8c\x15\x14\\\x9b\xb5\xbcJ\x1fF\xa3\xfa\x97AF\xd4(\xe9\xd4#6\x11\xc2\x01\xcf\xa32\x9c\xdc\x87\x8d\xbf7\xae\xce6>\xd4(\x01\xb0\xc2\xf5|\xe8\xf8\xc3\xfe\xaaM\x93\xc3\x9c?\t\xdcc\n\x1b\xa14\xf2\xd4@\a\xdf\x88\xf7\xc2j\xd8\xdew\xa7&\xeaa\x955\xb8\r\x16JtMegk,\xfb\n\xe3\xfbk\xaa\x8ag\x98\n\x95\x1b\xe0\xcf\f\xfd\xb5\xffg\xdf\xc7\x04\r(G9\'H_\x14\xb2\f\xd1\xf1F2\xee\xf7\xed$)\xe8\xee\x9fW\xa0\xf4'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa4b}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x48090}, 0x4048c55) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r1) sendmsg$NET_DM_CMD_STOP(r10, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r11, 0x300, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) (async) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r7, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r8, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x104, r5, 0x28, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9a, 0xa, '@/{\x87(.\x15\xf3\xe8\x88u\xbeD!\x8c\x15\x14\\\x9b\xb5\xbcJ\x1fF\xa3\xfa\x97AF\xd4(\xe9\xd4#6\x11\xc2\x01\xcf\xa32\x9c\xdc\x87\x8d\xbf7\xae\xce6>\xd4(\x01\xb0\xc2\xf5|\xe8\xf8\xc3\xfe\xaaM\x93\xc3\x9c?\t\xdcc\n\x1b\xa14\xf2\xd4@\a\xdf\x88\xf7\xc2j\xd8\xdew\xa7&\xeaa\x955\xb8\r\x16JtMegk,\xfb\n\xe3\xfbk\xaa\x8ag\x98\n\x95\x1b\xe0\xcf\f\xfd\xb5\xffg\xdf\xc7\x04\r(G9\'H_\x14\xb2\f\xd1\xf1F2\xee\xf7\xed$)\xe8\xee\x9fW\xa0\xf4'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa4b}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x48090}, 0x4048c55) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r1) (async) sendmsg$NET_DM_CMD_STOP(r10, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r11, 0x300, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) [ 927.601620] nbd: must specify an index to disconnect 17:51:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = socket(0x18, 0x800, 0x61b0527a) accept$phonet_pipe(r4, &(0x7f0000000040), &(0x7f0000000080)=0x10) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r3, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r4}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x800, 0x70bd27, 0x2, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xdf2e3b47f61f3311}, 0x24000080) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x64, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1e}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfc00}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x800, 0x70bd27, 0x2, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xdf2e3b47f61f3311}, 0x24000080) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x64, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1e}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfc00}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) [ 927.695371] nbd: must specify an index to disconnect [ 927.715545] nbd: must specify an index to disconnect 17:51:40 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:51:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) r3 = socket(0x6, 0x5, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x1ff, 0x3, {{0x12, 0x4, 0x3, 0x1e, 0x48, 0x66, 0x0, 0x40, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}, {[@cipso={0x86, 0x31, 0xffffffffffffffff, [{0x1, 0xc, "14159a3c56c70ae03328"}, {0x0, 0x4, "b7e7"}, {0x1, 0xe, "7f30783b12a7c8ab71385399"}, {0x6, 0xd, "814361e313dd7f03e704f1"}]}]}}}}}) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r5 = socket(0x25, 0xa, 0x1) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) (async) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) (async) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r10, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) (async) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xcc, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r3}, {0x8, 0x1, r11}, {0x8, 0x1, r3}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r12}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe5}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x60) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f00000001c0)={'erspan0\x00', r4, 0x700, 0x7, 0x4, 0x6, {{0x1d, 0x4, 0x2, 0x0, 0x74, 0x65, 0x0, 0x3, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@lsrr={0x83, 0x7, 0x4d, [@loopback]}, @ssrr={0x89, 0xb, 0xa, [@multicast2, @local]}, @timestamp_addr={0x44, 0x4c, 0xc7, 0x1, 0x8, [{@rand_addr=0x64010102, 0x3}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x1000}, {@empty, 0x6}, {@broadcast, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0x101}, {@empty, 0xa37b}, {@multicast1, 0x2}]}]}}}}}) 17:51:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) (async) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x104, r5, 0x28, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9a, 0xa, '@/{\x87(.\x15\xf3\xe8\x88u\xbeD!\x8c\x15\x14\\\x9b\xb5\xbcJ\x1fF\xa3\xfa\x97AF\xd4(\xe9\xd4#6\x11\xc2\x01\xcf\xa32\x9c\xdc\x87\x8d\xbf7\xae\xce6>\xd4(\x01\xb0\xc2\xf5|\xe8\xf8\xc3\xfe\xaaM\x93\xc3\x9c?\t\xdcc\n\x1b\xa14\xf2\xd4@\a\xdf\x88\xf7\xc2j\xd8\xdew\xa7&\xeaa\x955\xb8\r\x16JtMegk,\xfb\n\xe3\xfbk\xaa\x8ag\x98\n\x95\x1b\xe0\xcf\f\xfd\xb5\xffg\xdf\xc7\x04\r(G9\'H_\x14\xb2\f\xd1\xf1F2\xee\xf7\xed$)\xe8\xee\x9fW\xa0\xf4'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa4b}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r9}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x48090}, 0x4048c55) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r1) sendmsg$NET_DM_CMD_STOP(r10, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r11, 0x300, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x3c}}, 0x0) 17:51:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = socket(0x18, 0x800, 0x61b0527a) accept$phonet_pipe(r4, &(0x7f0000000040), &(0x7f0000000080)=0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r3, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r4}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r3, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r4, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r6, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) 17:51:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0000000200"/14], 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x14100a0}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r4, 0x200, 0x70bd2d, 0x25dfdbfa, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x1}, 0x14}}, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r6, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x22d}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00fa001af7c7732c297f9e6bd20a263beea3883cf945a3b75756f2b8773a82c99e4921b2cc23344f299b425d3e3c3d981b2888bcc1567b28abcb03591b1c1bce2b9d1ca88e358f9f610f7e867d547c314680ccbb7ae095d00888f82bd28e75cb7abd7244bde1f25177ae478234460ec6a77c6518d62c3d9d8e39cb81f23d4bff915cf9bd4ba3aa87b848b168a0d3192b6acb3e4c94969e", @ANYRES16=r2, @ANYBLOB="01150ce400003ba1f1ad92000000"], 0x1c}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000640)={@broadcast, @private=0xa010101, 0x0, 0x8, [@empty, @private=0xa010102, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @private=0x15, @multicast1, @empty]}, 0x30) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r6, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '-{-.'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000300)={0x281, 0x3}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '\x86&-'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 17:51:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x3c}}, 0x0) [ 928.491441] nbd: must specify an index to disconnect 17:51:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1351a64d", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet_sctp(0x2, 0x1, 0x84) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000340)=0x2) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x84, r4, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4801}, 0x8004) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0x7c, 0x0, 0x234, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r10}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x401}, @NBD_ATTR_BACKEND_IDENTIFIER={0x23, 0xa, '/sys/kernel/debug/binder/stats\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48001}, 0x810) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c040000322aa233e6e24662cf90516f9e8e8b4c054011993df9dbc513259a42693987f4239ba9a3d8b0c02d82cf3de7de61e4d06d563d39fc44b25bb3caa518567031122b24c41e801a77d5d64c5cb86431ffe5023f19dc2985ec58fa90b8463198c222d912986023ec00b218d7b22bc85e3aa4ac1a8f2db8ac6bd582c7a5c7d6ef78bd0a09f6d65f4dca9a9bcee83c1086b059b9b8abf197df4a967e2a5f08d8908b9fa50f7fa5efe10c3ed0065bf5e741ea93484dcfa49948809e00dc2f4bf3099489b5805b9025eaf2f19e6fe6736d0e38f555b3c95c3890db459b518d1dce", @ANYRES16=r9, @ANYBLOB="0100000000000000000002000075aba05697c20235ca833e0d010080000000"], 0x1c}}, 0x0) 17:51:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0000000200"/14], 0x14}}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x14100a0}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r4, 0x200, 0x70bd2d, 0x25dfdbfa, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x1}, 0x14}}, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r6, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x22d}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00fa001af7c7732c297f9e6bd20a263beea3883cf945a3b75756f2b8773a82c99e4921b2cc23344f299b425d3e3c3d981b2888bcc1567b28abcb03591b1c1bce2b9d1ca88e358f9f610f7e867d547c314680ccbb7ae095d00888f82bd28e75cb7abd7244bde1f25177ae478234460ec6a77c6518d62c3d9d8e39cb81f23d4bff915cf9bd4ba3aa87b848b168a0d3192b6acb3e4c94969e", @ANYRES16=r2, @ANYBLOB="01150ce400003ba1f1ad92000000"], 0x1c}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000640)={@broadcast, @private=0xa010101, 0x0, 0x8, [@empty, @private=0xa010102, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @private=0x15, @multicast1, @empty]}, 0x30) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r6, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '-{-.'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000300)={0x281, 0x3}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '\x86&-'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 17:51:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = socket(0x18, 0x800, 0x61b0527a) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r3, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r4}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) [ 928.523734] nbd: must specify an index to disconnect [ 928.534754] nbd: must specify an index to disconnect [ 928.639420] nbd: must specify an index to disconnect [ 928.655747] nbd: must specify an index to disconnect 17:51:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x2, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:40 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:51:40 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x3c}}, 0x0) 17:51:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0000000200"/14], 0x14}}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x14100a0}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r4, 0x200, 0x70bd2d, 0x25dfdbfa, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x1}, 0x14}}, 0x0) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r6, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x22d}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) (async, rerun: 32) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00fa001af7c7732c297f9e6bd20a263beea3883cf945a3b75756f2b8773a82c99e4921b2cc23344f299b425d3e3c3d981b2888bcc1567b28abcb03591b1c1bce2b9d1ca88e358f9f610f7e867d547c314680ccbb7ae095d00888f82bd28e75cb7abd7244bde1f25177ae478234460ec6a77c6518d62c3d9d8e39cb81f23d4bff915cf9bd4ba3aa87b848b168a0d3192b6acb3e4c94969e", @ANYRES16=r2, @ANYBLOB="01150ce400003ba1f1ad92000000"], 0x1c}}, 0x0) (async, rerun: 32) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000640)={@broadcast, @private=0xa010101, 0x0, 0x8, [@empty, @private=0xa010102, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @private=0x15, @multicast1, @empty]}, 0x30) (async) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r6, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '-{-.'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000300)={0x281, 0x3}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '\x86&-'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 17:51:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1351a64d", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet_sctp(0x2, 0x1, 0x84) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000340)=0x2) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x84, r4, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4801}, 0x8004) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0x7c, 0x0, 0x234, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r10}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x401}, @NBD_ATTR_BACKEND_IDENTIFIER={0x23, 0xa, '/sys/kernel/debug/binder/stats\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48001}, 0x810) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c040000322aa233e6e24662cf90516f9e8e8b4c054011993df9dbc513259a42693987f4239ba9a3d8b0c02d82cf3de7de61e4d06d563d39fc44b25bb3caa518567031122b24c41e801a77d5d64c5cb86431ffe5023f19dc2985ec58fa90b8463198c222d912986023ec00b218d7b22bc85e3aa4ac1a8f2db8ac6bd582c7a5c7d6ef78bd0a09f6d65f4dca9a9bcee83c1086b059b9b8abf197df4a967e2a5f08d8908b9fa50f7fa5efe10c3ed0065bf5e741ea93484dcfa49948809e00dc2f4bf3099489b5805b9025eaf2f19e6fe6736d0e38f555b3c95c3890db459b518d1dce", @ANYRES16=r9, @ANYBLOB="0100000000000000000002000075aba05697c20235ca833e0d010080000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1351a64d", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r5, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r7, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000340)=0x2) (async) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x84, r4, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4801}, 0x8004) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0x7c, 0x0, 0x234, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r10}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x401}, @NBD_ATTR_BACKEND_IDENTIFIER={0x23, 0xa, '/sys/kernel/debug/binder/stats\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48001}, 0x810) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c040000322aa233e6e24662cf90516f9e8e8b4c054011993df9dbc513259a42693987f4239ba9a3d8b0c02d82cf3de7de61e4d06d563d39fc44b25bb3caa518567031122b24c41e801a77d5d64c5cb86431ffe5023f19dc2985ec58fa90b8463198c222d912986023ec00b218d7b22bc85e3aa4ac1a8f2db8ac6bd582c7a5c7d6ef78bd0a09f6d65f4dca9a9bcee83c1086b059b9b8abf197df4a967e2a5f08d8908b9fa50f7fa5efe10c3ed0065bf5e741ea93484dcfa49948809e00dc2f4bf3099489b5805b9025eaf2f19e6fe6736d0e38f555b3c95c3890db459b518d1dce", @ANYRES16=r9, @ANYBLOB="0100000000000000000002000075aba05697c20235ca833e0d010080000000"], 0x1c}}, 0x0) (async) 17:51:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r3, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:41 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x3c}}, 0x0) 17:51:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r3, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) [ 929.373713] nbd: must specify an index to disconnect 17:51:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (rerun: 32) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x2, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1351a64d", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet_sctp(0x2, 0x1, 0x84) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000340)=0x2) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x84, r4, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4801}, 0x8004) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0x7c, 0x0, 0x234, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r10}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x401}, @NBD_ATTR_BACKEND_IDENTIFIER={0x23, 0xa, '/sys/kernel/debug/binder/stats\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48001}, 0x810) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c040000322aa233e6e24662cf90516f9e8e8b4c054011993df9dbc513259a42693987f4239ba9a3d8b0c02d82cf3de7de61e4d06d563d39fc44b25bb3caa518567031122b24c41e801a77d5d64c5cb86431ffe5023f19dc2985ec58fa90b8463198c222d912986023ec00b218d7b22bc85e3aa4ac1a8f2db8ac6bd582c7a5c7d6ef78bd0a09f6d65f4dca9a9bcee83c1086b059b9b8abf197df4a967e2a5f08d8908b9fa50f7fa5efe10c3ed0065bf5e741ea93484dcfa49948809e00dc2f4bf3099489b5805b9025eaf2f19e6fe6736d0e38f555b3c95c3890db459b518d1dce", @ANYRES16=r9, @ANYBLOB="0100000000000000000002000075aba05697c20235ca833e0d010080000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1351a64d", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r5, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r7, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000340)=0x2) (async) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x84, r4, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4801}, 0x8004) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0x7c, 0x0, 0x234, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r10}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x401}, @NBD_ATTR_BACKEND_IDENTIFIER={0x23, 0xa, '/sys/kernel/debug/binder/stats\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48001}, 0x810) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c040000322aa233e6e24662cf90516f9e8e8b4c054011993df9dbc513259a42693987f4239ba9a3d8b0c02d82cf3de7de61e4d06d563d39fc44b25bb3caa518567031122b24c41e801a77d5d64c5cb86431ffe5023f19dc2985ec58fa90b8463198c222d912986023ec00b218d7b22bc85e3aa4ac1a8f2db8ac6bd582c7a5c7d6ef78bd0a09f6d65f4dca9a9bcee83c1086b059b9b8abf197df4a967e2a5f08d8908b9fa50f7fa5efe10c3ed0065bf5e741ea93484dcfa49948809e00dc2f4bf3099489b5805b9025eaf2f19e6fe6736d0e38f555b3c95c3890db459b518d1dce", @ANYRES16=r9, @ANYBLOB="0100000000000000000002000075aba05697c20235ca833e0d010080000000"], 0x1c}}, 0x0) (async) 17:51:41 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x3c}}, 0x0) 17:51:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, 0x0, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x3c}}, 0x0) 17:51:41 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) (async, rerun: 32) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (rerun: 32) 17:51:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=@bridge_setlink={0x154, 0x13, 0x400, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x880c}, [@IFLA_ADDRESS={0xa, 0x1, @random="5b5e31959967"}, @IFLA_AF_SPEC={0x30, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0x26}, {0x8, 0x7, 0x0, 0x0, 0xfffffffe}, {0x8, 0xe, 0x0, 0x0, 0x6}]}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x7}, @IFLA_PORT_SELF={0x9c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "48c8b1f617c49194115afe98c25f2936"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4888aa015d747546a6f92108254eb90f"}, @IFLA_PORT_VF={0x8, 0x1, 0x800}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "19e19db1e93c4ead9cac1a727946a8be"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "844221fe98ea45e2fff84068fd768d68"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ff8c571d28ea0f9b9dd351114e6630b4"}, @IFLA_PORT_VF={0x8, 0x1, 0x20}, @IFLA_PORT_PROFILE={0x7, 0x2, ',!\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ae7188d5f4eeaf2661c47dfa4c8a1091"}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PHYS_PORT_ID={0x1e, 0x22, "0c943cf58b8f56e0cba4e2c426d6bc299449ad2aa0d8f34b034e"}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa516}, @IFLA_OPERSTATE={0x5, 0x10, 0x52}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, 0x0, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x2, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000000ff7f00c786034b9b03b6c800010000000000"], 0x1c}}, 0x0) r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000040)={'exec ', 'nbd\x00'}, 0x9) 17:51:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x3c}}, 0x0) 17:51:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x3c}}, 0x0) 17:51:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000000ff7f00c786034b9b03b6c800010000000000"], 0x1c}}, 0x0) r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000040)={'exec ', 'nbd\x00'}, 0x9) 17:51:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, 0x0, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=@bridge_setlink={0x154, 0x13, 0x400, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x880c}, [@IFLA_ADDRESS={0xa, 0x1, @random="5b5e31959967"}, @IFLA_AF_SPEC={0x30, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0x26}, {0x8, 0x7, 0x0, 0x0, 0xfffffffe}, {0x8, 0xe, 0x0, 0x0, 0x6}]}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x7}, @IFLA_PORT_SELF={0x9c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "48c8b1f617c49194115afe98c25f2936"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4888aa015d747546a6f92108254eb90f"}, @IFLA_PORT_VF={0x8, 0x1, 0x800}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "19e19db1e93c4ead9cac1a727946a8be"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "844221fe98ea45e2fff84068fd768d68"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ff8c571d28ea0f9b9dd351114e6630b4"}, @IFLA_PORT_VF={0x8, 0x1, 0x20}, @IFLA_PORT_PROFILE={0x7, 0x2, ',!\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ae7188d5f4eeaf2661c47dfa4c8a1091"}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PHYS_PORT_ID={0x1e, 0x22, "0c943cf58b8f56e0cba4e2c426d6bc299449ad2aa0d8f34b034e"}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa516}, @IFLA_OPERSTATE={0x5, 0x10, 0x52}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=@bridge_setlink={0x154, 0x13, 0x400, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x880c}, [@IFLA_ADDRESS={0xa, 0x1, @random="5b5e31959967"}, @IFLA_AF_SPEC={0x30, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0x26}, {0x8, 0x7, 0x0, 0x0, 0xfffffffe}, {0x8, 0xe, 0x0, 0x0, 0x6}]}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x7}, @IFLA_PORT_SELF={0x9c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "48c8b1f617c49194115afe98c25f2936"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4888aa015d747546a6f92108254eb90f"}, @IFLA_PORT_VF={0x8, 0x1, 0x800}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "19e19db1e93c4ead9cac1a727946a8be"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "844221fe98ea45e2fff84068fd768d68"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ff8c571d28ea0f9b9dd351114e6630b4"}, @IFLA_PORT_VF={0x8, 0x1, 0x20}, @IFLA_PORT_PROFILE={0x7, 0x2, ',!\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ae7188d5f4eeaf2661c47dfa4c8a1091"}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PHYS_PORT_ID={0x1e, 0x22, "0c943cf58b8f56e0cba4e2c426d6bc299449ad2aa0d8f34b034e"}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa516}, @IFLA_OPERSTATE={0x5, 0x10, 0x52}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) (async) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) 17:51:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x204}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000000ff7f00c786034b9b03b6c800010000000000"], 0x1c}}, 0x0) r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000040)={'exec ', 'nbd\x00'}, 0x9) 17:51:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) 17:51:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x204}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:42 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "0b56a673af459103", "c24c45730fe009ed166bb573091d875caf51c29b9d6d99c71615ab5d2ddaba3b", "28f5190f", "6bec6b2430acb191"}, 0x38) 17:51:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=@bridge_setlink={0x154, 0x13, 0x400, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x880c}, [@IFLA_ADDRESS={0xa, 0x1, @random="5b5e31959967"}, @IFLA_AF_SPEC={0x30, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0x26}, {0x8, 0x7, 0x0, 0x0, 0xfffffffe}, {0x8, 0xe, 0x0, 0x0, 0x6}]}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x7}, @IFLA_PORT_SELF={0x9c, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "48c8b1f617c49194115afe98c25f2936"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4888aa015d747546a6f92108254eb90f"}, @IFLA_PORT_VF={0x8, 0x1, 0x800}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "19e19db1e93c4ead9cac1a727946a8be"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "844221fe98ea45e2fff84068fd768d68"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ff8c571d28ea0f9b9dd351114e6630b4"}, @IFLA_PORT_VF={0x8, 0x1, 0x20}, @IFLA_PORT_PROFILE={0x7, 0x2, ',!