ba0c7420d88a1888337e05731"]})
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
write$P9_RREADLINK(r4, &(0x7f0000001140)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xae6c5039adfd5365, 0x9, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000040)='syzkaller\x00', 0xf6b, 0x1000, &(0x7f0000000140)=""/4096, 0x40f00, 0x10, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001240)={0x5, 0x7, 0x2, 0x3800000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001280)}, 0x80)
syz_open_dev$audion(&(0x7f0000001280), 0x80, 0x8602)

02:05:29 executing program 2:
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4b, 0x1}, 0x7) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
dup2(r0, r2)

02:05:29 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async, rerun: 32)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 32)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(r1, r2)

02:05:29 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 3:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x40004)

02:05:29 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'erspan0\x00', &(0x7f0000001340)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=<r3=>0x0, @ANYBLOB="0080008000010000000004064f26003c00640000052f9078ac1e0101000000000986691430ac89072ce0000002ff0000891742e0000002ac1414aae0000001ac1414aae0000001001817d2cf693a40461d438d1f7b13a3b075a6eca9a2b8e2bc622ba4d675254b0000000000daa28019a0ffb2c19abf73f1cc8ae8989e5378235046bdd408a3189ba0c7420d88a1888337e05731"]}) (async)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0) (async)
write$P9_RREADLINK(r4, &(0x7f0000001140)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xae6c5039adfd5365, 0x9, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000040)='syzkaller\x00', 0xf6b, 0x1000, &(0x7f0000000140)=""/4096, 0x40f00, 0x10, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001240)={0x5, 0x7, 0x2, 0x3800000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001280)}, 0x80) (rerun: 64)
syz_open_dev$audion(&(0x7f0000001280), 0x80, 0x8602)

02:05:29 executing program 2:
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4b, 0x1}, 0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
dup2(r0, r2)

02:05:29 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "7d1239f5c127103e7463c6ad31c76475dc078b6665eacc8835bbf52fa2a686216b76105160c20c1c50bf7f67cfbb887d87e0ff3e50d11f3608ba64fd25c94bddc522ef4a749eef30536612bab43f898ab473d6938cdbfda1b0afd13ceaa201c11e7779aaa87cfa03492cac631bc017f2cf89cd0e8f2b286fa9516cf2f43723c6a4c3761b19fc311306b8c4ce7325379f93f9d7166b0bf1e8c269da51e74a18820bf113d9169e8973f467b170b576a6a5863d22830aff260efbef737eb29d2fb553f4ec9038b14dbbbd44e1b7300e723c4fadfcdb573237625602bd897c4d81d0a8cbb8b8cd1e154374075799a45b438f165e5f8e2d42e019cbaef10fa55eb352", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
dup2(r1, r2)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
dup2(r1, r2) (async)

02:05:29 executing program 3:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x40004)

02:05:29 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000011c0)={'erspan0\x00', &(0x7f0000001340)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=<r3=>0x0, @ANYBLOB="0080008000010000000004064f26003c00640000052f9078ac1e0101000000000986691430ac89072ce0000002ff0000891742e0000002ac1414aae0000001ac1414aae0000001001817d2cf693a40461d438d1f7b13a3b075a6eca9a2b8e2bc622ba4d675254b0000000000daa28019a0ffb2c19abf73f1cc8ae8989e5378235046bdd408a3189ba0c7420d88a1888337e05731"]})
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0) (async)
write$P9_RREADLINK(r4, &(0x7f0000001140)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xae6c5039adfd5365, 0x9, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000040)='syzkaller\x00', 0xf6b, 0x1000, &(0x7f0000000140)=""/4096, 0x40f00, 0x10, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001240)={0x5, 0x7, 0x2, 0x3800000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001280)}, 0x80) (rerun: 64)
syz_open_dev$audion(&(0x7f0000001280), 0x80, 0x8602)

02:05:29 executing program 2:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000080)={0x249, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
socket$nl_route(0x10, 0x3, 0x0)
dup2(r1, r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x3f, 0x3f, 0x40, 0x1a, 0x4b, @random="b620738c9b66"}, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r2, 0x4, 0x2, 0x63})

02:05:29 executing program 5:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, 0x21813, r2, 0x85000)

02:05:29 executing program 4:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 3:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x40004)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x40004) (async)

02:05:29 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 2:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000080)={0x249, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
socket$nl_route(0x10, 0x3, 0x0)
dup2(r1, r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x3f, 0x3f, 0x40, 0x1a, 0x4b, @random="b620738c9b66"}, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r2, 0x4, 0x2, 0x63})
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000080)={0x249, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
dup2(r1, r0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x3f, 0x3f, 0x40, 0x1a, 0x4b, @random="b620738c9b66"}, 0x10) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r2, 0x4, 0x2, 0x63}) (async)

02:05:29 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, 0x21813, r2, 0x85000)