\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ae7188d5f4eeaf2661c47dfa4c8a1091"}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PHYS_PORT_ID={0x1e, 0x22, "0c943cf58b8f56e0cba4e2c426d6bc299449ad2aa0d8f34b034e"}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa516}, @IFLA_OPERSTATE={0x5, 0x10, 0x52}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) (rerun: 32) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0xc0) 17:51:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) 17:51:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) 17:51:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0xc0) 17:51:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0xffffffffffffff72, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 17:51:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0xc0) 17:51:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x204}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x204}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) [ 931.361931] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 931.370524] nbd: must specify an index to disconnect 17:51:43 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "0b56a673af459103", "c24c45730fe009ed166bb573091d875caf51c29b9d6d99c71615ab5d2ddaba3b", "28f5190f", "6bec6b2430acb191"}, 0x38) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "0b56a673af459103", "c24c45730fe009ed166bb573091d875caf51c29b9d6d99c71615ab5d2ddaba3b", "28f5190f", "6bec6b2430acb191"}, 0x38) (async) 17:51:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 17:51:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r5, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="001000000000000001000000000000000008000000000000ff0f000000000000070000000000000001800000000000000300000007000000010000000200000005000000000000000400000000000000090000000000000004000004000000000800"/112]) 17:51:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0xffffffffffffff72, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00ca490000", @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) 17:51:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0xffffffffffffff72, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00ca490000", @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) (async) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) 17:51:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 17:51:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r3, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r5, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="001000000000000001000000000000000008000000000000ff0f000000000000070000000000000001800000000000000300000007000000010000000200000005000000000000000400000000000000090000000000000004000004000000000800"/112]) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r3, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) (async) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r5, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="001000000000000001000000000000000008000000000000ff0f000000000000070000000000000001800000000000000300000007000000010000000200000005000000000000000400000000000000090000000000000004000004000000000800"/112]) (async) [ 932.122861] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 932.131494] nbd: must specify an index to disconnect 17:51:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 932.259944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 932.276533] nbd: must specify an index to disconnect 17:51:44 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "0b56a673af459103", "c24c45730fe009ed166bb573091d875caf51c29b9d6d99c71615ab5d2ddaba3b", "28f5190f", "6bec6b2430acb191"}, 0x38) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "0b56a673af459103", "c24c45730fe009ed166bb573091d875caf51c29b9d6d99c71615ab5d2ddaba3b", "28f5190f", "6bec6b2430acb191"}, 0x38) (async) 17:51:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00ca490000", @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00ca490000", @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) (async) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) (async) 17:51:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:51:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r5, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="001000000000000001000000000000000008000000000000ff0f000000000000070000000000000001800000000000000300000007000000010000000200000005000000000000000400000000000000090000000000000004000004000000000800"/112]) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r3, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) (async) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r5, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="001000000000000001000000000000000008000000000000ff0f000000000000070000000000000001800000000000000300000007000000010000000200000005000000000000000400000000000000090000000000000004000004000000000800"/112]) (async) 17:51:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 17:51:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x228, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x118d57d3d1ee2da8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffa5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000010) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x1}, 0x8) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x228, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x118d57d3d1ee2da8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffa5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000010) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x1}, 0x8) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000240), &(0x7f00000002c0)=0x4) bind$bt_sco(r7, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xc0, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) [ 933.153813] nbd: must specify an index to disconnect 17:51:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x3c}}, 0x0) 17:51:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x228, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x118d57d3d1ee2da8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffa5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000010) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x1}, 0x8) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:45 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6cd5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x2008040) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{0x0, 0x7, 0x9, 0x8, 0x100, 0x2c, 0x0, 0xa4, 0x100, 0x3, 0x400, 0x72, 0x38b82b95, 0x938, 0x400}}) bind$bt_sco(r0, &(0x7f0000001080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 17:51:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000240), &(0x7f00000002c0)=0x4) bind$bt_sco(r7, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xc0, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:45 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (rerun: 64) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x3c}}, 0x0) 17:51:45 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) [ 933.974144] nbd: must specify an index to disconnect 17:51:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000240), &(0x7f00000002c0)=0x4) bind$bt_sco(r7, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xc0, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r4, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r6, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r8, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000240), &(0x7f00000002c0)=0x4) (async) bind$bt_sco(r7, 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xc0, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) 17:51:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x3c}}, 0x0) 17:51:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:45 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r6, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) socket(0x25, 0xa, 0xffff0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="42c2465602cd85c638111d392ecce585ae6b3d1446524e34992aa9dbdac7d09fdb924e1880e15ded5253ab512a537c8e77aac0fee360e76b281be092d36fe48fb9c7817f77af444d10ecdd76ea6334abeeebb687541377cc4a6e91efaaae6fc5406e7e012345e9af6a27dcd1fcd6c2483feba53947682729ab375904a35b06b38e7b2f7a592bda4a70daf937f1bdb6aef952ef68b2bc", &(0x7f0000000440)=@tcp=r1}, 0x20) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) [ 934.088192] nbd: must specify an index to disconnect 17:51:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x3c}}, 0x0) 17:51:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r2, 0x20, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x20048895}, 0x0) 17:51:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:46 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6cd5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x2008040) (async, rerun: 32) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (rerun: 32) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async, rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{0x0, 0x7, 0x9, 0x8, 0x100, 0x2c, 0x0, 0xa4, 0x100, 0x3, 0x400, 0x72, 0x38b82b95, 0x938, 0x400}}) (async, rerun: 32) bind$bt_sco(r0, &(0x7f0000001080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 17:51:46 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) (async, rerun: 32) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r3) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r6, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) (async) socket(0x25, 0xa, 0xffff0000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="42c2465602cd85c638111d392ecce585ae6b3d1446524e34992aa9dbdac7d09fdb924e1880e15ded5253ab512a537c8e77aac0fee360e76b281be092d36fe48fb9c7817f77af444d10ecdd76ea6334abeeebb687541377cc4a6e91efaaae6fc5406e7e012345e9af6a27dcd1fcd6c2483feba53947682729ab375904a35b06b38e7b2f7a592bda4a70daf937f1bdb6aef952ef68b2bc", &(0x7f0000000440)=@tcp=r1}, 0x20) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:51:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x3c}}, 0x0) 17:51:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r2, 0x20, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x20048895}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r2, 0x20, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x20048895}, 0x0) (async) 17:51:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x3c}}, 0x0) 17:51:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r3) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r2, 0x20, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x20048895}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r2, 0x20, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x20048895}, 0x0) (async) 17:51:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:46 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r6, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) socket(0x25, 0xa, 0xffff0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="42c2465602cd85c638111d392ecce585ae6b3d1446524e34992aa9dbdac7d09fdb924e1880e15ded5253ab512a537c8e77aac0fee360e76b281be092d36fe48fb9c7817f77af444d10ecdd76ea6334abeeebb687541377cc4a6e91efaaae6fc5406e7e012345e9af6a27dcd1fcd6c2483feba53947682729ab375904a35b06b38e7b2f7a592bda4a70daf937f1bdb6aef952ef68b2bc", &(0x7f0000000440)=@tcp=r1}, 0x20) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bind$bt_sco(r0, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) (async) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r3) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r5) (async) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r6, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) (async) socket(0x25, 0xa, 0xffff0000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="42c2465602cd85c638111d392ecce585ae6b3d1446524e34992aa9dbdac7d09fdb924e1880e15ded5253ab512a537c8e77aac0fee360e76b281be092d36fe48fb9c7817f77af444d10ecdd76ea6334abeeebb687541377cc4a6e91efaaae6fc5406e7e012345e9af6a27dcd1fcd6c2483feba53947682729ab375904a35b06b38e7b2f7a592bda4a70daf937f1bdb6aef952ef68b2bc", &(0x7f0000000440)=@tcp=r1}, 0x20) (async) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) (async) 17:51:46 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) connect$caif(r0, &(0x7f0000000000)=@dgm={0x25, 0xe3, 0x3}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000040)=""/12, &(0x7f0000000080)=0xc) 17:51:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x30}}, 0x0) 17:51:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x300, 0x70bd29, 0x7, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 935.096699] nbd: must specify a size in bytes for the device 17:51:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = socket(0x23, 0x4, 0x200) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r9, &(0x7f0000000300), 0x8) bind$bt_sco(r8, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r3, 0x0, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x429}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '-'}]}, 0x80}, 0x1, 0x0, 0x0, 0x48870}, 0x40880) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6cd5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x2008040) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{0x0, 0x7, 0x9, 0x8, 0x100, 0x2c, 0x0, 0xa4, 0x100, 0x3, 0x400, 0x72, 0x38b82b95, 0x938, 0x400}}) bind$bt_sco(r0, &(0x7f0000001080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r1, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6cd5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x2008040) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{0x0, 0x7, 0x9, 0x8, 0x100, 0x2c, 0x0, 0xa4, 0x100, 0x3, 0x400, 0x72, 0x38b82b95, 0x938, 0x400}}) (async) bind$bt_sco(r0, &(0x7f0000001080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) 17:51:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x30}}, 0x0) 17:51:47 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) connect$caif(r0, &(0x7f0000000000)=@dgm={0x25, 0xe3, 0x3}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000040)=""/12, &(0x7f0000000080)=0xc) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r0, 0x0, 0x0) (async) connect$caif(r0, &(0x7f0000000000)=@dgm={0x25, 0xe3, 0x3}, 0x18) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r4, 0x0, 0x0) (async) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000040)=""/12, &(0x7f0000000080)=0xc) (async) 17:51:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x300, 0x70bd29, 0x7, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) (async) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r6, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r9, 0x0, 0x0) (async) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x300, 0x70bd29, 0x7, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) (async) 17:51:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x30}}, 0x0) 17:51:47 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) (async) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) (async) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x300, 0x70bd29, 0x7, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:51:47 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) connect$caif(r0, &(0x7f0000000000)=@dgm={0x25, 0xe3, 0x3}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000040)=""/12, &(0x7f0000000080)=0xc) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r0, 0x0, 0x0) (async) connect$caif(r0, &(0x7f0000000000)=@dgm={0x25, 0xe3, 0x3}, 0x18) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r4, 0x0, 0x0) (async) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000040)=""/12, &(0x7f0000000080)=0xc) (async) [ 935.808410] nbd: must specify a size in bytes for the device 17:51:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0xfffffffffffffe69) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)={'ip6gre0\x00'}) 17:51:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x3c}}, 0x0) [ 935.967842] nbd: must specify a size in bytes for the device [ 936.009265] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 936.027105] nbd: must specify an index to disconnect 17:51:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r6 = socket(0x23, 0x4, 0x200) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r9, &(0x7f0000000300), 0x8) (async) bind$bt_sco(r8, 0x0, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r3, 0x0, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x429}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '-'}]}, 0x80}, 0x1, 0x0, 0x0, 0x48870}, 0x40880) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r1, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'veth1_to_bond\x00'}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c7147418df777b0b53afbe86a70444592000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r5, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8080}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x94, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xba00000000000000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12d}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x94}, 0x1, 0x0, 0x0, 0x10080}, 0x40000) 17:51:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x28}}, 0x0) 17:51:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) 17:51:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'veth1_to_bond\x00'}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c7147418df777b0b53afbe86a70444592000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r5, 0x0, 0x0) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8080}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x94, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xba00000000000000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12d}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x94}, 0x1, 0x0, 0x0, 0x10080}, 0x40000) 17:51:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r1, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x28}}, 0x0) 17:51:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0xfffffffffffffe69) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) (async) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)={'ip6gre0\x00'}) 17:51:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'veth1_to_bond\x00'}) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c7147418df777b0b53afbe86a70444592000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r5, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8080}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x94, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xba00000000000000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12d}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x94}, 0x1, 0x0, 0x0, 0x10080}, 0x40000) 17:51:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r6 = socket(0x23, 0x4, 0x200) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r9, &(0x7f0000000300), 0x8) (async) bind$bt_sco(r8, 0x0, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r3, 0x0, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x429}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '-'}]}, 0x80}, 0x1, 0x0, 0x0, 0x48870}, 0x40880) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x28}}, 0x0) 17:51:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r1, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4) 17:51:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, r2, 0x300, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x81}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x4048001) 17:51:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4) (async) 17:51:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x34}}, 0x0) 17:51:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, r2, 0x300, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x81}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x4048001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, r2, 0x300, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x81}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x4048001) (async) 17:51:49 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r1, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x34}}, 0x0) 17:51:49 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0xfffffffffffffe69) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)={'ip6gre0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0xfffffffffffffe69) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r1, 0x0, 0x0) (async) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)={'ip6gre0\x00'}) (async) 17:51:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4) 17:51:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) socket$caif_stream(0x25, 0x1, 0x0) 17:51:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, r2, 0x300, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x81}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x4048001) 17:51:50 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r1, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x34}}, 0x0) 17:51:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:50 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r1, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x34}}, 0x0) 17:51:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2beafaee1d1c00", @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x81) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r8, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) bind$bt_sco(r7, 0x0, 0x0) r10 = socket(0x27, 0x4, 0x7fff) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r11, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x80, r4, 0x702, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r7}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 17:51:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) 17:51:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) socket$caif_stream(0x25, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) socket$caif_stream(0x25, 0x1, 0x0) (async) 17:51:50 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2d98}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44800}, 0x48000) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x1) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x44}}, 0x40881) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) 17:51:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) 17:51:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x4008000) 17:51:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x34}}, 0x0) 17:51:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2beafaee1d1c00", @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x81) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r8, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) bind$bt_sco(r7, 0x0, 0x0) r10 = socket(0x27, 0x4, 0x7fff) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r11, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x80, r4, 0x702, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r7}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2beafaee1d1c00", @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x81) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000480), 0xffffffffffffffff) (async) sendmsg$NET_DM_CMD_STOP(r8, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) (async) bind$bt_sco(r7, 0x0, 0x0) (async) socket(0x27, 0x4, 0x7fff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r11, 0x0, 0x0) (async) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x80, r4, 0x702, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r7}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) 17:51:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) socket$caif_stream(0x25, 0x1, 0x0) 17:51:50 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0xfffffff8}, @window={0x3, 0x2, 0x7}, @mss={0x2, 0x4da}, @mss={0x2, 0xfffffff8}, @sack_perm], 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x4008000) 17:51:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:50 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x34}}, 0x0) 17:51:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2beafaee1d1c00", @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x81) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r8, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) bind$bt_sco(r7, 0x0, 0x0) (async) r10 = socket(0x27, 0x4, 0x7fff) (async) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r11, 0x0, 0x0) (async) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x80, r4, 0x702, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r7}, {0x8, 0x1, r10}, {0x8, 0x1, r11}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 17:51:50 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0xfffffff8}, @window={0x3, 0x2, 0x7}, @mss={0x2, 0x4da}, @mss={0x2, 0xfffffff8}, @sack_perm], 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0xfffffff8}, @window={0x3, 0x2, 0x7}, @mss={0x2, 0x4da}, @mss={0x2, 0xfffffff8}, @sack_perm], 0x5) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) 17:51:51 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2d98}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44800}, 0x48000) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x1) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x44}}, 0x40881) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r1, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2d98}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44800}, 0x48000) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x1) (async) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x44}}, 0x40881) (async) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) (async) 17:51:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r3, 0x0, 0x0) (async) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) 17:51:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x4008000) 17:51:51 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0xfffffff8}, @window={0x3, 0x2, 0x7}, @mss={0x2, 0x4da}, @mss={0x2, 0xfffffff8}, @sack_perm], 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x34}}, 0x0) 17:51:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x2a, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x1, {}, [@NBD_ATTR_CLIENT_FLAGS={0x0, 0x6, 0x1}]}, 0x1c}}, 0x4040800) 17:51:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='2\\f2\x00'/18, @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r4 = socket(0x29, 0x80000, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x520}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff8001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4ea3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x48004) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r7) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xe0001010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000001}, 0xc050) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r6, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 17:51:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x34}}, 0x0) 17:51:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x2a, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x1, {}, [@NBD_ATTR_CLIENT_FLAGS={0x0, 0x6, 0x1}]}, 0x1c}}, 0x4040800) [ 939.613489] nbd: must specify an index to disconnect [ 939.626679] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 939.648626] nbd: must specify an index to disconnect [ 939.657028] nbd: must specify an index to disconnect 17:51:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) (async) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:51 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2d98}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44800}, 0x48000) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x1) (async) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x44}}, 0x40881) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) 17:51:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r3) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='2\\f2\x00'/18, @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) (async) r4 = socket(0x29, 0x80000, 0x7) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x520}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff8001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4ea3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x48004) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r7) (async, rerun: 32) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xe0001010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000001}, 0xc050) (rerun: 32) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r6, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 17:51:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) [ 939.805783] nbd: must specify an index to disconnect 17:51:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='2\\f2\x00'/18, @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r4 = socket(0x29, 0x80000, 0x7) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}]}, 0x20}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x520}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff8001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4ea3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x48004) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r7) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xe0001010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000001}, 0xc050) (async) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r6, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 17:51:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x34}}, 0x0) 17:51:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000000000000005400020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 17:51:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x2a, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x1, {}, [@NBD_ATTR_CLIENT_FLAGS={0x0, 0x6, 0x1}]}, 0x1c}}, 0x4040800) [ 939.831600] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 939.850062] nbd: must specify an index to disconnect 17:51:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) [ 939.917222] nbd: must specify an index to disconnect 17:51:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r5) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xcc040}, 0x814) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x54, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '!:#%'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x74}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x727}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000058) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100ff000000000000000200000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:51:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r2, 0x0, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000000000000005400020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 17:51:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) [ 940.012794] nbd: must specify an index to disconnect [ 940.066156] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 940.087858] nbd: must specify an index to disconnect 17:51:52 executing program 0: setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000000c0)={0x3}, 0x4) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:51:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) 17:51:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r2, 0x0, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000000000000005400020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 17:51:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r5) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xcc040}, 0x814) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x54, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '!:#%'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x74}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x727}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000058) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100ff000000000000000200000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r5) (async) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xcc040}, 0x814) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x54, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '!:#%'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x74}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x727}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000058) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100ff000000000000000200000000"], 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) 17:51:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x34}}, 0x0) 17:51:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) (async) [ 940.763966] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 940.774617] nbd: must specify an index to disconnect 17:51:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r5) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xcc040}, 0x814) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x54, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '!:#%'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x74}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x727}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000058) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100ff000000000000000200000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:51:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:52 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r1, 0x13}}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000580)={'vlan0\x00', 0x200}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000001c0)=0x6, r4, 0x0, 0x0, 0x1}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r6}}, 0x120) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x81}}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440), 0x2, 0x2}}, 0x20) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r7) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000e506dc4892f3bda050919d799cf37f22e1b3c1044bc8848fecd15620dd6bdccf99490824acf694c8e3f86c9de0c1f8fdee51705c8b510d0803649872e06ec9ea9f9f12bc44bff1059b171f2d5851081772f776d95c3da82ccfe309a", @ANYRES16=r9, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) [ 940.904243] nbd: must specify an index to disconnect [ 940.929523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 940.943428] nbd: must specify an index to disconnect 17:51:53 executing program 0: setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000000c0)={0x3}, 0x4) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:51:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) 17:51:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='2\\f2\x00'/18, @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r4 = socket(0x29, 0x80000, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x520}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff8001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4ea3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x48004) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r7) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xe0001010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000001}, 0xc050) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r6, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 17:51:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000240)=0x5) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0300000000000000000002000000030001000000000000009454e7de0d3102000500"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4003001) 17:51:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x94, 0x0, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:53 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r1, 0x13}}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000580)={'vlan0\x00', 0x200}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000001c0)=0x6, r4, 0x0, 0x0, 0x1}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r6}}, 0x120) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x81}}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440), 0x2, 0x2}}, 0x20) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r7) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000e506dc4892f3bda050919d799cf37f22e1b3c1044bc8848fecd15620dd6bdccf99490824acf694c8e3f86c9de0c1f8fdee51705c8b510d0803649872e06ec9ea9f9f12bc44bff1059b171f2d5851081772f776d95c3da82ccfe309a", @ANYRES16=r9, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) bind$bt_sco(r0, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r1, 0x13}}, 0x10) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bind$bt_sco(r3, 0x0, 0x0) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000580)={'vlan0\x00', 0x200}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x6}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000001c0)=0x6, r4, 0x0, 0x0, 0x1}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r6}}, 0x120) (async) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x81}}, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440), 0x2, 0x2}}, 0x20) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r7) (async) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000e506dc4892f3bda050919d799cf37f22e1b3c1044bc8848fecd15620dd6bdccf99490824acf694c8e3f86c9de0c1f8fdee51705c8b510d0803649872e06ec9ea9f9f12bc44bff1059b171f2d5851081772f776d95c3da82ccfe309a", @ANYRES16=r9, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) (async) 17:51:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x94, 0x0, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10804004}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20040840) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x29, 0x4, 0x3) bind$bt_sco(r5, &(0x7f00000003c0)={0x1f, @none}, 0x8) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000240), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r6) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0x6a, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 17:51:53 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r1, 0x13}}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000580)={'vlan0\x00', 0x200}) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) (rerun: 32) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000001c0)=0x6, r4, 0x0, 0x0, 0x1}}, 0x20) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) (async) socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r6}}, 0x120) (async) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x81}}, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440), 0x2, 0x2}}, 0x20) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r7) (rerun: 32) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000e506dc4892f3bda050919d799cf37f22e1b3c1044bc8848fecd15620dd6bdccf99490824acf694c8e3f86c9de0c1f8fdee51705c8b510d0803649872e06ec9ea9f9f12bc44bff1059b171f2d5851081772f776d95c3da82ccfe309a", @ANYRES16=r9, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) 17:51:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000240)=0x5) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0300000000000000000002000000030001000000000000009454e7de0d3102000500"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4003001) 17:51:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000240)=0x5) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0300000000000000000002000000030001000000000000009454e7de0d3102000500"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4003001) [ 941.706847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 941.730249] nbd: must specify an index to disconnect 17:51:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x94, 0x0, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) [ 941.881304] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 941.892048] nbd: must specify an index to disconnect 17:51:54 executing program 0: setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000000c0)={0x3}, 0x4) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 64) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (rerun: 64) 17:51:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10804004}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20040840) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x29, 0x4, 0x3) bind$bt_sco(r5, &(0x7f00000003c0)={0x1f, @none}, 0x8) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000240), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r6) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0x6a, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10804004}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20040840) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x29, 0x4, 0x3) (async) bind$bt_sco(r5, &(0x7f00000003c0)={0x1f, @none}, 0x8) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000240), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r6) (async) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0x6a, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) 17:51:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000240)=0x5) (async, rerun: 64) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0300000000000000000002000000030001000000000000009454e7de0d3102000500"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) (rerun: 64) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4003001) 17:51:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r5, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x48, r2, 0x1, 0x70bd28, 0x0, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240488c1}, 0x0) clock_getres(0x4, &(0x7f0000000000)) 17:51:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000240)=0x5) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0300000000000000000002000000030001000000000000009454e7de0d3102000500"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4003001) 17:51:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) [ 942.679775] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 942.698653] nbd: must specify an index to disconnect 17:51:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x94, 0x0, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:54 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r5, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x48, r2, 0x1, 0x70bd28, 0x0, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240488c1}, 0x0) clock_getres(0x4, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r4, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r5, 0x0, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x48, r2, 0x1, 0x70bd28, 0x0, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240488c1}, 0x0) (async) clock_getres(0x4, &(0x7f0000000000)) (async) [ 942.724638] nbd: must specify an index to disconnect 17:51:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10804004}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20040840) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x29, 0x4, 0x3) bind$bt_sco(r5, &(0x7f00000003c0)={0x1f, @none}, 0x8) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000240), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r6) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0x6a, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10804004}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20040840) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x29, 0x4, 0x3) (async) bind$bt_sco(r5, &(0x7f00000003c0)={0x1f, @none}, 0x8) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000240), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r6) (async) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0x6a, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r7, 0x400, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) 17:51:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="06000000000000000000020000000800010000000000"], 0x1c}}, 0x0) 17:51:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='2\\f2\x00'/18, @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r4 = socket(0x29, 0x80000, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x520}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff8001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4ea3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xc0}, 0x48004) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r7) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xe0001010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000001}, 0xc050) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r6, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x0) [ 942.873594] nbd: must specify an index to disconnect [ 942.888040] nbd: must specify an index to disconnect 17:51:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5}]}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x6, 0xff, 0x40, 0x3ff}, {0x9, 0x7f, 0x0, 0x1ff}, {0xc7dc, 0x1f, 0x3}, {0x1, 0x9, 0xff, 0x6}, {0x3b09, 0xb1, 0x2, 0x1f}, {0x3ff, 0x0, 0x7, 0x80000001}, {0x81, 0x1, 0x7f}]}) connect$bt_sco(r0, &(0x7f0000000040), 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 17:51:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="13200000", @ANYRES16=r2, @ANYBLOB="01000000000000ffffffffffff000100210000000000"], 0x1c}}, 0x0) 17:51:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r5, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x48, r2, 0x1, 0x70bd28, 0x0, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x240488c1}, 0x0) (async) clock_getres(0x4, &(0x7f0000000000)) 17:51:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="06000000000000000000020000000800010000000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="06000000000000000000020000000800010000000000"], 0x1c}}, 0x0) (async) 17:51:55 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2d98}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44800}, 0x48000) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0x1) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}]}, 0x44}}, 0x40881) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) 17:51:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x0, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="06000000000000000000020000000800010000000000"], 0x1c}}, 0x0) 17:51:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="13200000", @ANYRES16=r2, @ANYBLOB="01000000000000ffffffffffff000100210000000000"], 0x1c}}, 0x0) 17:51:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r5) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x302, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x2004c020) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) r8 = socket(0x5, 0x4, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x84, r7, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffc1}]}, 0x84}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 943.652055] nbd: must specify an index to disconnect 17:51:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="13200000", @ANYRES16=r2, @ANYBLOB="01000000000000ffffffffffff000100210000000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="13200000", @ANYRES16=r2, @ANYBLOB="01000000000000ffffffffffff000100210000000000"], 0x1c}}, 0x0) (async) 17:51:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5}]}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x6, 0xff, 0x40, 0x3ff}, {0x9, 0x7f, 0x0, 0x1ff}, {0xc7dc, 0x1f, 0x3}, {0x1, 0x9, 0xff, 0x6}, {0x3b09, 0xb1, 0x2, 0x1f}, {0x3ff, 0x0, 0x7, 0x80000001}, {0x81, 0x1, 0x7f}]}) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 17:51:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xdfc4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '-%-C'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4000014) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000097aea89ce95838cec0504d000001000047d4d3ab86cb25a8a5f059bf4c1be5469c31ea6cf836ce5255491bf5163626d724875266582be0aa9face992fdc7cf2d9335a3fe427d50754fcb"], 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r5) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x1}, 0x14}}, 0x0) (async) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x302, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x2004c020) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) r8 = socket(0x5, 0x4, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x84, r7, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffc1}]}, 0x84}}, 0x20000000) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x88, r2, 0x1b3e092429f36bf3, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r5, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0xa4, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r7}, {0x5}, {0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4004021) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000020000000800010000dd0000"], 