02:05:29 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x2cc982, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x2, 0x1, 0x94e, 0x0, 0x12})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/bonding', 0x80100, 0x44)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x9c, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2cda}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x73}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24040000}, 0x880)
r5 = syz_open_dev$ttys(0xc, 0x2, 0x1)
io_setup(0x5, &(0x7f0000001900)=<r6=>0x0)
io_cancel(r6, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
io_submit(r6, 0x2, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x40, r0, &(0x7f0000000140)="c7606161528e1d42df5247991e4fd840b783b88e436a99c8d1c7df194eed939a34e64971258f6b508b9024d3900522fa337e50365ecb2f9aead88f0e655ffd2a128d0fb12c312acbdbb9d6877acad4171193404d024906ab0c45b3a8685cf2ce8fdb2efc5f92152b41946794c1af0a6b8cae19cf90e2334abf341497f085e0c759d3df5bae9204612c123ef180263e3b28e10b4935c12bb2015c1fc90b12eecce21f0eb3ad0d42f46a27d4259dd21da7a17727c409e0a03940ef0a859fcb0e5dc3585cca6ca4ff1765bcb00aa1bb5a269e1e6719d589970cc654d1c87e1de76b228b5f", 0xe3, 0xfffffffffffffffb, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x2d, r7, &(0x7f0000000240)="185c700f43822c5d3e1894376f847422b6beff547584028b24167b767d24d0a363c5f871fc122544ca5c2d84a2a59e50d4d329779a01e2abb093bb7d10395ca33fe4ccaf4ca00e294ef2546ffb1da31af02e3d320c55eb01e8987617cf69722ebb06268c51bb9b5730da29917b622b03cac268b1c992f9fe183eef5a3b27848d5562c0", 0x83, 0x9, 0x0, 0x2}])
r8 = dup2(r5, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)

02:05:29 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x5, 0x5, 0x6, 0x20, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x2}, 0x48)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001480)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x10001}}, './file0\x00'})
r5 = syz_open_dev$audion(&(0x7f00000014c0), 0x1, 0x4008c0)
r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001500), 0x40000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x11, 0x4, &(0x7f0000000340)=@raw=[@map_fd={0x18, 0x9, 0x1, 0x0, r0}, @alu={0x7, 0x0, 0x6, 0xb, 0x0, 0x50, 0x11}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000380)='GPL\x00', 0x3, 0x1000, &(0x7f00000003c0)=""/4096, 0x41f80, 0x3, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001400)={0x3, 0xd0c1}, 0x8, 0x10, &(0x7f0000001440)={0x1, 0xb, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[0xffffffffffffffff, 0x1, r2, r3, r4, r5, 0x1, r6]}, 0x80)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0)
fsetxattr$trusted_overlay_origin(r9, &(0x7f00000000c0), &(0x7f0000001600), 0x625af83c8822a86c, 0x2)
r10 = dup2(r8, r7)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x1, r11, &(0x7f0000000180)="7b6ebb54bf3b71501995ca11ff6c2bc03b698bdc2b0aa896dfff4487b76ed2c014074d5a5ec2a6c964f02785ede72e117b409bbb29fc902daa42a17fbc69e6da40e126cb4a4ebec2444262b374bb2bd4ef7945db87c2eb083e8d4ca8d333922204a7de862aae00fa94e45a1eb021887a7b1150d3b775a4ab5cbad7e96e864416c7fa02047e1c915798f96bb3ec9c1eb8ae5c207341a9363cd2aa29ca2156362544afb0682a46617ea7b28d68046664484458f0bfbe3075830052c10626561b90ba1572da94b61016853ba06fbd002bd27cea6310aa08fe015e", 0xd9, 0x5, 0x0, 0x3, r10}, &(0x7f0000000280))
r12 = getgid()
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20000, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="50e510c11f35a26b6924c9", @ANYRESDEC, @ANYBLOB=',fscache,aname=trusted.overlay.origin\x00,dfltuid=', @ANYRESHEX=0xee00, @ANYBLOB=',posixacl,privport,dfltgid=', @ANYRESHEX=r12, @ANYBLOB=',debug=0x0000000000000003,nodevmap,appraise,obj_user=devices.deny\x00,pcr=00000000000000000037,hash,\x00'])

02:05:29 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 2:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000080)={0x249, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
socket$nl_route(0x10, 0x3, 0x0)
dup2(r1, r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x3f, 0x3f, 0x40, 0x1a, 0x4b, @random="b620738c9b66"}, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r2, 0x4, 0x2, 0x63})
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000080)={0x249, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
dup2(r1, r0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x3f, 0x3f, 0x40, 0x1a, 0x4b, @random="b620738c9b66"}, 0x10) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r2, 0x4, 0x2, 0x63}) (async)

02:05:29 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, 0x21813, r2, 0x85000)