0x1c}}, 0x0) 17:51:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xdfc4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '-%-C'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4000014) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000097aea89ce95838cec0504d000001000047d4d3ab86cb25a8a5f059bf4c1be5469c31ea6cf836ce5255491bf5163626d724875266582be0aa9face992fdc7cf2d9335a3fe427d50754fcb"], 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xdfc4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '-%-C'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4000014) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000097aea89ce95838cec0504d000001000047d4d3ab86cb25a8a5f059bf4c1be5469c31ea6cf836ce5255491bf5163626d724875266582be0aa9face992fdc7cf2d9335a3fe427d50754fcb"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) [ 944.590120] nbd: must specify an index to disconnect 17:51:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x7c, r2, 0x1b3e092429f36bf3, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r5, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0xa4, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r7}, {0x5}, {0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4004021) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000020000000800010000dd0000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r3, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r4, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r5, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r6, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r8, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0xa4, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r7}, {0x5}, {0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4004021) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000020000000800010000dd0000"], 0x1c}}, 0x0) (async) 17:51:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r5) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x302, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x2004c020) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) r8 = socket(0x5, 0x4, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x84, r7, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffc1}]}, 0x84}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 944.622850] nbd: couldn't find device at index 56576 17:51:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r5) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x302, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x2004c020) (async, rerun: 64) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) r8 = socket(0x5, 0x4, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x84, r7, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffc1}]}, 0x84}}, 0x20000000) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x74, r2, 0x1b3e092429f36bf3, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) [ 944.768095] nbd: must specify an index to disconnect [ 944.804610] nbd: couldn't find device at index 56576 17:51:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5}]}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x6, 0xff, 0x40, 0x3ff}, {0x9, 0x7f, 0x0, 0x1ff}, {0xc7dc, 0x1f, 0x3}, {0x1, 0x9, 0xff, 0x6}, {0x3b09, 0xb1, 0x2, 0x1f}, {0x3ff, 0x0, 0x7, 0x80000001}, {0x81, 0x1, 0x7f}]}) connect$bt_sco(r0, &(0x7f0000000040), 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5}]}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r1, 0x0, 0x0) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x6, 0xff, 0x40, 0x3ff}, {0x9, 0x7f, 0x0, 0x1ff}, {0xc7dc, 0x1f, 0x3}, {0x1, 0x9, 0xff, 0x6}, {0x3b09, 0xb1, 0x2, 0x1f}, {0x3ff, 0x0, 0x7, 0x80000001}, {0x81, 0x1, 0x7f}]}) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) 17:51:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xdfc4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '-%-C'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4000014) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000097aea89ce95838cec0504d000001000047d4d3ab86cb25a8a5f059bf4c1be5469c31ea6cf836ce5255491bf5163626d724875266582be0aa9face992fdc7cf2d9335a3fe427d50754fcb"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x7c, r2, 0x1b3e092429f36bf3, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r5, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0xa4, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r7}, {0x5}, {0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4004021) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000020000000800010000dd0000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r3, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r4, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r5, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r6, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r8, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0xa4, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r7}, {0x5}, {0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4004021) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000020000000800010000dd0000"], 0x1c}}, 0x0) (async) 17:51:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x68, r2, 0x1b3e092429f36bf3, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) [ 945.482358] nbd: must specify an index to disconnect 17:51:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'ip6tnl0\x00', 0x200}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '(]{'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4002}, 0x40800) [ 945.504153] nbd: couldn't find device at index 56576 17:51:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x20004081) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x26002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x8800) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x5c, r2, 0x1b3e092429f36bf3, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="13200000", @ANYRES16=r2, @ANYBLOB="01000000000000ffffffffffff000100210000000000"], 0x1c}}, 0x0) 17:51:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'ip6tnl0\x00', 0x200}) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '(]{'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4002}, 0x40800) 17:51:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080)) connect$phonet_pipe(r1, &(0x7f00000000c0)={0x23, 0x7f, 0x91, 0x8}, 0x10) connect$caif(0xffffffffffffffff, &(0x7f0000000100)=@dgm={0x25, 0x8001, 0x3}, 0x18) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:51:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x20004081) (async) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x26002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x8800) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x50, r2, 0x1b3e092429f36bf3, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r1, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (rerun: 32) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'ip6tnl0\x00', 0x200}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '(]{'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4002}, 0x40800) 17:51:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x2c, r2, 0x1b3e092429f36bf3, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x20004081) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x26002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x8800) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x30}}, 0x0) 17:51:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x0, 0x0, 0x2, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = socket(0x2, 0x3, 0x1000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r5, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}]}, 0x40}}, 0x0) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) r7 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x400) accept4$phonet_pipe(r7, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x800) r8 = socket(0xa, 0x1, 0xfffffc00) sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f0000000540)={&(0x7f0000000380), 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x128, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0xa}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x48000}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4800}, 0x20044001) sendmsg$L2TP_CMD_NOOP(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0xa00, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xe0}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x200}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x2002) [ 946.038776] nbd: must specify an index to disconnect 17:51:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x0, 0x0, 0x2, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x20, r2, 0x1b3e092429f36bf3, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080)) connect$phonet_pipe(r1, &(0x7f00000000c0)={0x23, 0x7f, 0x91, 0x8}, 0x10) connect$caif(0xffffffffffffffff, &(0x7f0000000100)=@dgm={0x25, 0x8001, 0x3}, 0x18) connect$bt_sco(r0, &(0x7f0000000040), 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) connect$phonet_pipe(r1, &(0x7f00000000c0)={0x23, 0x7f, 0x91, 0x8}, 0x10) (async) connect$caif(0xffffffffffffffff, &(0x7f0000000100)=@dgm={0x25, 0x8001, 0x3}, 0x18) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) 17:51:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = socket(0x2, 0x3, 0x1000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r5, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}]}, 0x40}}, 0x0) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) r7 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x400) accept4$phonet_pipe(r7, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x800) r8 = socket(0xa, 0x1, 0xfffffc00) sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f0000000540)={&(0x7f0000000380), 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x128, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0xa}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x48000}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4800}, 0x20044001) sendmsg$L2TP_CMD_NOOP(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0xa00, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xe0}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x200}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x2002) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) socket(0x2, 0x3, 0x1000) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r4, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r5, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r6, 0x0, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}]}, 0x40}}, 0x0) (async) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x400) (async) accept4$phonet_pipe(r7, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x800) (async) socket(0xa, 0x1, 0xfffffc00) (async) sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f0000000540)={&(0x7f0000000380), 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x128, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0xa}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x48000}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4800}, 0x20044001) (async) sendmsg$L2TP_CMD_NOOP(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0xa00, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xe0}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x200}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x2002) (async) 17:51:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) 17:51:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x14, r2, 0x1b3e092429f36bf3}, 0x14}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 946.660588] nbd: must specify an index to disconnect 17:51:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x0, 0x0, 0x2, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x0, 0x0, 0x2, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) 17:51:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) r3 = socket(0x2, 0x3, 0x1000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r5, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x40, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}]}, 0x40}}, 0x0) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) r7 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x400) accept4$phonet_pipe(r7, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x800) (async) r8 = socket(0xa, 0x1, 0xfffffc00) sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f0000000540)={&(0x7f0000000380), 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x128, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x14}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0xa}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x48000}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4800}, 0x20044001) sendmsg$L2TP_CMD_NOOP(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0xa00, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xe0}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x200}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x2002) 17:51:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x14, r2, 0x1b3e092429f36bf3}, 0x14}}, 0x4008000) 17:51:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0200b06beea34c4ebd1af73065066cbcdb579ecf0900000080000000f4ffffff"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x14, r2, 0x1b3e092429f36bf3}, 0x14}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080)) connect$phonet_pipe(r1, &(0x7f00000000c0)={0x23, 0x7f, 0x91, 0x8}, 0x10) connect$caif(0xffffffffffffffff, &(0x7f0000000100)=@dgm={0x25, 0x8001, 0x3}, 0x18) connect$bt_sco(r0, &(0x7f0000000040), 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) connect$phonet_pipe(r1, &(0x7f00000000c0)={0x23, 0x7f, 0x91, 0x8}, 0x10) (async) connect$caif(0xffffffffffffffff, &(0x7f0000000100)=@dgm={0x25, 0x8001, 0x3}, 0x18) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) 17:51:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x805) 17:51:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}}, 0x867ccf8c0d3ca455) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1c}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) [ 946.773515] nbd: must specify an index to disconnect 17:51:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x14, r2, 0x1b3e092429f36bf3}, 0x14}}, 0x0) 17:51:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x805) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x805) (async) 17:51:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (rerun: 64) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}}, 0x867ccf8c0d3ca455) (async, rerun: 32) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async, rerun: 32) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1c}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) [ 946.821749] nbd: must specify an index to disconnect 17:51:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0200b06beea34c4ebd1af73065066cbcdb579ecf0900000080000000f4ffffff"], 0x14}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x90) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:51:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x300, 0x70bd29, 0x7, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:51:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x14, r2, 0x1b3e092429f36bf3}, 0x14}}, 0x0) 17:51:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x805) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x805) (async) 17:51:58 executing program 0: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000), 0x24) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001b00)={0xffffffffffffffff, &(0x7f0000001a00)="1afc68a881cd62076c5ca6345487cc7aa11978b99c25f98334aa609b4d23d8adddb83972af2d91810510c1c115d83ab464934db83df245b46af3bc34ee2ae7e473f940aa3fa5c9bd64909d15658fce8a69b63d813313035ae40743cdb0b062edccd485d2a3248e1587bd1a9bff70f4854d8d17839b1b99e4965b9370275639e579559d4a2058a58b6bba88f17a5245a600479bf5a2ab2d3e6a3d16b2a139", &(0x7f0000001ac0)=@udp6=r5, 0x2}, 0x20) r6 = socket(0x25, 0x1, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000000a00)={r7, 0xffff}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x10200, 0x0) write$ppp(r8, &(0x7f0000000700)="627dc7250995826d2814349556c888738fad6c1a8488eb1c45a7f4e7a6ba303d061f47838b588d8a4069c72e419590d0c7b98e44c231972743ced7565c77dce83203331e478c6d90ef541f8d4642533e40a3693220c7511aff659bb11c60766c36c6138c8871aa57954cfbf285ea76349a88820f9a16a5ad8942802d2f5c050dab4964e2635a38eaec3c642c5951d425ffeb418482475623b6883088a2c1931031b9b50570a3b1a0402e5dfbd309535ac7d5f4b64166e28c65fe7bda86a7e64d6c968e92c3cb3720402b56c0984b3803af8e72adcf3d5aa7254e1b335213c001d249bdb13a0e66692341", 0xea) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000002c0)) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) [ 946.930341] nbd: must specify an index to disconnect 17:51:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:51:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0200b06beea34c4ebd1af73065066cbcdb579ecf0900000080000000f4ffffff"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0200b06beea34c4ebd1af73065066cbcdb579ecf0900000080000000f4ffffff"], 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x90) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) 17:51:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x2, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) 17:51:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}}, 0x867ccf8c0d3ca455) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1c}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}}, 0x867ccf8c0d3ca455) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r3, 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1c}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) (async) [ 946.985081] nbd: must specify a size in bytes for the device 17:51:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x300, 0x70bd29, 0x7, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:51:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, r2, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x3c}}, 0x0) [ 947.027774] nbd: must specify an index to disconnect 17:51:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x2, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x2, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) (async) 17:51:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc814}, 0x4000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYRESOCT=r6], 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r7) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3a17944b8ed390b2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xf087}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x107}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xabe}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4c800}, 0x4000) 17:51:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000a800}, 0x20048010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffff7fff}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x4000) 17:51:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) [ 947.075266] nbd: must specify a size in bytes for the device 17:51:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x300, 0x70bd29, 0x7, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 947.164521] nbd: must specify an index to disconnect [ 947.185195] nbd: must specify a size in bytes for the device 17:51:59 executing program 0: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) (async, rerun: 32) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000), 0x24) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001b00)={0xffffffffffffffff, &(0x7f0000001a00)="1afc68a881cd62076c5ca6345487cc7aa11978b99c25f98334aa609b4d23d8adddb83972af2d91810510c1c115d83ab464934db83df245b46af3bc34ee2ae7e473f940aa3fa5c9bd64909d15658fce8a69b63d813313035ae40743cdb0b062edccd485d2a3248e1587bd1a9bff70f4854d8d17839b1b99e4965b9370275639e579559d4a2058a58b6bba88f17a5245a600479bf5a2ab2d3e6a3d16b2a139", &(0x7f0000001ac0)=@udp6=r5, 0x2}, 0x20) r6 = socket(0x25, 0x1, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000000a00)={r7, 0xffff}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x10200, 0x0) write$ppp(r8, &(0x7f0000000700)="627dc7250995826d2814349556c888738fad6c1a8488eb1c45a7f4e7a6ba303d061f47838b588d8a4069c72e419590d0c7b98e44c231972743ced7565c77dce83203331e478c6d90ef541f8d4642533e40a3693220c7511aff659bb11c60766c36c6138c8871aa57954cfbf285ea76349a88820f9a16a5ad8942802d2f5c050dab4964e2635a38eaec3c642c5951d425ffeb418482475623b6883088a2c1931031b9b50570a3b1a0402e5dfbd309535ac7d5f4b64166e28c65fe7bda86a7e64d6c968e92c3cb3720402b56c0984b3803af8e72adcf3d5aa7254e1b335213c001d249bdb13a0e66692341", 0xea) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000002c0)) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:51:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x2, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) 17:51:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc814}, 0x4000) (async) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYRESOCT=r6], 0x14}}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r7) (async) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3a17944b8ed390b2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xf087}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x107}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xabe}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4c800}, 0x4000) 17:51:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000a800}, 0x20048010) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffff7fff}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x4000) 17:51:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000a800}, 0x20048010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffff7fff}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x4000) 17:51:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:51:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc814}, 0x4000) (async, rerun: 32) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYRESOCT=r6], 0x14}}, 0x0) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r7) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3a17944b8ed390b2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xf087}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x107}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xabe}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4c800}, 0x4000) 17:51:59 executing program 5: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000), 0x24) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001b00)={0xffffffffffffffff, &(0x7f0000001a00)="1afc68a881cd62076c5ca6345487cc7aa11978b99c25f98334aa609b4d23d8adddb83972af2d91810510c1c115d83ab464934db83df245b46af3bc34ee2ae7e473f940aa3fa5c9bd64909d15658fce8a69b63d813313035ae40743cdb0b062edccd485d2a3248e1587bd1a9bff70f4854d8d17839b1b99e4965b9370275639e579559d4a2058a58b6bba88f17a5245a600479bf5a2ab2d3e6a3d16b2a139", &(0x7f0000001ac0)=@udp6=r5, 0x2}, 0x20) r6 = socket(0x25, 0x1, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000000a00)={r7, 0xffff}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x10200, 0x0) write$ppp(r8, &(0x7f0000000700)="627dc7250995826d2814349556c888738fad6c1a8488eb1c45a7f4e7a6ba303d061f47838b588d8a4069c72e419590d0c7b98e44c231972743ced7565c77dce83203331e478c6d90ef541f8d4642533e40a3693220c7511aff659bb11c60766c36c6138c8871aa57954cfbf285ea76349a88820f9a16a5ad8942802d2f5c050dab4964e2635a38eaec3c642c5951d425ffeb418482475623b6883088a2c1931031b9b50570a3b1a0402e5dfbd309535ac7d5f4b64166e28c65fe7bda86a7e64d6c968e92c3cb3720402b56c0984b3803af8e72adcf3d5aa7254e1b335213c001d249bdb13a0e66692341", 0xea) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000002c0)) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:51:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000a800}, 0x20048010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffff7fff}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x4000) 17:51:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x1}, 0x14}}, 0x0) r5 = socket(0x2c, 0x2, 0x7c000000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = socket(0x23, 0x2, 0x308) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e20, 0x10000, @mcast2, 0x1}}, 0x0, 0x0, 0x1a, 0x0, "6889d2772559c7e0b8d26066a8f818c5671b313ca8699e66b31d99adb625b1c776a4fda2c347003bdd52ac65fc0ada350f782d7f78c29dbe994faaa2696c37b0e78a88695a91fa8c1929ee5586c65f3a"}, 0xd8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, r4, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r10}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x810) 17:51:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 947.856338] nbd: must specify an index to disconnect [ 947.869269] nbd: must specify a size in bytes for the device [ 947.889858] nbd: must specify an index to disconnect 17:51:59 executing program 5: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000), 0x24) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001b00)={0xffffffffffffffff, &(0x7f0000001a00)="1afc68a881cd62076c5ca6345487cc7aa11978b99c25f98334aa609b4d23d8adddb83972af2d91810510c1c115d83ab464934db83df245b46af3bc34ee2ae7e473f940aa3fa5c9bd64909d15658fce8a69b63d813313035ae40743cdb0b062edccd485d2a3248e1587bd1a9bff70f4854d8d17839b1b99e4965b9370275639e579559d4a2058a58b6bba88f17a5245a600479bf5a2ab2d3e6a3d16b2a139", &(0x7f0000001ac0)=@udp6=r5, 0x2}, 0x20) r6 = socket(0x25, 0x1, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000000a00)={r7, 0xffff}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x10200, 0x0) write$ppp(r8, &(0x7f0000000700)="627dc7250995826d2814349556c888738fad6c1a8488eb1c45a7f4e7a6ba303d061f47838b588d8a4069c72e419590d0c7b98e44c231972743ced7565c77dce83203331e478c6d90ef541f8d4642533e40a3693220c7511aff659bb11c60766c36c6138c8871aa57954cfbf285ea76349a88820f9a16a5ad8942802d2f5c050dab4964e2635a38eaec3c642c5951d425ffeb418482475623b6883088a2c1931031b9b50570a3b1a0402e5dfbd309535ac7d5f4b64166e28c65fe7bda86a7e64d6c968e92c3cb3720402b56c0984b3803af8e72adcf3d5aa7254e1b335213c001d249bdb13a0e66692341", 0xea) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000002c0)) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) [ 947.963985] nbd: must specify an index to disconnect [ 947.984284] nbd: must specify an index to disconnect [ 948.007692] nbd: must specify a size in bytes for the device 17:52:00 executing program 0: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) (async) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000), 0x24) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001b00)={0xffffffffffffffff, &(0x7f0000001a00)="1afc68a881cd62076c5ca6345487cc7aa11978b99c25f98334aa609b4d23d8adddb83972af2d91810510c1c115d83ab464934db83df245b46af3bc34ee2ae7e473f940aa3fa5c9bd64909d15658fce8a69b63d813313035ae40743cdb0b062edccd485d2a3248e1587bd1a9bff70f4854d8d17839b1b99e4965b9370275639e579559d4a2058a58b6bba88f17a5245a600479bf5a2ab2d3e6a3d16b2a139", &(0x7f0000001ac0)=@udp6=r5, 0x2}, 0x20) r6 = socket(0x25, 0x1, 0x5) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000000a00)={r7, 0xffff}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x10200, 0x0) write$ppp(r8, &(0x7f0000000700)="627dc7250995826d2814349556c888738fad6c1a8488eb1c45a7f4e7a6ba303d061f47838b588d8a4069c72e419590d0c7b98e44c231972743ced7565c77dce83203331e478c6d90ef541f8d4642533e40a3693220c7511aff659bb11c60766c36c6138c8871aa57954cfbf285ea76349a88820f9a16a5ad8942802d2f5c050dab4964e2635a38eaec3c642c5951d425ffeb418482475623b6883088a2c1931031b9b50570a3b1a0402e5dfbd309535ac7d5f4b64166e28c65fe7bda86a7e64d6c968e92c3cb3720402b56c0984b3803af8e72adcf3d5aa7254e1b335213c001d249bdb13a0e66692341", 0xea) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000002c0)) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) r5 = socket(0x2c, 0x2, 0x7c000000) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = socket(0x23, 0x2, 0x308) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e20, 0x10000, @mcast2, 0x1}}, 0x0, 0x0, 0x1a, 0x0, "6889d2772559c7e0b8d26066a8f818c5671b313ca8699e66b31d99adb625b1c776a4fda2c347003bdd52ac65fc0ada350f782d7f78c29dbe994faaa2696c37b0e78a88695a91fa8c1929ee5586c65f3a"}, 0xd8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, r4, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r10}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x810) 17:52:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x1, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x74, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffe00}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe1}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4088001) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:52:00 executing program 5: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000), 0x24) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001b00)={0xffffffffffffffff, &(0x7f0000001a00)="1afc68a881cd62076c5ca6345487cc7aa11978b99c25f98334aa609b4d23d8adddb83972af2d91810510c1c115d83ab464934db83df245b46af3bc34ee2ae7e473f940aa3fa5c9bd64909d15658fce8a69b63d813313035ae40743cdb0b062edccd485d2a3248e1587bd1a9bff70f4854d8d17839b1b99e4965b9370275639e579559d4a2058a58b6bba88f17a5245a600479bf5a2ab2d3e6a3d16b2a139", &(0x7f0000001ac0)=@udp6=r5, 0x2}, 0x20) r6 = socket(0x25, 0x1, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000000a00)={r7, 0xffff}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x10200, 0x0) write$ppp(r8, &(0x7f0000000700)="627dc7250995826d2814349556c888738fad6c1a8488eb1c45a7f4e7a6ba303d061f47838b588d8a4069c72e419590d0c7b98e44c231972743ced7565c77dce83203331e478c6d90ef541f8d4642533e40a3693220c7511aff659bb11c60766c36c6138c8871aa57954cfbf285ea76349a88820f9a16a5ad8942802d2f5c050dab4964e2635a38eaec3c642c5951d425ffeb418482475623b6883088a2c1931031b9b50570a3b1a0402e5dfbd309535ac7d5f4b64166e28c65fe7bda86a7e64d6c968e92c3cb3720402b56c0984b3803af8e72adcf3d5aa7254e1b335213c001d249bdb13a0e66692341", 0xea) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000002c0)) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f7cb37a6000000000000020000000800010000000000"], 0x1c}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r8}, {0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x54}}, 0x4) r9 = socket(0x27, 0x1, 0x401) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r2, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x48d4) 17:52:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) r5 = socket(0x2c, 0x2, 0x7c000000) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r9 = socket(0x23, 0x2, 0x308) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e20, 0x10000, @mcast2, 0x1}}, 0x0, 0x0, 0x1a, 0x0, "6889d2772559c7e0b8d26066a8f818c5671b313ca8699e66b31d99adb625b1c776a4fda2c347003bdd52ac65fc0ada350f782d7f78c29dbe994faaa2696c37b0e78a88695a91fa8c1929ee5586c65f3a"}, 0xd8) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, r4, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r10}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x810) 17:52:00 executing program 5: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000), 0x24) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001b00)={0xffffffffffffffff, &(0x7f0000001a00)="1afc68a881cd62076c5ca6345487cc7aa11978b99c25f98334aa609b4d23d8adddb83972af2d91810510c1c115d83ab464934db83df245b46af3bc34ee2ae7e473f940aa3fa5c9bd64909d15658fce8a69b63d813313035ae40743cdb0b062edccd485d2a3248e1587bd1a9bff70f4854d8d17839b1b99e4965b9370275639e579559d4a2058a58b6bba88f17a5245a600479bf5a2ab2d3e6a3d16b2a139", &(0x7f0000001ac0)=@udp6=r4, 0x2}, 0x20) r5 = socket(0x25, 0x1, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000000a00)={r6, 0xffff}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x10200, 0x0) write$ppp(r7, &(0x7f0000000700)="627dc7250995826d2814349556c888738fad6c1a8488eb1c45a7f4e7a6ba303d061f47838b588d8a4069c72e419590d0c7b98e44c231972743ced7565c77dce83203331e478c6d90ef541f8d4642533e40a3693220c7511aff659bb11c60766c36c6138c8871aa57954cfbf285ea76349a88820f9a16a5ad8942802d2f5c050dab4964e2635a38eaec3c642c5951d425ffeb418482475623b6883088a2c1931031b9b50570a3b1a0402e5dfbd309535ac7d5f4b64166e28c65fe7bda86a7e64d6c968e92c3cb3720402b56c0984b3803af8e72adcf3d5aa7254e1b335213c001d249bdb13a0e66692341", 0xea) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) [ 948.745230] nbd: must specify an index to disconnect 17:52:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x1, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x74, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffe00}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe1}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4088001) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) clock_gettime(0x1, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (async) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x74, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffe00}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe1}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4088001) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) 17:52:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f7cb37a6000000000000020000000800010000000000"], 0x1c}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r8}, {0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x54}}, 0x4) r9 = socket(0x27, 0x1, 0x401) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r2, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x48d4) 17:52:00 executing program 5: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000), 0x24) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001b00)={0xffffffffffffffff, &(0x7f0000001a00)="1afc68a881cd62076c5ca6345487cc7aa11978b99c25f98334aa609b4d23d8adddb83972af2d91810510c1c115d83ab464934db83df245b46af3bc34ee2ae7e473f940aa3fa5c9bd64909d15658fce8a69b63d813313035ae40743cdb0b062edccd485d2a3248e1587bd1a9bff70f4854d8d17839b1b99e4965b9370275639e579559d4a2058a58b6bba88f17a5245a600479bf5a2ab2d3e6a3d16b2a139", &(0x7f0000001ac0)=@udp6=r4, 0x2}, 0x20) r5 = socket(0x25, 0x1, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000000a00)={r6, 0xffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x10200, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) [ 948.788174] nbd: must specify a size in bytes for the device [ 948.858019] nbd: must specify an index to disconnect [ 948.875263] nbd: must specify a size in bytes for the device 17:52:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f7cb37a6000000000000020000000800010000000000"], 0x1c}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r8}, {0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x54}}, 0x4) r9 = socket(0x27, 0x1, 0x401) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r2, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x48d4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f7cb37a6000000000000020000000800010000000000"], 0x1c}}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r3, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) (async) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r8}, {0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x54}}, 0x4) (async) socket(0x27, 0x1, 0x401) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r2, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x48d4) (async) 17:52:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:01 executing program 5: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000), 0x24) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001b00)={0xffffffffffffffff, &(0x7f0000001a00)="1afc68a881cd62076c5ca6345487cc7aa11978b99c25f98334aa609b4d23d8adddb83972af2d91810510c1c115d83ab464934db83df245b46af3bc34ee2ae7e473f940aa3fa5c9bd64909d15658fce8a69b63d813313035ae40743cdb0b062edccd485d2a3248e1587bd1a9bff70f4854d8d17839b1b99e4965b9370275639e579559d4a2058a58b6bba88f17a5245a600479bf5a2ab2d3e6a3d16b2a139", &(0x7f0000001ac0)=@udp6=r4, 0x2}, 0x20) r5 = socket(0x25, 0x1, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000000a00)={r6, 0xffff}) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) clock_gettime(0x1, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) (rerun: 32) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x74, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffe00}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe1}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4088001) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:52:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:52:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000240)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "ec11d057fea7a2"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001240)={{0x0, 0x3, 0x7f, 0x3, 0x8001, 0x7, 0x9, 0x800, 0x4e580668, 0x5, 0x40, 0x9, 0x4, 0x1000, 0x4}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000017c0)={r4, r5, "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", "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"}) bind$bt_sco(r2, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000140)=""/202, &(0x7f0000000100)=0xfe9b) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r6}, 0x10) bind$bt_sco(r1, 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) bind$bt_sco(r0, &(0x7f0000000080), 0x8) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) sendmsg$can_bcm(r7, &(0x7f0000001400)={&(0x7f0000001300), 0x10, &(0x7f00000013c0)={&(0x7f0000001340)={0x0, 0x2, 0x2, {0x77359400}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1, 0x1}, 0x22, 0x1, 0x0, 0x0, "b114764ec2881159af463e33c0bcd6e4ef2d60eea9495a30d2b067fdf335f1248dc7669c92b43e9aaca1498031cdf116b7be18e8ffc878a54afe79464f4710f2"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 17:52:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 949.631846] nbd: must specify a size in bytes for the device 17:52:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:52:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x1, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:52:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000038eb2b00000000000200000008000100000000000a2924f303c89128b879a16ae6303695814f656022936e5fa9c1c89cbe6dfc8b1efc15cb759ad0c9ec2763822cbce56482712a7c0c4ac84bd4f5ddcc1d5d004750c87d26d88b544ff10b04344a3313f6ff5d1c78529cd700f4adf055b656d6bec6655ae3bd89f8f0"], 0x1c}}, 0x0) [ 949.718568] nbd: must specify a size in bytes for the device 17:52:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (rerun: 64) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x1, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 949.812028] nbd: must specify a size in bytes for the device [ 949.827129] nbd: must specify a size in bytes for the device 17:52:02 executing program 5: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000), 0x24) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001b00)={0xffffffffffffffff, &(0x7f0000001a00)="1afc68a881cd62076c5ca6345487cc7aa11978b99c25f98334aa609b4d23d8adddb83972af2d91810510c1c115d83ab464934db83df245b46af3bc34ee2ae7e473f940aa3fa5c9bd64909d15658fce8a69b63d813313035ae40743cdb0b062edccd485d2a3248e1587bd1a9bff70f4854d8d17839b1b99e4965b9370275639e579559d4a2058a58b6bba88f17a5245a600479bf5a2ab2d3e6a3d16b2a139", &(0x7f0000001ac0)=@udp6=r4, 0x2}, 0x20) socket(0x25, 0x1, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000800)) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000038eb2b00000000000200000008000100000000000a2924f303c89128b879a16ae6303695814f656022936e5fa9c1c89cbe6dfc8b1efc15cb759ad0c9ec2763822cbce56482712a7c0c4ac84bd4f5ddcc1d5d004750c87d26d88b544ff10b04344a3313f6ff5d1c78529cd700f4adf055b656d6bec6655ae3bd89f8f0"], 0x1c}}, 0x0) 17:52:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000240)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "ec11d057fea7a2"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001240)={{0x0, 0x3, 0x7f, 0x3, 0x8001, 0x7, 0x9, 0x800, 0x4e580668, 0x5, 0x40, 0x9, 0x4, 0x1000, 0x4}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000017c0)={r4, r5, "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", "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"}) bind$bt_sco(r2, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000140)=""/202, &(0x7f0000000100)=0xfe9b) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r6}, 0x10) bind$bt_sco(r1, 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) bind$bt_sco(r0, &(0x7f0000000080), 0x8) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) sendmsg$can_bcm(r7, &(0x7f0000001400)={&(0x7f0000001300), 0x10, &(0x7f00000013c0)={&(0x7f0000001340)={0x0, 0x2, 0x2, {0x77359400}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1, 0x1}, 0x22, 0x1, 0x0, 0x0, "b114764ec2881159af463e33c0bcd6e4ef2d60eea9495a30d2b067fdf335f1248dc7669c92b43e9aaca1498031cdf116b7be18e8ffc878a54afe79464f4710f2"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r3, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000240)={0x7, [], 0x1, "ec11d057fea7a2"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001240)={{0x0, 0x3, 0x7f, 0x3, 0x8001, 0x7, 0x9, 0x800, 0x4e580668, 0x5, 0x40, 0x9, 0x4, 0x1000, 0x4}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000017c0)={r4, r5, "7af72421cd1bf218ba49d4fd163334a01e8ed687cb9a4bccd57464bdf67832d14de4d4691c4ff3e4cfab28588110fc8d67796254334dd35110593ebfac7dd6b0ac50349e2533666e2e613490f8f47c9f73231072baea777b5aa8f54dd41323636fecb33bce6974707921ad29bf6a6ed20dc3d1b2063dcf759cdf0421a8acbc75bb5ba62374173d21b019f8f8860214e6b6f08504aee1797f4f83702d33570049e87fa316cebfe6119b339fa3e918407453782228b975a9e2e829b4638566bd91f42748026b555f189d38b32b10160bd1de33be9abb769bb491fb78ed3f8021d3faaba672ba4e6c449aa2da6b3432f5434c4834f4614e83bc6687eca106bdbf2a", "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"}) (async) bind$bt_sco(r2, 0x0, 0x0) (async) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000140)=""/202, &(0x7f0000000100)=0xfe9b) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r6, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r6}, 0x10) (async) bind$bt_sco(r1, 0x0, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) bind$bt_sco(r0, &(0x7f0000000080), 0x8) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r7, 0x0, 0x0) (async) sendmsg$can_bcm(r7, &(0x7f0000001400)={&(0x7f0000001300), 0x10, &(0x7f00000013c0)={&(0x7f0000001340)={0x0, 0x2, 0x2, {0x77359400}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1, 0x1}, 0x22, 0x1, 0x0, 0x0, "b114764ec2881159af463e33c0bcd6e4ef2d60eea9495a30d2b067fdf335f1248dc7669c92b43e9aaca1498031cdf116b7be18e8ffc878a54afe79464f4710f2"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) 17:52:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x1, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x1, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) 17:52:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000038eb2b00000000000200000008000100000000000a2924f303c89128b879a16ae6303695814f656022936e5fa9c1c89cbe6dfc8b1efc15cb759ad0c9ec2763822cbce56482712a7c0c4ac84bd4f5ddcc1d5d004750c87d26d88b544ff10b04344a3313f6ff5d1c78529cd700f4adf055b656d6bec6655ae3bd89f8f0"], 0x1c}}, 0x0) 17:52:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000000000000a6b60bfe6f3c000011020000000800010000000000"], 0x1c}}, 0x0) 17:52:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="01005500000106ffffff0200000008000100003b7e04"], 0x1c}}, 0x24004000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x57}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) 17:52:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000000000000a6b60bfe6f3c000011020000000800010000000000"], 0x1c}}, 0x0) [ 950.641990] nbd: must specify a size in bytes for the device [ 950.667559] nbd: must specify at least one socket 17:52:03 executing program 5: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000), 0x24) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001b00)={0xffffffffffffffff, &(0x7f0000001a00)="1afc68a881cd62076c5ca6345487cc7aa11978b99c25f98334aa609b4d23d8adddb83972af2d91810510c1c115d83ab464934db83df245b46af3bc34ee2ae7e473f940aa3fa5c9bd64909d15658fce8a69b63d813313035ae40743cdb0b062edccd485d2a3248e1587bd1a9bff70f4854d8d17839b1b99e4965b9370275639e579559d4a2058a58b6bba88f17a5245a600479bf5a2ab2d3e6a3d16b2a139", &(0x7f0000001ac0)=@udp6=r4, 0x2}, 0x20) socket(0x25, 0x1, 0x5) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="01005500000106ffffff0200000008000100003b7e04"], 0x1c}}, 0x24004000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x57}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) 17:52:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000240)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "ec11d057fea7a2"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001240)={{0x0, 0x3, 0x7f, 0x3, 0x8001, 0x7, 0x9, 0x800, 0x4e580668, 0x5, 0x40, 0x9, 0x4, 0x1000, 0x4}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000017c0)={r4, r5, "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", "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"}) (async) bind$bt_sco(r2, 0x0, 0x0) (async) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000140)=""/202, &(0x7f0000000100)=0xfe9b) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r6}, 0x10) (async) bind$bt_sco(r1, 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) bind$bt_sco(r0, &(0x7f0000000080), 0x8) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) (async) sendmsg$can_bcm(r7, &(0x7f0000001400)={&(0x7f0000001300), 0x10, &(0x7f00000013c0)={&(0x7f0000001340)={0x0, 0x2, 0x2, {0x77359400}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1, 0x1}, 0x22, 0x1, 0x0, 0x0, "b114764ec2881159af463e33c0bcd6e4ef2d60eea9495a30d2b067fdf335f1248dc7669c92b43e9aaca1498031cdf116b7be18e8ffc878a54afe79464f4710f2"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 17:52:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000000000000a6b60bfe6f3c000011020000000800010000000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000000000000a6b60bfe6f3c000011020000000800010000000000"], 0x1c}}, 0x0) (async) 17:52:03 executing program 5: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000), 0x24) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001b00)={0xffffffffffffffff, &(0x7f0000001a00)="1afc68a881cd62076c5ca6345487cc7aa11978b99c25f98334aa609b4d23d8adddb83972af2d91810510c1c115d83ab464934db83df245b46af3bc34ee2ae7e473f940aa3fa5c9bd64909d15658fce8a69b63d813313035ae40743cdb0b062edccd485d2a3248e1587bd1a9bff70f4854d8d17839b1b99e4965b9370275639e579559d4a2058a58b6bba88f17a5245a600479bf5a2ab2d3e6a3d16b2a139", &(0x7f0000001ac0)=@udp6=r4, 0x2}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="01005500000106ffffff0200000008000100003b7e04"], 0x1c}}, 0x24004000) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x57}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) 17:52:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 951.440479] nbd: must specify a size in bytes for the device [ 951.449438] nbd: must specify at least one socket [ 951.465362] nbd: must specify a size in bytes for the device 17:52:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x48, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4811}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) 17:52:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 951.505878] nbd: must specify at least one socket 17:52:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x48, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4811}, 0x4000000) (async, rerun: 64) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) 17:52:03 executing program 5: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000), 0x24) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x48, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4811}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) [ 951.569367] nbd: must specify a size in bytes for the device [ 951.586812] nbd: must specify a size in bytes for the device [ 951.597721] nbd: must specify a size in bytes for the device 17:52:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r1, &(0x7f0000000040), 0x8) 17:52:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x48, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4811}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) 17:52:03 executing program 5: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000), 0x24) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:52:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:04 executing program 5: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000), 0x24) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 952.326372] nbd: must specify a size in bytes for the device [ 952.360459] nbd: must specify a size in bytes for the device [ 952.366785] nbd: must specify a size in bytes for the device 17:52:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) (async) 17:52:04 