02:05:29 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "7d1239f5c127103e7463c6ad31c76475dc078b6665eacc8835bbf52fa2a686216b76105160c20c1c50bf7f67cfbb887d87e0ff3e50d11f3608ba64fd25c94bddc522ef4a749eef30536612bab43f898ab473d6938cdbfda1b0afd13ceaa201c11e7779aaa87cfa03492cac631bc017f2cf89cd0e8f2b286fa9516cf2f43723c6a4c3761b19fc311306b8c4ce7325379f93f9d7166b0bf1e8c269da51e74a18820bf113d9169e8973f467b170b576a6a5863d22830aff260efbef737eb29d2fb553f4ec9038b14dbbbd44e1b7300e723c4fadfcdb573237625602bd897c4d81d0a8cbb8b8cd1e154374075799a45b438f165e5f8e2d42e019cbaef10fa55eb352", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x5, 0x5, 0x6, 0x20, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x2}, 0x48)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001480)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x10001}}, './file0\x00'})
r5 = syz_open_dev$audion(&(0x7f00000014c0), 0x1, 0x4008c0)
r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001500), 0x40000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x11, 0x4, &(0x7f0000000340)=@raw=[@map_fd={0x18, 0x9, 0x1, 0x0, r0}, @alu={0x7, 0x0, 0x6, 0xb, 0x0, 0x50, 0x11}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000380)='GPL\x00', 0x3, 0x1000, &(0x7f00000003c0)=""/4096, 0x41f80, 0x3, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001400)={0x3, 0xd0c1}, 0x8, 0x10, &(0x7f0000001440)={0x1, 0xb, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[0xffffffffffffffff, 0x1, r2, r3, r4, r5, 0x1, r6]}, 0x80)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0)
fsetxattr$trusted_overlay_origin(r9, &(0x7f00000000c0), &(0x7f0000001600), 0x625af83c8822a86c, 0x2)
r10 = dup2(r8, r7)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x1, r11, &(0x7f0000000180)="7b6ebb54bf3b71501995ca11ff6c2bc03b698bdc2b0aa896dfff4487b76ed2c014074d5a5ec2a6c964f02785ede72e117b409bbb29fc902daa42a17fbc69e6da40e126cb4a4ebec2444262b374bb2bd4ef7945db87c2eb083e8d4ca8d333922204a7de862aae00fa94e45a1eb021887a7b1150d3b775a4ab5cbad7e96e864416c7fa02047e1c915798f96bb3ec9c1eb8ae5c207341a9363cd2aa29ca2156362544afb0682a46617ea7b28d68046664484458f0bfbe3075830052c10626561b90ba1572da94b61016853ba06fbd002bd27cea6310aa08fe015e", 0xd9, 0x5, 0x0, 0x3, r10}, &(0x7f0000000280))
r12 = getgid()
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20000, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="50e510c11f35a26b6924c9", @ANYRESDEC, @ANYBLOB=',fscache,aname=trusted.overlay.origin\x00,dfltuid=', @ANYRESHEX=0xee00, @ANYBLOB=',posixacl,privport,dfltgid=', @ANYRESHEX=r12, @ANYBLOB=',debug=0x0000000000000003,nodevmap,appraise,obj_user=devices.deny\x00,pcr=00000000000000000037,hash,\x00'])
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x5, 0x5, 0x6, 0x20, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x2}, 0x48) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) (async)
syz_open_dev$audion(&(0x7f00000014c0), 0x1, 0x4008c0) (async)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001500), 0x40000, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x11, 0x4, &(0x7f0000000340)=@raw=[@map_fd={0x18, 0x9, 0x1, 0x0, r0}, @alu={0x7, 0x0, 0x6, 0xb, 0x0, 0x50, 0x11}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000380)='GPL\x00', 0x3, 0x1000, &(0x7f00000003c0)=""/4096, 0x41f80, 0x3, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001400)={0x3, 0xd0c1}, 0x8, 0x10, &(0x7f0000001440)={0x1, 0xb, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[0xffffffffffffffff, 0x1, r2, r3, r4, r5, 0x1, r6]}, 0x80) (async)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) (async)
fsetxattr$trusted_overlay_origin(r9, &(0x7f00000000c0), &(0x7f0000001600), 0x625af83c8822a86c, 0x2) (async)
dup2(r8, r7) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x1, r11, &(0x7f0000000180)="7b6ebb54bf3b71501995ca11ff6c2bc03b698bdc2b0aa896dfff4487b76ed2c014074d5a5ec2a6c964f02785ede72e117b409bbb29fc902daa42a17fbc69e6da40e126cb4a4ebec2444262b374bb2bd4ef7945db87c2eb083e8d4ca8d333922204a7de862aae00fa94e45a1eb021887a7b1150d3b775a4ab5cbad7e96e864416c7fa02047e1c915798f96bb3ec9c1eb8ae5c207341a9363cd2aa29ca2156362544afb0682a46617ea7b28d68046664484458f0bfbe3075830052c10626561b90ba1572da94b61016853ba06fbd002bd27cea6310aa08fe015e", 0xd9, 0x5, 0x0, 0x3, r10}, &(0x7f0000000280)) (async)
getgid() (async)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20000, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="50e510c11f35a26b6924c9", @ANYRESDEC, @ANYBLOB=',fscache,aname=trusted.overlay.origin\x00,dfltuid=', @ANYRESHEX=0xee00, @ANYBLOB=',posixacl,privport,dfltgid=', @ANYRESHEX=r12, @ANYBLOB=',debug=0x0000000000000003,nodevmap,appraise,obj_user=devices.deny\x00,pcr=00000000000000000037,hash,\x00']) (async)

02:05:29 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:29 executing program 2:
syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c80}, 0x4004002)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf250300000008001800e00000020500f8ff000000002de10000c625299ca03129aab61f00d6b114d112d692da98be26ea98fce7dffcf57ada0fc3538ebba04452fc745910542c4ba8f78656a01d77b489e91070b4bcffb7acefe34eedc9b45b716c58a4ee0739557015670fa1a2f065052afafcdbe04ea678b58b79cc8a59dbcd9efc4011f8cbaabbcc726b89597431c6e35f1e30a360"], 0x24}, 0x1, 0x0, 0x0, 0x48054}, 0xaba5b1f829799baf)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x8bc0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
read$proc_mixer(r2, &(0x7f0000000080)=""/237, 0xed)
dup2(r3, r0)

02:05:29 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001080), 0x80001, 0x0)
getsockname$llc(r2, &(0x7f00000010c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000001100)=0x10)
open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x10000)

02:05:30 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x2cc982, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x2, 0x1, 0x94e, 0x0, 0x12})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) (async, rerun: 32)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/bonding', 0x80100, 0x44) (async)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x9c, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2cda}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x73}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24040000}, 0x880) (async)
r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
io_setup(0x5, &(0x7f0000001900)=<r6=>0x0)
io_cancel(r6, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
io_submit(r6, 0x2, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x40, r0, &(0x7f0000000140)="c7606161528e1d42df5247991e4fd840b783b88e436a99c8d1c7df194eed939a34e64971258f6b508b9024d3900522fa337e50365ecb2f9aead88f0e655ffd2a128d0fb12c312acbdbb9d6877acad4171193404d024906ab0c45b3a8685cf2ce8fdb2efc5f92152b41946794c1af0a6b8cae19cf90e2334abf341497f085e0c759d3df5bae9204612c123ef180263e3b28e10b4935c12bb2015c1fc90b12eecce21f0eb3ad0d42f46a27d4259dd21da7a17727c409e0a03940ef0a859fcb0e5dc3585cca6ca4ff1765bcb00aa1bb5a269e1e6719d589970cc654d1c87e1de76b228b5f", 0xe3, 0xfffffffffffffffb, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x2d, r7, &(0x7f0000000240)="185c700f43822c5d3e1894376f847422b6beff547584028b24167b767d24d0a363c5f871fc122544ca5c2d84a2a59e50d4d329779a01e2abb093bb7d10395ca33fe4ccaf4ca00e294ef2546ffb1da31af02e3d320c55eb01e8987617cf69722ebb06268c51bb9b5730da29917b622b03cac268b1c992f9fe183eef5a3b27848d5562c0", 0x83, 0x9, 0x0, 0x2}]) (async)
r8 = dup2(r5, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)