executing program 5: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) [ 952.478963] nbd: must specify a size in bytes for the device [ 952.494375] nbd: must specify a size in bytes for the device [ 952.512499] nbd: must specify a size in bytes for the device 17:52:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r1, &(0x7f0000000040), 0x8) 17:52:04 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:52:04 executing program 5: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:04 executing program 5: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 953.253762] nbd: must specify a size in bytes for the device 17:52:04 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 953.369209] nbd: must specify a size in bytes for the device 17:52:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r1, &(0x7f0000000040), 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000040), 0x8) (async) 17:52:05 executing program 5: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:05 executing program 2: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:05 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:05 executing program 5: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x8, 0x70bd29, 0x25dfdbf9, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 954.224097] nbd: must specify a size in bytes for the device [ 954.294003] nbd: must specify a size in bytes for the device [ 954.315391] nbd: must specify a size in bytes for the device [ 954.356148] nbd: must specify a size in bytes for the device 17:52:06 executing program 5: socket(0x1e, 0x2, 0x1a2a3c47) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:52:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) socket$caif_stream(0x25, 0x1, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NHA_MASTER={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x49080) bind$bt_sco(r1, 0x0, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@bridge_getneigh={0x348, 0x1e, 0x1, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x4518, 0x23102}, [@IFLA_BROADCAST={0xa}, @IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x47f8a}, @IFLA_VFINFO_LIST={0x2d0, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x800, 0x10000}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0xf9e}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7f, 0x1}}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80, 0xfff, 0xfff}}, @IFLA_VF_MAC={0x28, 0x1, {0x800}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0xfffff800}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5d84, 0x5944}}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0xfff}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x0, 0x1f}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x6, 0x16}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x101}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x400, 0xfffffffffffffff7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x45, 0x40}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x7fffffffffffffff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x40}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3f, 0x9ca, 0x8001, 0x8100}}, {0x14, 0x1, {0x2, 0x9d4, 0xffff0001, 0x8100}}, {0x14, 0x1, {0x20, 0xe7, 0x8, 0x8100}}, {0x14, 0x1, {0x8, 0xd70, 0x9, 0x88a8}}, {0x14, 0x1, {0x8001, 0x82, 0xff, 0x8100}}, {0x14, 0x1, {0x7f, 0x9a2, 0x40, 0x8100}}]}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xc24, 0x12}}, @IFLA_VF_TRUST={0xc, 0x9, {0x74, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0xfff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80, 0x5}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7ff, 0x3ff}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @random="f46f5925f1b5"}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x11, @local}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffd, 0x6}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6, 0x2, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x8}}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3f, 0x66c9}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x5d6, 0x8, 0x88a8}}, {0x14, 0x1, {0x6, 0x1d1, 0x8, 0x88a8}}, {0x14, 0x1, {0x3, 0x99, 0x3, 0x8100}}]}]}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x24048815}, 0x40040) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:06 executing program 5: socket(0x1e, 0x2, 0x1a2a3c47) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:06 executing program 2: socket(0x1e, 0x2, 0x1a2a3c47) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:06 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 955.119964] nbd: must specify a size in bytes for the device [ 955.146985] nbd: must specify a size in bytes for the device [ 955.164288] nbd: must specify a size in bytes for the device 17:52:06 executing program 5: socket(0x1e, 0x2, 0x1a2a3c47) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:06 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:06 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:06 executing program 4: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 955.266571] nbd: must specify a size in bytes for the device [ 955.276384] nbd: must specify a size in bytes for the device 17:52:07 executing program 5: socket(0x1e, 0x2, 0x1a2a3c47) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) [ 955.358852] nbd: must specify a size in bytes for the device 17:52:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) socket$caif_stream(0x25, 0x1, 0x4) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r2, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NHA_MASTER={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x49080) (async) bind$bt_sco(r1, 0x0, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@bridge_getneigh={0x348, 0x1e, 0x1, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x4518, 0x23102}, [@IFLA_BROADCAST={0xa}, @IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x47f8a}, @IFLA_VFINFO_LIST={0x2d0, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x800, 0x10000}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0xf9e}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7f, 0x1}}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80, 0xfff, 0xfff}}, @IFLA_VF_MAC={0x28, 0x1, {0x800}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0xfffff800}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5d84, 0x5944}}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0xfff}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x0, 0x1f}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x6, 0x16}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x101}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x400, 0xfffffffffffffff7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x45, 0x40}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x7fffffffffffffff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x40}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3f, 0x9ca, 0x8001, 0x8100}}, {0x14, 0x1, {0x2, 0x9d4, 0xffff0001, 0x8100}}, {0x14, 0x1, {0x20, 0xe7, 0x8, 0x8100}}, {0x14, 0x1, {0x8, 0xd70, 0x9, 0x88a8}}, {0x14, 0x1, {0x8001, 0x82, 0xff, 0x8100}}, {0x14, 0x1, {0x7f, 0x9a2, 0x40, 0x8100}}]}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xc24, 0x12}}, @IFLA_VF_TRUST={0xc, 0x9, {0x74, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0xfff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80, 0x5}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7ff, 0x3ff}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @random="f46f5925f1b5"}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x11, @local}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffd, 0x6}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6, 0x2, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x8}}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3f, 0x66c9}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x5d6, 0x8, 0x88a8}}, {0x14, 0x1, {0x6, 0x1d1, 0x8, 0x88a8}}, {0x14, 0x1, {0x3, 0x99, 0x3, 0x8100}}]}]}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x24048815}, 0x40040) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:07 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:07 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:52:07 executing program 4: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:07 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:07 executing program 4: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:07 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:07 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:07 executing program 2: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) socket$caif_stream(0x25, 0x1, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NHA_MASTER={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x49080) bind$bt_sco(r1, 0x0, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@bridge_getneigh={0x348, 0x1e, 0x1, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x4518, 0x23102}, [@IFLA_BROADCAST={0xa}, @IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x47f8a}, @IFLA_VFINFO_LIST={0x2d0, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x800, 0x10000}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0xf9e}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7f, 0x1}}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80, 0xfff, 0xfff}}, @IFLA_VF_MAC={0x28, 0x1, {0x800}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0xfffff800}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5d84, 0x5944}}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0xfff}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x0, 0x1f}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x6, 0x16}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x101}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x400, 0xfffffffffffffff7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x45, 0x40}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x7fffffffffffffff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x40}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3f, 0x9ca, 0x8001, 0x8100}}, {0x14, 0x1, {0x2, 0x9d4, 0xffff0001, 0x8100}}, {0x14, 0x1, {0x20, 0xe7, 0x8, 0x8100}}, {0x14, 0x1, {0x8, 0xd70, 0x9, 0x88a8}}, {0x14, 0x1, {0x8001, 0x82, 0xff, 0x8100}}, {0x14, 0x1, {0x7f, 0x9a2, 0x40, 0x8100}}]}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xc24, 0x12}}, @IFLA_VF_TRUST={0xc, 0x9, {0x74, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0xfff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80, 0x5}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7ff, 0x3ff}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @random="f46f5925f1b5"}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x11, @local}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffd, 0x6}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6, 0x2, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x8}}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3f, 0x66c9}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x5d6, 0x8, 0x88a8}}, {0x14, 0x1, {0x6, 0x1d1, 0x8, 0x88a8}}, {0x14, 0x1, {0x3, 0x99, 0x3, 0x8100}}]}]}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x24048815}, 0x40040) connect$bt_sco(r0, &(0x7f0000000040), 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) socket$caif_stream(0x25, 0x1, 0x4) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r2, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NHA_MASTER={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x49080) (async) bind$bt_sco(r1, 0x0, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r4, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@bridge_getneigh={0x348, 0x1e, 0x1, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x4518, 0x23102}, [@IFLA_BROADCAST={0xa}, @IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x47f8a}, @IFLA_VFINFO_LIST={0x2d0, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x800, 0x10000}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0xf9e}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7f, 0x1}}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80, 0xfff, 0xfff}}, @IFLA_VF_MAC={0x28, 0x1, {0x800}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0xfffff800}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5d84, 0x5944}}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0xfff}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x0, 0x1f}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x6, 0x16}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x101}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x400, 0xfffffffffffffff7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x45, 0x40}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x7fffffffffffffff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x40}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3f, 0x9ca, 0x8001, 0x8100}}, {0x14, 0x1, {0x2, 0x9d4, 0xffff0001, 0x8100}}, {0x14, 0x1, {0x20, 0xe7, 0x8, 0x8100}}, {0x14, 0x1, {0x8, 0xd70, 0x9, 0x88a8}}, {0x14, 0x1, {0x8001, 0x82, 0xff, 0x8100}}, {0x14, 0x1, {0x7f, 0x9a2, 0x40, 0x8100}}]}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xc24, 0x12}}, @IFLA_VF_TRUST={0xc, 0x9, {0x74, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0xfff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80, 0x5}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7ff, 0x3ff}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @random="f46f5925f1b5"}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x11, @local}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffd, 0x6}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6, 0x2, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x8}}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3f, 0x66c9}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x5d6, 0x8, 0x88a8}}, {0x14, 0x1, {0x6, 0x1d1, 0x8, 0x88a8}}, {0x14, 0x1, {0x3, 0x99, 0x3, 0x8100}}]}]}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x24048815}, 0x40040) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) 17:52:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 956.149443] nbd: must specify a size in bytes for the device 17:52:07 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="01005500000106ffffff0200000008000100003b7e04"], 0x1c}}, 0x24004000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x57}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) 17:52:07 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="79f42b7126dac1e971293a35f55a5b6c3a74fb60b132de2ac2514103e7ccdc0b05546542a0b52d02546967e8a22d83dd9172bd5968fd7165bfaa59426d39f4705d088e65ba73d02a15702531fb6c1ec0bd0520976bb2dda8c1b015ce0ec046a6e5f559030d194bc1bb6279be1a632d9bb880d3b37ba11a49c0e0bbaad594e317550cff507f029186ca2a329309131e0aa3815b24dc2f7b26414c28f5fb5ed5cecbe9a10cf44b34e642b4072cd524920975bf2f41eb840d6e3998257a615446788a839886c15a2726980195a770efb6ac6b4fac456405cdf2b5f47789e60e36102bee4f5b1c15f2695d47faa8526d4515dbdf6424199184c641ac9a9354b292e740c3216eb276b7de291a3da3a30b2c4e2620d13469a3965a7ab67ad52f01f8c67f75057cc48bd683a75d654395db407c602a1d665b217d6fb5c3d997f88a2a393931092c807236bba8b1a5c754abcab714298ffc0c47c40fd9ae3cbbf58fd0c7ad6268c1f9f4187b6c5704fdbef6944b2b0061aaa21a2d6d7286397dfb155c8a3839395fa867f7eb0d719979", @ANYRES16=r2, @ANYBLOB="01005500000106ffffff0200000008000100003b7e04"], 0x1c}}, 0x24004000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x57}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) [ 956.314996] nbd: must specify a size in bytes for the device [ 956.337404] nbd: must specify a size in bytes for the device [ 956.352031] nbd: must specify at least one socket 17:52:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{0x0, 0xb4, 0x4602, 0xff, 0xfffffffffffffffd, 0x8000, 0x9, 0x2, 0x3, 0x8, 0x81, 0x21ab, 0x0, 0x8001, 0x7ea}}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001080)={0x3, [{r1}, {r1}, {r1}, {}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {0x0}, {r1}, {r1}, {r1}, {r1}, {}, {}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}], 0x2, "b4b23ef3f65540"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000002080)={{r3, 0x7, 0x400, 0x70, 0x8001, 0x0, 0x557e, 0x9, 0x10001, 0xffff, 0x0, 0x8, 0x4, 0x8, 0xffffffff}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000021c0)={'gretap0\x00', &(0x7f0000002140)={'gretap0\x00', 0x0, 0x10, 0x8, 0x7, 0x2, {{0xb, 0x4, 0x3, 0x5, 0x2c, 0x67, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x82, 0x2}, @ssrr={0x89, 0x7, 0xe, [@empty]}, @rr={0x7, 0xf, 0xea, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000002200)=@base={0x15, 0x3ff, 0x1465, 0x3f, 0x410, 0xffffffffffffffff, 0x7002, '\x00', r4, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 17:52:08 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, 0x0, 0x44850) 17:52:08 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 956.458946] nbd: must specify a size in bytes for the device [ 956.481706] nbd: must specify a size in bytes for the device 17:52:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="01005500000106ffffff0200000008000100003b7e04"], 0x1c}}, 0x24004000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x57}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) 17:52:08 executing program 1: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 956.514946] nbd: must specify at least one socket 17:52:08 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:08 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, 0x0, 0x44850) 17:52:08 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 956.550928] nbd: must specify a size in bytes for the device 17:52:08 executing program 1: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="01005500000106ffffff0200000008000100003b7e04"], 0x1c}}, 0x24004000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00'}) [ 956.613794] nbd: must specify at least one socket 17:52:08 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 956.728288] nbd: must specify at least one socket 17:52:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{0x0, 0xb4, 0x4602, 0xff, 0xfffffffffffffffd, 0x8000, 0x9, 0x2, 0x3, 0x8, 0x81, 0x21ab, 0x0, 0x8001, 0x7ea}}) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001080)={0x3, [{r1}, {r1}, {r1}, {}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {0x0}, {r1}, {r1}, {r1}, {r1}, {}, {}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}], 0x2, "b4b23ef3f65540"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000002080)={{r3, 0x7, 0x400, 0x70, 0x8001, 0x0, 0x557e, 0x9, 0x10001, 0xffff, 0x0, 0x8, 0x4, 0x8, 0xffffffff}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000021c0)={'gretap0\x00', &(0x7f0000002140)={'gretap0\x00', 0x0, 0x10, 0x8, 0x7, 0x2, {{0xb, 0x4, 0x3, 0x5, 0x2c, 0x67, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x82, 0x2}, @ssrr={0x89, 0x7, 0xe, [@empty]}, @rr={0x7, 0xf, 0xea, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000002200)=@base={0x15, 0x3ff, 0x1465, 0x3f, 0x410, 0xffffffffffffffff, 0x7002, '\x00', r4, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 17:52:09 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, 0x0, 0x44850) 17:52:09 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:09 executing program 1: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="01005500000106ffffff0200000008000100003b7e04"], 0x1c}}, 0x24004000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:09 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:09 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="01005500000106ffffff0200000008000100003b7e04"], 0x1c}}, 0x24004000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) [ 957.447021] nbd: must specify at least one socket 17:52:09 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{0x0, 0xb4, 0x4602, 0xff, 0xfffffffffffffffd, 0x8000, 0x9, 0x2, 0x3, 0x8, 0x81, 0x21ab, 0x0, 0x8001, 0x7ea}}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001080)={0x3, [{r1}, {r1}, {r1}, {}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {0x0}, {r1}, {r1}, {r1}, {r1}, {}, {}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}], 0x2, "b4b23ef3f65540"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000002080)={{r3, 0x7, 0x400, 0x70, 0x8001, 0x0, 0x557e, 0x9, 0x10001, 0xffff, 0x0, 0x8, 0x4, 0x8, 0xffffffff}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000021c0)={'gretap0\x00', &(0x7f0000002140)={'gretap0\x00', 0x0, 0x10, 0x8, 0x7, 0x2, {{0xb, 0x4, 0x3, 0x5, 0x2c, 0x67, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x82, 0x2}, @ssrr={0x89, 0x7, 0xe, [@empty]}, @rr={0x7, 0xf, 0xea, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}]}]}}}}}) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000002200)=@base={0x15, 0x3ff, 0x1465, 0x3f, 0x410, 0xffffffffffffffff, 0x7002, '\x00', r4, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 17:52:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="01005500000106ffffff0200000008000100003b7e04"], 0x1c}}, 0x24004000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:09 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="01005500000106ffffff0200000008000100003b7e04"], 0x1c}}, 0x24004000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x2000c080) 17:52:10 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:10 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000080)) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x2000c080) 17:52:10 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:10 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:10 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:10 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:10 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x2000c080) [ 959.305718] nbd: must specify at least one socket 17:52:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:11 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 959.438781] nbd: must specify at least one socket 17:52:11 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x0, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:11 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000080)) connect$bt_sco(r0, &(0x7f0000000040), 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r1, 0x0, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000080)) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) 17:52:11 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:11 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x0, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 960.249672] nbd: must specify a size in bytes for the device 17:52:12 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000080)) connect$bt_sco(r0, &(0x7f0000000040), 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r1, 0x0, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000080)) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) 17:52:12 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:12 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x2000c080) 17:52:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "889b9ebebcc3171ebddf5b6d615660d3234040d1665b0d49687af1af7a1cc4d491173cdd4961eadd987abc9c57c12e8e0ef12696c50fc72a903349c38e61b4c54ade6aac39067379fa9f1d6e48c537c83f6b2d4d4df003491534cb2e0d46e14e681ea90ee53f976215678584de2859331967121438ae5c767bb7a883e0540baa859d3ac152c8477dea8a139a42dec2c3c83991f55904b7003d351b3d905b97ac4181112f558e2213cb08e2bcd962e5022add237dd09efa41d9b1f18c1898ae022d08e31be818065c059a80b2d9d4aec9e897cc43e05dd603e4290ee81473bc22b787d33a1268298f4924b2c17f2b387901d3f7e02b542a76cc65d08d7fa20530", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x120) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r2, 0x6}}, 0x10) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:12 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x2000c080) 17:52:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:12 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x2000c080) 17:52:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:12 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x2000c080) 17:52:13 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x120) (async) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r2, 0x6}}, 0x10) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x2000c080) 17:52:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:13 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x4c, 0x29, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x2000c080) 