02:05:30 executing program 5:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:30 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
dup2(r1, r0) (async)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001080), 0x80001, 0x0)
getsockname$llc(r2, &(0x7f00000010c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000001100)=0x10)
open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="15100000fb00000000fb1502d3b25a13412cae3a593fa854d9bebb32eb0017284ef4343b91ea88005bbfd35a59420190ea2e2edeac856e093db5ff967ab44ba50816a4ea43f856c5df188b143112eff320658cadd9b799bccfc9f0d5bf5e5b0fdad0fd400688beaac6eeecf9d8471a1fba4c360b883202c7296f1921890654aa51e7fcfd1811489cb0172ab01d42c18c8358ff1b9a45c41a03a5cd6120eee91b1f73c2f2cc287b79b33235418f5dad8b481155392a78aac04b58ef9342c17f1c0e52ec3a05d5be2b6670739339052c32b599f9959bd0c293638ef4ee7a79c3f3840f6fe39006d66501e01d0e5e89b4e00ab01008ab2409fb4bb8e054a2914aad5493fed2d5ca81032ad42d5b09245990b5ba3e1706e946e225572af3bb7fcc3e1fb1e0d9c82e082ccfd6ac2bd265d971fc91c59a25ae90a5bd61b4a9751fadfb6052c4df6409dd6af448046f21a345be85dadd6433a0d1101f132b11a0d0add290f0e25859f7904cedd5acaa9930ec67e6675d98271c6523d56d4f0c15d488acc7214316458307583e08ab34c6456fad6c522e8a859e488cc81c1b1ac2e43e4a32b2cf343baffb9ddb2b950e5484006cc7b02990494950c2bef284899ff7a9902aa64b427156f1a6c579e0743ab242331069c689b91ff21c25a4bf8224dfcb891cb69e9c461035b58a388239f96334bda07cfad34f709068174b0a4f1ef9df409eea488cf9d4e1b6aae61463acf59474a9d847471eb3077198505a3f8acdeaa88554161d902c5fad583faa12e28f1f782c3994e3193ee263842d76293e14ed16830c41134a66783dd8fa51b52a017515004ed98e47543f56af39bacedad8f4765defbded1b38ddadbda8c68624e2fc5b0dea308bac33b54c7ed9d1ddabb0583a5b1aa3ef83b01dc0e2a9c7a94e166573daf600f09bb38c440d3d9f26e911eb78c3103c7183dc6328a453304d2db2d85eb0be5fa8ebd56ccb67cc01546daf93da3cc4f1301907f416b1abec5cd1b91664dc60b1d374731e1b16df9b6a7a8e5c941a0c67df9b01bca3334f55ddc4e56b4fe11bd238e10a2a385a5899a228e37f5430626ec6fccbea449a4d8c99adcb842751f4237304a3942d0f997a57252b11a3c795134c1cddde6de10ce49345b7009f417fe9b2ee53c0c23b4d2e248ca682a4889c1c25e9efa4e343a23bd4b3f2f4f8c69315ed375461c3f5b84ff44675afcaa9fe21ae59c8586a2add95c4f23469aa319c07c3d6611a0204e79c8105f1211c0cedc4f9b9b45f85222b05a442842254cc20b5c89d1355da2297523cc9fb11c5c69fd664fa791e818c11adc0ca2ed07052a0756f1154ed823cd064d11dda85694f9217b9a07c215aa013769a8459177a429a5d184d7e2bca8301b701305a65de852077f7577ccb5c24c11362afea3bc9e64997ed7de48d85bf4f6a18c203309e01b14f0ee8dca80664f067ee26294f47045af2b8104d8ea8361ed72b91575bafcd9d3694caf64a5aa6ef0db409685f220d8d1fcc6c0ef90311a18e087311401c56e01b30c223084afbbd862888c163222182706c957958bb2f4df159ce923393e20e200ec1190a0baa0a1cfbe9dbea58a3f04640626039f0ba851c1f91dcdceffe48b997f0360f7342aefa7e1025694e55a1d0dd389c17e4b2995443b8309ba5600e33002e16512ed5744c7d3d3f1112149f2e1db93ad0cdbb47e08799bea52e60108e90a8ef02aa2b025689b31a369254801ec3ec56c8a03372f1224add947295e589e0c96a3f0e734baa061795ce40d4861113aae3c1d99ac3e8fc739a63ffd923ba1ac9e10c32d8f09c97ca9a62e05d605a3ae354a70fd26545d49dba038c0bf58b0cc004633f54227ba8e4a8bb38107f71ab08e81160394259884265fd7a2e746dbbce29b22d53677f53eedf6022372918fc3bed5c63a39560af0b0815948590486c377fbdf208bce79f2552b98587058224b2564619a524624227fb7eb1eeb63d621d40cd1bfc9e1962d6917c1e6ee8faa8ebb0f94ac070d3862493c9f1ea72c6bacddc805a86ee6d0736ad28613975fb6b548fd946e6246893f2ec09bb10364e87e612a4fbaa500cd2bb0369d6ca67d364f1c3f20692c7835c7ad53743801879d8784bdbeacb381634a76d3160934bad27f41e4562a6c5877402295b94dfaaea0c8cc8654eeb4784b22a440bb59f4e93cc6fb76348033dc2ba724f04b2737419fab605af482249ffca2db4354626680ed88beccee7400b23ac034a8641598776c827d34435224da408727e2fe4c3c561eb9f5bae727cbe7f41571f7d61d3873701d8e3f3c0540a8387d85b4f1aee784958bac628f311dfe778f680018722bd9a4c1afdb1ed08b3d86baa871d8c3f0d83a9711744dfbd8ba68c7317aed2fe8a19bdccf4fbf40847985b4788b5ea745adf5c332598afa878483b9a69400a705984bd845e9b8351031f526edc45acac5776b0e820035f80c7709daf98f2681f84ffc39b003634b58c469481e4238ce551f6b2748f2f8e83207cce644212926ec74bdc3d454d1ad6f242c5b3143b70340dc8a4465c962196cbcf1e71d0726bc62ddf3cbb71628f4b5ac676d4a9e15832923805507ea6e3ba146c4aa7c227cb2bb049d743cafa4132ea123b42d18a5bc76a9a20ace8addef90a4a18a3d57d08087ee02bccac8e8662195649dbb900dac12dc21a5680f2c62599de2042dce75b107984095c1d057c158d88cc20b2b912069368a2342c5dea2f623b1bd1a8024c00adc851d2234598473cde956cd339e6fb178654aa28579e8969f6a4645d1c3b7bbcc717dbf018a16b8f176d8e53eec710f27e3614cb7840a8b345474ded8e3363e9b994f1b63b00fd992a472f2cb660501a2dea73944bf7a488136a274bd60dffab0bc38ef4eab67cf128b37b8ca34c076a339f6c178c333e3f8635b2bccf4ca68294aeb7eb574172a29e8b21daa63dd39992d0ffad78f457cfb6414b0bed6171ac6ab0512c69721bd04813b7d822bb16d9d73df6892da007ba5e15649d656905b27726e9113798267dbd755caf8b1d579b4b4fe22ff591c324d3c999e06b734fdb28792005c8151025630cd578220ec41f520ff62a05458839398b16a7f312997c5b907679618038d46bad99008cc612629868ad8095c256c67d35b4ea340c6d33185f389ee9aba90cf0ceffb3780ab3c41581dd04e4298153070eee90da1185ab3e9934c5b881f4801fefcf6b79ce40e7922bac3595f98ba4269e5fdeffb4ea6ad7f9de6e88543e3de45bf2dd364a68de073ee926a3932fc52dc21cbb9714a68c28b8fe079add365e91f411f7697ba31d337cceba4ad809e2404e231342c6c1d25c2dd136e22d819d6437266e98d2b2675ede4081bbec92989eac55c96a918361b6158243a30493497f12299f0e9977cd57bd838032cd63f69c2e45cf1b514b37d806c044bf41eb8a9aa7727b389e0687e078f8c6e882297c6f0bcefd434ebe0df695daf16c37309a757b5ca102bb7d349d087923585a8b82ec0f8316099444f28d64153b07f8dbac1059efb4c5f63a304e6ee02b650f45882d33aae70e888437ce729fe280fab6091f28c0a7a2e1a4ee4d73c591b0e8e32f9bf098d1b7797b0938654ff1cddd366a39937298c4fbcb71be8222360d12bd34e148b90e18b10730f5e32f01c70f224632bb160b83a80624c33c83764842917ba6dee2a02bcd645cb125320abb4771332a707ada7493e0eebdd0c21d2d86b695088b83fd7b977dbe2bedd22b3838ddbb4b1939f91672fbb601222c0e77e243197f31cef9ebb51c0c7c0ea8dac2a46f0181bd08ec0ceeeadd08d7b439391610a1cce6b360dda94b703832a561380453729027e3f1b85927964aed1f079273f28fb0d919c20b086df45a871ab0bc7ed848f748be0e3361308f4170940bcdcb1dae75a93a5b2814d162a96e73a8407634a99403abcdf5d2a7d647c49ca4280934f09536cfb3ba3c5e007ec3ec2612e9bc4fdd34f02497c9dc1372e6e5e5b324a3b4a0ee7da7a5322ee4d1f7210be2b61fae03e0fc3119cc751cb1d2e8142b48622a54204cf11c095345bdf7013cf83cc3b06b754a5b6e6cb4f7885e5ac80346ec98d2894e798e5ffdb8e89c3f4b716cc49bf0fb69b947e47585fc141376be67fd0b7e68d5d10dbcfe236eff2ac7ecae41d40e912938748ed250884ac8f2b2cb87af50a4d04bb2cdc0470bd90d9767bab474d9f3544b329010aa4f78b3604ecb9cf11ee6f14e823bbbdeabcd31c30b25bd71a1d979275c82d6c4b2de084c7d1f7474763d17d9607e98089602b5534cb856b856e82572f92e9bb2dba2355c2b6af3a4b46300ee1bb3e09e6c21b509dc58a4a96bf2d7d26f3770fb09f7e744819d6ba95e614bfab8dbbc69778721ecdd8fd1b40e90a3429de0627c52b122871b283f4ce2aec70bb99d04438e51b5680fe252815315c8efd3c1f7a0b88389b225dc6c5fa1034602d5ea75ed5cd74f28a63ab1252c442212745ad0bc3a0ad24d5d2fa1a5e3a90a826a4f146b692c15db85e1ad2fc69573597914e1c160f276730a7d2ae7b3f0315405d9eb8475bb54843a24ffb21fca7e45de92bc7d18cdf73b1d1e50bd005df0d0e3b04e3c9721a3ec992c87e80b58df07c17ef1bc01d8dba9a54e3f3ca370d265dc788e52d35ab8caf1ed21f6327f2923c74b5ca0df4b3bee6a5d5a229e0948021b459fd3e581046d607edc83cb9854b94843492a8c8b29477ccee8548384b4e3dadd2ccb8323a7a3c35ae663f12e6f7e5be86bfdda0b92eeb8fb3d475e48ebcc566f420cebc55a63fd50d1d34f8d7bbddd61744b072bf6dd7243d2e7b823c9822b31c27564a4aa9b9be22b49939128ddccb1fde8d341bc034c49ee5214a9ebc744a33fa2b45c16b5047cdea585e0db234fe06cc63d51414023e80b025013869062cd599fb8622e6eb0ce2e965dfd4ca0c0bad074e2d08458ca26bdd13b6e440da4dc4ba519571969a8e1b940b86a1638b459364b50aa98625396370550e129edc4c0a260bc2ca0c858e7224dcdcca847f4afc9179d9c4d6b95799c719b03cbdbf18892687aede2a3a91fd13415f2557b932cefee4c99e25239fd70fb6abce6d7f40321f4f7be4e346d3a40892dfcab1065b1a1dea98b7025c337cf5da009f5d0fdf3f102008f5fdfa70eb3932f83bae5fbf2221eaf202286cef1f48537507c9670beffe06dbd35d23516ec3dd990f538ba9c2dcb6d4be92b39078b89aade8ce0b9881b7570f52e9a931efefce2b7ec89a7a7209153d6e331dd43c9c0534deb94c15324fb17f2ba502275695f1718025952596e11224114544a1c2dcf9aa3ff228a36a72d4b32f82a927c4ce9155d80b968759985afeca4769849879deac2ed8187c9c49f7766851e4300c6fe9bc43aa301a5820252329faa4682cfd63eff21ae21e0343ed3f1208890942cbc3c1a48a96eae05aa36722900c1f9dcd29106c3392be1698710f0857b7ec0e57c5449c4a856e6c022cdd367f483ac76e3fa00618889f404743962556212e42d01ddc92dbd1b5a94d04e3c7dc93c0230529d7886d62a9ac607a0b38e8205ab74c01d8b09c4dabae88b6b9604b2a11d6a70c28d73d015e667b0ef14efac86206a7da61a5de7c92586f58002e4e695d0655c44ce8443f8eab30b57ae3ae081ae16184dce0bc9f5359f2c260dcf2c93f45c2282e09b2e8b15ced2b6ccddb0367666c061c281cbd3881e7a6f0836457481cf61930125c55ca7174de2c5a2a8f377ee0d7dc6e63c62f38f02f1b9a6a9064f03161122559c715a443b6581a04f7874192cd38a9fe168f154160f584aebae4e66672b8027"], 0x10000)