17:52:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:13 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x40, 0x29, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 961.726787] nbd: must specify a size in bytes for the device [ 961.798789] nbd: must specify a size in bytes for the device 17:52:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:14 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x38, 0x29, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:14 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x120) (async) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r2, 0x6}}, 0x10) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:14 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:14 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:14 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "2bf3c83afa61d37e", "7256960ae51a6ed2a782448d6e647d01", "390820c4", "9cda66c5b02c7412"}, 0x28) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:15 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x24}, 0x24}}, 0x44850) 17:52:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:15 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:15 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x24}, 0x24}}, 0x0) 17:52:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "2bf3c83afa61d37e", "7256960ae51a6ed2a782448d6e647d01", "390820c4", "9cda66c5b02c7412"}, 0x28) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 964.477835] nbd: must specify a size in bytes for the device 17:52:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 964.577318] nbd: must specify a size in bytes for the device 17:52:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (rerun: 64) bind$bt_sco(r1, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "2bf3c83afa61d37e", "7256960ae51a6ed2a782448d6e647d01", "390820c4", "9cda66c5b02c7412"}, 0x28) (rerun: 32) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x4000000) 17:52:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:16 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x4000000) 17:52:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:17 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x38, 0x29, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) [ 965.383958] nbd: must specify a size in bytes for the device 17:52:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x4000000) [ 965.547365] nbd: must specify a size in bytes for the device 17:52:17 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000), 0x8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r2, 0x0, 0x0) bind$bt_sco(r2, &(0x7f00000000c0), 0x8) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) connect$bt_sco(r3, &(0x7f0000000080), 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 966.379766] nbd: must specify a size in bytes for the device [ 966.396065] nbd: must specify a size in bytes for the device [ 966.410673] nbd: must specify at least one socket 17:52:18 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000), 0x8) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r2, 0x0, 0x0) (async) bind$bt_sco(r2, &(0x7f00000000c0), 0x8) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) (async) connect$bt_sco(r3, &(0x7f0000000080), 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:18 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000), 0x8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r2, 0x0, 0x0) bind$bt_sco(r2, &(0x7f00000000c0), 0x8) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) connect$bt_sco(r3, &(0x7f0000000080), 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) [ 966.544679] nbd: must specify at least one socket 17:52:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:18 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000), 0x8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r2, 0x0, 0x0) bind$bt_sco(r2, &(0x7f00000000c0), 0x8) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) connect$bt_sco(r3, &(0x7f0000000080), 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000000), 0x8) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r2, 0x0, 0x0) (async) bind$bt_sco(r2, &(0x7f00000000c0), 0x8) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r3, 0x0, 0x0) (async) connect$bt_sco(r3, &(0x7f0000000080), 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) 17:52:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 966.640774] nbd: must specify at least one socket 17:52:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:18 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f00000000c0)=0x1) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 966.729732] nbd: must specify a size in bytes for the device [ 966.756327] nbd: must specify at least one socket 17:52:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 966.798736] nbd: must specify a size in bytes for the device 17:52:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x2000c080) 17:52:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x2000c080) 17:52:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 966.943183] nbd: must specify a size in bytes for the device [ 966.963656] nbd: must specify a size in bytes for the device [ 967.034604] nbd: must specify a size in bytes for the device [ 967.073607] nbd: must specify a size in bytes for the device [ 967.086490] nbd: must specify a size in bytes for the device 17:52:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f00000000c0)=0x1) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 967.837799] nbd: must specify a size in bytes for the device [ 967.871415] nbd: must specify a size in bytes for the device 17:52:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) [ 967.884325] nbd: must specify a size in bytes for the device 17:52:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 968.012462] nbd: must specify a size in bytes for the device [ 968.028569] nbd: must specify a size in bytes for the device [ 968.056265] nbd: must specify a size in bytes for the device [ 968.103858] nbd: must specify a size in bytes for the device 17:52:20 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f00000000c0)=0x1) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x2000c080) 17:52:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) [ 968.820566] nbd: must specify a size in bytes for the device [ 968.844567] nbd: must specify at least one socket [ 968.863896] nbd: must specify a size in bytes for the device 17:52:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 968.878043] nbd: must specify a size in bytes for the device 17:52:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) [ 968.966706] nbd: must specify a size in bytes for the device [ 968.988440] nbd: must specify at least one socket [ 968.998905] nbd: must specify a size in bytes for the device [ 969.027529] nbd: must specify a size in bytes for the device 17:52:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r2, 0x0, 0x0) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/225, &(0x7f0000000180)=0xe1) 17:52:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 969.752732] nbd: must specify at least one socket 17:52:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 969.801119] nbd: must specify a size in bytes for the device [ 969.827955] nbd: must specify at least one socket 17:52:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 969.926734] nbd: must specify at least one socket [ 969.934791] nbd: must specify at least one socket [ 969.945690] nbd: must specify a size in bytes for the device 17:52:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r2, 0x0, 0x0) (async) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/225, &(0x7f0000000180)=0xe1) 17:52:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:22 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:22 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:22 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 970.707009] nbd: must specify a size in bytes for the device 17:52:22 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x0, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:22 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) [ 970.803981] nbd: must specify at least one socket [ 970.820433] nbd: must specify at least one socket [ 970.850102] nbd: must specify a size in bytes for the device [ 970.912444] nbd: must specify at least one socket [ 970.936988] nbd: must specify a size in bytes for the device 17:52:23 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r2, 0x0, 0x0) (async) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/225, &(0x7f0000000180)=0xe1) 17:52:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:23 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x2000c080) 17:52:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x2000c080) 17:52:23 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:23 executing program 5: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) [ 971.694013] nbd: must specify a size in bytes for the device [ 971.713268] nbd: must specify at least one socket 17:52:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 971.755016] nbd: must specify a size in bytes for the device 17:52:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 971.820284] nbd: must specify at least one socket [ 971.834375] nbd: must specify a size in bytes for the device [ 971.885819] nbd: must specify a size in bytes for the device [ 971.924240] nbd: must specify a size in bytes for the device 17:52:24 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x10, 0x2, 0x100) connect$bt_sco(r0, &(0x7f0000000000), 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:24 executing program 5: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) 17:52:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 17:52:24 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x4000000) [ 972.593810] nbd: must specify a size in bytes for the device [ 972.606354] nbd: must specify at least one socket 17:52:24 executing program 5: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:24 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x2000c080) 17:52:24 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x10, 0x2, 0x100) (async) connect$bt_sco(r0, &(0x7f0000000000), 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) [ 972.653374] nbd: must specify at least one socket [ 972.665155] nbd: must specify a size in bytes for the device 17:52:24 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) [ 972.741062] nbd: must specify at least one socket 17:52:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:52:24 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x10, 0x2, 0x100) connect$bt_sco(r0, &(0x7f0000000000), 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:24 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket(0x10, 0x2, 0x100) connect$bt_sco(r0, &(0x7f0000000000), 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 972.794023] nbd: must specify a size in bytes for the device 17:52:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) 17:52:24 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) [ 972.841854] nbd: must specify at least one socket 17:52:24 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:24 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x10, 0x2, 0x100) connect$bt_sco(r0, &(0x7f0000000000), 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:24 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4000000000000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ')\x87}/.^'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x5) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:24 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:24 executing program 2: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000), 0x24) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001b00)={0xffffffffffffffff, &(0x7f0000001a00)="1afc68a881cd62076c5ca6345487cc7aa11978b99c25f98334aa609b4d23d8adddb83972af2d91810510c1c115d83ab464934db83df245b46af3bc34ee2ae7e473f940aa3fa5c9bd64909d15658fce8a69b63d813313035ae40743cdb0b062edccd485d2a3248e1587bd1a9bff70f4854d8d17839b1b99e4965b9370275639e579559d4a2058a58b6bba88f17a5245a600479bf5a2ab2d3e6a3d16b2a139", &(0x7f0000001ac0)=@udp6=r4, 0x2}, 0x20) r5 = socket(0x25, 0x1, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000000a00)={r6, 0xffff}) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) [ 972.943626] nbd: must specify a size in bytes for the device 17:52:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f7cb37a6000000000000020000000800010000000000"], 0x1c}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r8}, {0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x54}}, 0x4) r9 = socket(0x27, 0x1, 0x401) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r2, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x48d4) 17:52:24 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x10, 0x2, 0x100) connect$bt_sco(r0, &(0x7f0000000000), 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:24 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f7cb37a6000000000000020000000800010000000000"], 0x1c}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r8}, {0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x54}}, 0x4) r9 = socket(0x27, 0x1, 0x401) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r2, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r9}, {0x8}, {0x8}, {0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x48d4) 17:52:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x1, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x74, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffe00}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe1}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4088001) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:52:24 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x10, 0x2, 0x100) connect$bt_sco(r0, &(0x7f0000000000), 0x8) 17:52:24 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:25 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4000000000000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ')\x87}/.^'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x5) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:25 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x1}, 0x14}}, 0x0) r5 = socket(0x2c, 0x2, 0x7c000000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = socket(0x23, 0x2, 0x308) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e20, 0x10000, @mcast2, 0x1}}, 0x0, 0x0, 0x1a, 0x0, "6889d2772559c7e0b8d26066a8f818c5671b313ca8699e66b31d99adb625b1c776a4fda2c347003bdd52ac65fc0ada350f782d7f78c29dbe994faaa2696c37b0e78a88695a91fa8c1929ee5586c65f3a"}, 0xd8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, r4, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r10}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x810) 17:52:25 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:25 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x10, 0x2, 0x100) 17:52:25 executing program 4: socket(0x10, 0x2, 0x100) 17:52:25 executing program 2: r0 = socket(0x1e, 0x2, 0x1a2a3c47) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4fb5d7da4bf49a0c09953c44f7e25c66d3f1ae9345072cc34f2da76eb7655d0ebeb4e726f87ed00c915a8ebf1fc73fee62900abaebcd134bbb3a7b3eb37a9c04de1acad306021475c42bc6c6d1d385e8b731d4ae506330d388c11b635c993458fa5a707940205a197bf3b1bf0b35e74b3ff283da12dd3b4fe4b0f99c1caab6f1a04e6c775886133e24a57d927ee3afcd7c5b50e9b7f03f544b62016d9a22e22d19fe4917786721604b", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x46f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4001) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000), 0x24) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001b00)={0xffffffffffffffff, &(0x7f0000001a00)="1afc68a881cd62076c5ca6345487cc7aa11978b99c25f98334aa609b4d23d8adddb83972af2d91810510c1c115d83ab464934db83df245b46af3bc34ee2ae7e473f940aa3fa5c9bd64909d15658fce8a69b63d813313035ae40743cdb0b062edccd485d2a3248e1587bd1a9bff70f4854d8d17839b1b99e4965b9370275639e579559d4a2058a58b6bba88f17a5245a600479bf5a2ab2d3e6a3d16b2a139", &(0x7f0000001ac0)=@udp6=r5, 0x2}, 0x20) r6 = socket(0x25, 0x1, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000000a00)={r7, 0xffff}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x10200, 0x0) write$ppp(r8, &(0x7f0000000700)="627dc7250995826d2814349556c888738fad6c1a8488eb1c45a7f4e7a6ba303d061f47838b588d8a4069c72e419590d0c7b98e44c231972743ced7565c77dce83203331e478c6d90ef541f8d4642533e40a3693220c7511aff659bb11c60766c36c6138c8871aa57954cfbf285ea76349a88820f9a16a5ad8942802d2f5c050dab4964e2635a38eaec3c642c5951d425ffeb418482475623b6883088a2c1931031b9b50570a3b1a0402e5dfbd309535ac7d5f4b64166e28c65fe7bda86a7e64d6c968e92c3cb3720402b56c0984b3803af8e72adcf3d5aa7254e1b335213c001d249bdb13a0e66692341", 0xea) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000002c0)) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@deltclass={0x54, 0x29, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x6}, {0x2}, {0xfff3, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x400}}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:25 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:25 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) [ 973.963739] nbd: must specify an index to disconnect 17:52:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc814}, 0x4000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYRESOCT=r6], 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r7) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3a17944b8ed390b2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xf087}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x107}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xabe}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4c800}, 0x4000) 17:52:25 executing program 4: socket(0x0, 0x2, 0x100) 17:52:26 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:26 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4000000000000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ')\x87}/.^'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x5) connect$bt_sco(r0, &(0x7f0000000040), 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4000000000000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, ')\x87}/.^'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x5) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) 17:52:26 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:26 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6cd5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x2008040) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{0x0, 0x7, 0x9, 0x8, 0x100, 0x2c, 0x0, 0xa4, 0x100, 0x3, 0x400, 0x72, 0x38b82b95, 0x938, 0x400}}) bind$bt_sco(r0, &(0x7f0000001080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 17:52:26 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r6, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) socket(0x25, 0xa, 0xffff0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="42c2465602cd85c638111d392ecce585ae6b3d1446524e34992aa9dbdac7d09fdb924e1880e15ded5253ab512a537c8e77aac0fee360e76b281be092d36fe48fb9c7817f77af444d10ecdd76ea6334abeeebb687541377cc4a6e91efaaae6fc5406e7e012345e9af6a27dcd1fcd6c2483feba53947682729ab375904a35b06b38e7b2f7a592bda4a70daf937f1bdb6aef952ef68b2bc", &(0x7f0000000440)=@tcp=r1}, 0x20) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:26 executing program 4: socket(0x0, 0x2, 0x100) 17:52:26 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, 0x0, 0x44850) 17:52:26 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r6, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) socket(0x25, 0xa, 0xffff0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="42c2465602cd85c638111d392ecce585ae6b3d1446524e34992aa9dbdac7d09fdb924e1880e15ded5253ab512a537c8e77aac0fee360e76b281be092d36fe48fb9c7817f77af444d10ecdd76ea6334abeeebb687541377cc4a6e91efaaae6fc5406e7e012345e9af6a27dcd1fcd6c2483feba53947682729ab375904a35b06b38e7b2f7a592bda4a70daf937f1bdb6aef952ef68b2bc", &(0x7f0000000440)=@tcp=r1}, 0x20) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:26 executing program 4: socket(0x0, 0x2, 0x100) 17:52:26 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, 0x0, 0x44850) 17:52:26 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 17:52:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:26 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r6, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) socket(0x25, 0xa, 0xffff0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="42c2465602cd85c638111d392ecce585ae6b3d1446524e34992aa9dbdac7d09fdb924e1880e15ded5253ab512a537c8e77aac0fee360e76b281be092d36fe48fb9c7817f77af444d10ecdd76ea6334abeeebb687541377cc4a6e91efaaae6fc5406e7e012345e9af6a27dcd1fcd6c2483feba53947682729ab375904a35b06b38e7b2f7a592bda4a70daf937f1bdb6aef952ef68b2bc", &(0x7f0000000440)=@tcp=r1}, 0x20) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:27 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, 0x0, 0x44850) 17:52:27 executing program 4: socket(0x10, 0x0, 0x100) 17:52:27 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, 0x0, 0x44850) 17:52:27 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) 17:52:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:27 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r6, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) socket(0x25, 0xa, 0xffff0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:27 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x2000c080) 17:52:27 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r4, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) socket(0x25, 0xa, 0xffff0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:27 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r6, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) socket(0x25, 0xa, 0xffff0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="42c2465602cd85c638111d392ecce585ae6b3d1446524e34992aa9dbdac7d09fdb924e1880e15ded5253ab512a537c8e77aac0fee360e76b281be092d36fe48fb9c7817f77af444d10ecdd76ea6334abeeebb687541377cc4a6e91efaaae6fc5406e7e012345e9af6a27dcd1fcd6c2483feba53947682729ab375904a35b06b38e7b2f7a592bda4a70daf937f1bdb6aef952ef68b2bc", &(0x7f0000000440)=@tcp=r1}, 0x20) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:27 executing program 4: socket(0x10, 0x0, 0x100) 17:52:27 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:27 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r4, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) socket(0x25, 0xa, 0xffff0000) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x2000c080) 17:52:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x2000c080) 17:52:28 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) 17:52:28 executing program 4: socket(0x10, 0x0, 0x100) 17:52:28 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044031}, 0x44850) 17:52:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x2000c080) 17:52:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r3) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:52:28 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r4, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:28 executing program 4: socket(0x10, 0x2, 0x0) 17:52:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:28 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x44850) 17:52:28 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r3) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r4, 0x200, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) socket(0x25, 0xa, 0xffff0000) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:28 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r3) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:28 executing program 4: socket(0x10, 0x2, 0x0) 17:52:29 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{0x0, 0x10000, 0x400000000007fdf, 0x7e, 0x5, 0x0, 0xffffffffffffff80, 0x8001, 0xaea3, 0x40, 0x102, 0x6, 0xfffffffffffff95c, 0x3, 0x3}}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001080)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001280)={{r1, 0x49, 0x645, 0x2, 0x2, 0x5, 0x3, 0x6, 0x950, 0x1, 0x2, 0x4, 0x5, 0x1, 0x2}}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000002280), 0x8) 17:52:29 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 17:52:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:29 