02:05:30 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0)

02:05:30 executing program 5:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:30 executing program 2:
syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c80}, 0x4004002)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf250300000008001800e00000020500f8ff000000002de10000c625299ca03129aab61f00d6b114d112d692da98be26ea98fce7dffcf57ada0fc3538ebba04452fc745910542c4ba8f78656a01d77b489e91070b4bcffb7acefe34eedc9b45b716c58a4ee0739557015670fa1a2f065052afafcdbe04ea678b58b79cc8a59dbcd9efc4011f8cbaabbcc726b89597431c6e35f1e30a360"], 0x24}, 0x1, 0x0, 0x0, 0x48054}, 0xaba5b1f829799baf) (async)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x8bc0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
read$proc_mixer(r2, &(0x7f0000000080)=""/237, 0xed)
dup2(r3, r0)

02:05:30 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async, rerun: 32)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 32)
dup2(r1, r0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001080), 0x80001, 0x0)
getsockname$llc(r2, &(0x7f00000010c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000001100)=0x10) (async)
open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x10000)

02:05:30 executing program 5:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = dup2(r0, 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:30 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x5, 0x5, 0x6, 0x20, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x2}, 0x48) (async)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001480)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x10001}}, './file0\x00'}) (async)
r5 = syz_open_dev$audion(&(0x7f00000014c0), 0x1, 0x4008c0) (async)
r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001500), 0x40000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x11, 0x4, &(0x7f0000000340)=@raw=[@map_fd={0x18, 0x9, 0x1, 0x0, r0}, @alu={0x7, 0x0, 0x6, 0xb, 0x0, 0x50, 0x11}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000380)='GPL\x00', 0x3, 0x1000, &(0x7f00000003c0)=""/4096, 0x41f80, 0x3, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001400)={0x3, 0xd0c1}, 0x8, 0x10, &(0x7f0000001440)={0x1, 0xb, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001540)=[0xffffffffffffffff, 0x1, r2, r3, r4, r5, 0x1, r6]}, 0x80) (async)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r8 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0)
fsetxattr$trusted_overlay_origin(r9, &(0x7f00000000c0), &(0x7f0000001600), 0x625af83c8822a86c, 0x2) (async)
r10 = dup2(r8, r7)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x1, r11, &(0x7f0000000180)="7b6ebb54bf3b71501995ca11ff6c2bc03b698bdc2b0aa896dfff4487b76ed2c014074d5a5ec2a6c964f02785ede72e117b409bbb29fc902daa42a17fbc69e6da40e126cb4a4ebec2444262b374bb2bd4ef7945db87c2eb083e8d4ca8d333922204a7de862aae00fa94e45a1eb021887a7b1150d3b775a4ab5cbad7e96e864416c7fa02047e1c915798f96bb3ec9c1eb8ae5c207341a9363cd2aa29ca2156362544afb0682a46617ea7b28d68046664484458f0bfbe3075830052c10626561b90ba1572da94b61016853ba06fbd002bd27cea6310aa08fe015e", 0xd9, 0x5, 0x0, 0x3, r10}, &(0x7f0000000280)) (rerun: 64)
r12 = getgid()
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20000, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="50e510c11f35a26b6924c9", @ANYRESDEC, @ANYBLOB=',fscache,aname=trusted.overlay.origin\x00,dfltuid=', @ANYRESHEX=0xee00, @ANYBLOB=',posixacl,privport,dfltgid=', @ANYRESHEX=r12, @ANYBLOB=',debug=0x0000000000000003,nodevmap,appraise,obj_user=devices.deny\x00,pcr=00000000000000000037,hash,\x00'])

02:05:30 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0)

02:05:30 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7, 0x541, "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", 0x26, 0x20, 0x0, 0x5, 0x3, 0x4, 0x2}}}, 0x120)

02:05:30 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r2, @ANYBLOB="0000ff010000af18ba14afe020b4e1d313642e00002e2f66696c650000"])
dup2(r1, r0)
r4 = syz_open_dev$audion(&(0x7f0000000040), 0x4, 0x80)
io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x5, r3, &(0x7f0000000080)="5d2b6ddf2c5a8acd4f11ffb837f0d857412b0f02799c1d0f21b4fe236b07916e9f1f016b13981336f4c06a9a6e05861abf25b446b53c9d1728c774dd8b8017eec80de6756af0425b41287051de0caaa8040c0711046987eecd542c574fb084e47a399e69120c8a6ffe9a02fdee8d395d3e4aa85d372f97c124c6bf2a1275", 0x7e, 0x6e, 0x0, 0x1, r4}])
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x111401, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r6, 0x808, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x200008c0)

02:05:30 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x2cc982, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x2, 0x1, 0x94e, 0x0, 0x12}) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/bonding', 0x80100, 0x44) (async)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x9c, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2cda}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x73}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24040000}, 0x880)
r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async)
io_setup(0x5, &(0x7f0000001900)=<r6=>0x0)
io_cancel(r6, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
io_submit(r6, 0x2, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x40, r0, &(0x7f0000000140)="c7606161528e1d42df5247991e4fd840b783b88e436a99c8d1c7df194eed939a34e64971258f6b508b9024d3900522fa337e50365ecb2f9aead88f0e655ffd2a128d0fb12c312acbdbb9d6877acad4171193404d024906ab0c45b3a8685cf2ce8fdb2efc5f92152b41946794c1af0a6b8cae19cf90e2334abf341497f085e0c759d3df5bae9204612c123ef180263e3b28e10b4935c12bb2015c1fc90b12eecce21f0eb3ad0d42f46a27d4259dd21da7a17727c409e0a03940ef0a859fcb0e5dc3585cca6ca4ff1765bcb00aa1bb5a269e1e6719d589970cc654d1c87e1de76b228b5f", 0xe3, 0xfffffffffffffffb, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x2d, r7, &(0x7f0000000240)="185c700f43822c5d3e1894376f847422b6beff547584028b24167b767d24d0a363c5f871fc122544ca5c2d84a2a59e50d4d329779a01e2abb093bb7d10395ca33fe4ccaf4ca00e294ef2546ffb1da31af02e3d320c55eb01e8987617cf69722ebb06268c51bb9b5730da29917b622b03cac268b1c992f9fe183eef5a3b27848d5562c0", 0x83, 0x9, 0x0, 0x2}]) (async)
r8 = dup2(r5, r0)
write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20)

02:05:30 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x266842, 0x0) (async)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r2, @ANYBLOB="0000ff010000af18ba14afe020b4e1d313642e00002e2f66696c650000"]) (async)
dup2(r1, r0) (async)
r4 = syz_open_dev$audion(&(0x7f0000000040), 0x4, 0x80)
io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x5, r3, &(0x7f0000000080)="5d2b6ddf2c5a8acd4f11ffb837f0d857412b0f02799c1d0f21b4fe236b07916e9f1f016b13981336f4c06a9a6e05861abf25b446b53c9d1728c774dd8b8017eec80de6756af0425b41287051de0caaa8040c0711046987eecd542c574fb084e47a399e69120c8a6ffe9a02fdee8d395d3e4aa85d372f97c124c6bf2a1275", 0x7e, 0x6e, 0x0, 0x1, r4}]) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async)
r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x111401, 0x0) (async)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r6, 0x808, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x200008c0)

02:05:30 executing program 2:
syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c80}, 0x4004002)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf250300000008001800e00000020500f8ff000000002de10000c625