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:52:29 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:29 executing program 4: socket(0x10, 0x2, 0x0) 17:52:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:52:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 17:52:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r2, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:52:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01000000ff7f00c786034b9b03b6c800010000000000"], 0x1c}}, 0x0) r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000040)={'exec ', 'nbd\x00'}, 0x9) 17:52:29 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r2) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:29 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{0x0, 0x10000, 0x400000000007fdf, 0x7e, 0x5, 0x0, 0xffffffffffffff80, 0x8001, 0xaea3, 0x40, 0x102, 0x6, 0xfffffffffffff95c, 0x3, 0x3}}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001080)={0x0}) (rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001280)={{r1, 0x49, 0x645, 0x2, 0x2, 0x5, 0x3, 0x6, 0x950, 0x1, 0x2, 0x4, 0x5, 0x1, 0x2}}) (async, rerun: 32) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) connect$bt_sco(r2, &(0x7f0000002280), 0x8) 17:52:29 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x3c}}, 0x0) 17:52:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = socket(0x18, 0x800, 0x61b0527a) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r3, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r4}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) 17:52:30 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r3 = socket(0x6, 0x5, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x1ff, 0x3, {{0x12, 0x4, 0x3, 0x1e, 0x48, 0x66, 0x0, 0x40, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}, {[@cipso={0x86, 0x31, 0xffffffffffffffff, [{0x1, 0xc, "14159a3c56c70ae03328"}, {0x0, 0x4, "b7e7"}, {0x1, 0xe, "7f30783b12a7c8ab71385399"}, {0x6, 0xd, "814361e313dd7f03e704f1"}]}]}}}}}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r5 = socket(0x25, 0xa, 0x1) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r10, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xcc, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r3}, {0x8, 0x1, r11}, {0x8, 0x1, r3}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r12}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe5}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f00000001c0)={'erspan0\x00', r4, 0x700, 0x7, 0x4, 0x6, {{0x1d, 0x4, 0x2, 0x0, 0x74, 0x65, 0x0, 0x3, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@lsrr={0x83, 0x7, 0x4d, [@loopback]}, @ssrr={0x89, 0xb, 0xa, [@multicast2, @local]}, @timestamp_addr={0x44, 0x4c, 0xc7, 0x1, 0x8, [{@rand_addr=0x64010102, 0x3}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x1000}, {@empty, 0x6}, {@broadcast, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0x101}, {@empty, 0xa37b}, {@multicast1, 0x2}]}]}}}}}) 17:52:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r3 = socket(0x6, 0x5, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x1ff, 0x3, {{0x12, 0x4, 0x3, 0x1e, 0x48, 0x66, 0x0, 0x40, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}, {[@cipso={0x86, 0x31, 0xffffffffffffffff, [{0x1, 0xc, "14159a3c56c70ae03328"}, {0x0, 0x4, "b7e7"}, {0x1, 0xe, "7f30783b12a7c8ab71385399"}, {0x6, 0xd, "814361e313dd7f03e704f1"}]}]}}}}}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r5 = socket(0x25, 0xa, 0x1) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r10, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xcc, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r3}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r3}, {0x8, 0x1, r11}, {0x8, 0x1, r3}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r12}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xe5}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x60) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f00000001c0)={'erspan0\x00', r4, 0x700, 0x7, 0x4, 0x6, {{0x1d, 0x4, 0x2, 0x0, 0x74, 0x65, 0x0, 0x3, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@lsrr={0x83, 0x7, 0x4d, [@loopback]}, @ssrr={0x89, 0xb, 0xa, [@multicast2, @local]}, @timestamp_addr={0x44, 0x4c, 0xc7, 0x1, 0x8, [{@rand_addr=0x64010102, 0x3}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x1000}, {@empty, 0x6}, {@broadcast, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0x101}, {@empty, 0xa37b}, {@multicast1, 0x2}]}]}}}}}) 17:52:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:30 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:30 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) [ 978.402201] nbd: must specify an index to disconnect 17:52:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x64, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r5, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x400c4) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4f2a}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c014}, 0x24000800) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x84) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r3, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 17:52:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x64, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r5, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x400c4) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4f2a}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c014}, 0x24000800) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x84) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r3, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 17:52:30 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{0x0, 0x10000, 0x400000000007fdf, 0x7e, 0x5, 0x0, 0xffffffffffffff80, 0x8001, 0xaea3, 0x40, 0x102, 0x6, 0xfffffffffffff95c, 0x3, 0x3}}) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001080)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001280)={{r1, 0x49, 0x645, 0x2, 0x2, 0x5, 0x3, 0x6, 0x950, 0x1, 0x2, 0x4, 0x5, 0x1, 0x2}}) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000002280), 0x8) 17:52:30 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0xc021, 0x2}) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x3c}}, 0x0) 17:52:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r6 = socket(0x1a, 0xa, 0x7fffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xb0, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa2}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:52:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = socket(0x18, 0x800, 0x61b0527a) accept$phonet_pipe(r6, &(0x7f0000000040), &(0x7f0000000080)=0x10) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80d4}, 0x4000) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r5, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r6}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 17:52:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = socket(0x18, 0x800, 0x61b0527a) accept$phonet_pipe(r6, &(0x7f0000000040), &(0x7f0000000080)=0x10) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80d4}, 0x4000) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r5, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r6}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 17:52:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:30 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf25001000ff00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x835f1bf42b86295d}, 0x4000) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 979.253694] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 979.270897] nbd: must specify an index to disconnect [ 979.285492] nbd: must specify an index to disconnect 17:52:30 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x1, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x3c}}, 0x0) [ 979.315314] nbd: must specify an index to disconnect 17:52:31 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040), 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000080)=""/21, &(0x7f00000000c0)=0x15) 17:52:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = socket(0x18, 0x800, 0x61b0527a) accept$phonet_pipe(r6, &(0x7f0000000040), &(0x7f0000000080)=0x10) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80d4}, 0x4000) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x94, r5, 0x1b3e092429f36bf3, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90c000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r6}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\xdc\xe5\x88\xdc'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044841}, 0x4008000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xcd4bb18eb5ad4a04}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@bridge_dellink={0x28, 0x11, 0x8, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x46400, 0x800}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) 17:52:31 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38060000", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048090) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r7, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="ec57239c76032915672c23721f0bb69632481f4cc250b22bbc2c1fb6ee8a5a320deed2b3ab5e6bf89b9117c00751a0ebf5068653654bcd48985d1ce9718ba1e7309b6f86d1d38bbaee142edc5d9f5a82d69869f19f335bfad583212785f503a598ea90517b437e9c403e7e823e8dc1407199249089b9187f0db079cc1a42d9235290faf14430bb3c561a4196"], 0x14}}, 0x0) 17:52:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:31 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:31 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38060000", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048090) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r7, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="ec57239c76032915672c23721f0bb69632481f4cc250b22bbc2c1fb6ee8a5a320deed2b3ab5e6bf89b9117c00751a0ebf5068653654bcd48985d1ce9718ba1e7309b6f86d1d38bbaee142edc5d9f5a82d69869f19f335bfad583212785f503a598ea90517b437e9c403e7e823e8dc1407199249089b9187f0db079cc1a42d9235290faf14430bb3c561a4196"], 0x14}}, 0x0) 17:52:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000006cb247a3ca53cfd3a12a0e083ca8ccff72ec035679a04edd05a0376d188bd9a6134bc573dbfd0315cbbeec88bdd4ef4f0de79203e77af50fb7c0e1f97763763de228d8ccdd3b9c1a56e982a80712", @ANYRES16=r2, @ANYBLOB="010000000000e236bcd4cf9bf0c95779e4faf4540000"], 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r6 = socket(0x2a, 0x3, 0x401) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r7, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb4, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) 17:52:31 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:31 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38060000", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048090) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r7, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="ec57239c76032915672c23721f0bb69632481f4cc250b22bbc2c1fb6ee8a5a320deed2b3ab5e6bf89b9117c00751a0ebf5068653654bcd48985d1ce9718ba1e7309b6f86d1d38bbaee142edc5d9f5a82d69869f19f335bfad583212785f503a598ea90517b437e9c403e7e823e8dc1407199249089b9187f0db079cc1a42d9235290faf14430bb3c561a4196"], 0x14}}, 0x0) 17:52:31 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040), 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000080)=""/21, &(0x7f00000000c0)=0x15) 17:52:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 980.178244] nbd: must specify an index to disconnect 17:52:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040005}, 0x4004020) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="17000000", @ANYRES16=r2, @ANYBLOB="01000000000002000000080001000000000000000000"], 0x1c}}, 0x0) 17:52:31 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000080)=""/21, &(0x7f00000000c0)=0x15) 17:52:31 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x1, 0x4, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x23, 0xa, '/sys/kernel/debug/binder/stats\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10000}]}, 0x44}}, 0x4005) 17:52:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100000000000000f091918a0000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x6004000) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="012b9ec3cd97f2b1f8ff01"], 0x14}}, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r5, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "86713c1c80a715a9", "c0ec8aab47d5886ff4381825cb0cac43", "3025029a", "50946f5bbf9d0249"}, 0x28) 17:52:31 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38060000", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048090) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r7, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="ec57239c76032915672c23721f0bb69632481f4cc250b22bbc2c1fb6ee8a5a320deed2b3ab5e6bf89b9117c00751a0ebf5068653654bcd48985d1ce9718ba1e7309b6f86d1d38bbaee142edc5d9f5a82d69869f19f335bfad583212785f503a598ea90517b437e9c403e7e823e8dc1407199249089b9187f0db079cc1a42d9235290faf14430bb3c561a4196"], 0x14}}, 0x0) 17:52:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x98, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '-%-$\\@{Q%'}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x880) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000020000000800000000000000007e0e72be0109c3fc1799add33296fa5a2ad39dacc2c20bfdeb155e53393488fdfb14a362ca0e836cdafe3e75876dd160"], 0x1c}}, 0x0) 17:52:31 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000680)=0x7) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:32 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) connect$bt_sco(r1, &(0x7f0000000000), 0x8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r2, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, 0x0, &(0x7f00000000c0)) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:32 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38060000", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048090) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:32 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r4, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x98, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '-%-$\\@{Q%'}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x880) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000020000000800000000000000007e0e72be0109c3fc1799add33296fa5a2ad39dacc2c20bfdeb155e53393488fdfb14a362ca0e836cdafe3e75876dd160"], 0x1c}}, 0x0) [ 980.376957] nbd: must specify an index to disconnect 17:52:32 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) connect$bt_sco(r1, &(0x7f0000000000), 0x8) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r2, 0x0, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, 0x0, &(0x7f00000000c0)) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:32 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r1, @ANYBLOB="0100000000000000000002000000000000ff0000000085b606fd2982b61e7c2c9733132eb7c0646ab10cfa9b44824fa5e59af8aa67a275ab1c5892117d5161b3756e3cfd0c50d1e6883c0887b69646ba8205f303140653dadae329c4e74151a470bfde34ced10f8bdcc12efdadf3b9015fc399fa84085a4eb0b0dbb93480da6b3a3f03714aaf9e82c40d7ea9f23a3f13"], 0x1c}}, 0x0) 17:52:32 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) connect$bt_sco(r1, &(0x7f0000000000), 0x8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r2, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, 0x0, &(0x7f00000000c0)) connect$bt_sco(r0, &(0x7f0000000040), 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) connect$bt_sco(r1, &(0x7f0000000000), 0x8) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bind$bt_sco(r2, 0x0, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, 0x0, &(0x7f00000000c0)) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) 17:52:32 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38060000", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048090) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:32 executing program 2: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c1}, 0x40048c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x1c}}, 0x4008880) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) r7 = socket(0x1d, 0x2, 0x7) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x88, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1a}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, 'A'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7f}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) [ 980.455588] nbd: must specify a size in bytes for the device [ 980.473667] nbd: must specify an index to disconnect 17:52:32 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) r4 = socket(0x11, 0x0, 0x550e) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0xfffffffffffffff5) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f00000004c0)="4896d1393d17ec1649b46bf5f7fcda2c", 0x10) socket(0xb, 0x80000, 0x6) socket(0x22, 0x3, 0x80000001) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r6) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00082dbd700004000000020000000c000300ffffffffffffff7f08000100000000000c00060000000000000000000c00060001000000000000000c0004000000000000000006000a002e2d000004000a00003e3001cc4e0f4c60189ca3223b33b01dafee22f25069de1ac261819f8ccc8b632af28e4cbff2aca69cad99520828ac793701bb6805c7f75528104264f05a1ff1215b61d9b7504051ea87dbbee3fb78403e2c451c2e75354be69edf9e0658a782a7b2c1758bca3209646173a9d730be91"], 0x58}, 0x1, 0x0, 0x0, 0x20044040}, 0x4085) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="bbe0365e3e16709014000000", @ANYRES16=r1, @ANYBLOB="012b9ec3cd97f2b1f8ff01"], 0x14}}, 0x0) 17:52:32 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38060000", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048090) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:32 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:32 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 980.562123] nbd: must specify a size in bytes for the device [ 980.600996] nbd: must specify an index to disconnect 17:52:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:32 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38060000", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048090) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) [ 980.624359] nbd: must specify an index to disconnect 17:52:32 executing program 3: add_key$fscrypt_provisioning(0x0, &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200a3ebf4a69655556b9ec164635be3ea87bc14ff77ab6c312ff1fef033e46660835dbc13faceb9b095d42fdff7b66fd363bd9b8c52c4d94a4d3ced46fe4af4650f684d95bf505e5b501d7ca661e6f6b1aeb512db878b180dc6817add0fa22f47c5aab7e3ba8d2f3457b3f4ef0fe711b4b8c8fa14a9000059d0b4ebb4f8a3bf0000"], 0x1c}}, 0x0) 17:52:32 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38060000", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048090) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:32 executing program 3: add_key$fscrypt_provisioning(0x0, &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) [ 980.658000] nbd: must specify a size in bytes for the device 17:52:32 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20004880) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), r2) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0xb00, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r6, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x8040) [ 980.723717] nbd: must specify a size in bytes for the device [ 980.737188] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 17:52:32 executing program 3: add_key$fscrypt_provisioning(0x0, &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) [ 980.764908] nbd: must specify an index to disconnect [ 980.780426] nbd: must specify at least one socket 17:52:33 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r2, 0x10}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x1) 17:52:33 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38060000", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048090) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:33 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000280), 0x0, &(0x7f00000003c0)={0x3, 0x0, @b}, 0x48, 0xfffffffffffffffe) 17:52:33 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x7, 0x1, 0x9, 0x101}, {0x4, 0x9, 0x81, 0x10001}, {0x8, 0x0, 0x8, 0x7}, {0x1000, 0x20, 0x95, 0x9}, {0xfffe, 0x5, 0x2, 0x7f}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:33 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x7, 0x1, 0x9, 0x101}, {0x4, 0x9, 0x81, 0x10001}, {0x8, 0x0, 0x8, 0x7}, {0x1000, 0x20, 0x95, 0x9}, {0xfffe, 0x5, 0x2, 0x7f}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:33 executing program 3: add_key$fscrypt_provisioning(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 17:52:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x48, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000511000080"], 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x88c4}, 0x4) 17:52:33 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) 17:52:33 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38060000", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048090) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:33 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38060000", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048090) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) [ 981.543534] nbd: must specify at least one socket 17:52:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:33 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38060000", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048090) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) [ 981.597696] nbd: couldn't find device at index -1488881408 17:52:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x48, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000511000080"], 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x88c4}, 0x4) 17:52:33 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x3, 0x7, 0x2, 0x7fff}, {0x5, 0xa3, 0x8, 0x4}, {0x6, 0x1, 0x4, 0x800}, {0x5, 0x3, 0x1, 0x4}, {0x1000, 0x4, 0x1, 0x4}, {0x0, 0x9, 0x1f, 0x3f}, {0xea, 0x9, 0x6}]}) recvmsg$can_bcm(r0, &(0x7f0000001740)={&(0x7f0000000100)=@sco, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000180)=""/22, 0x16}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/252, 0xfc}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/34, 0x22}, {&(0x7f0000001340)=""/246, 0xf6}, {&(0x7f0000001440)=""/153, 0x99}, {&(0x7f0000001500)=""/81, 0x51}, {&(0x7f0000001580)=""/161, 0xa1}, {&(0x7f0000001640)=""/187, 0xbb}], 0xa, &(0x7f0000001700)=""/52, 0x34}, 0x60) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r1, &(0x7f0000000040), 0x8) 17:52:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 981.641466] nbd: must specify at least one socket [ 981.697024] nbd: couldn't find device at index -1488881408 [ 981.744655] nbd: must specify a size in bytes for the device 17:52:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x48, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000511000080"], 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x88c4}, 0x4) 17:52:34 executing program 3: ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000000)={0x8021, 0x1}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = inotify_init() inotify_rm_watch(r1, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14e5f700", @ANYRES16=r2, @ANYBLOB="012b9ec3cd97f2b1f8ff01"], 0x14}}, 0x0) 17:52:34 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38060000", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048090) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:34 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="38060000", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000050014000000000014001f00000000000000000000000000000000000500220000000000"], 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:34 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x3, 0x7, 0x2, 0x7fff}, {0x5, 0xa3, 0x8, 0x4}, {0x6, 0x1, 0x4, 0x800}, {0x5, 0x3, 0x1, 0x4}, {0x1000, 0x4, 0x1, 0x4}, {0x0, 0x9, 0x1f, 0x3f}, {0xea, 0x9, 0x6}]}) (async) recvmsg$can_bcm(r0, &(0x7f0000001740)={&(0x7f0000000100)=@sco, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000180)=""/22, 0x16}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/252, 0xfc}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/34, 0x22}, {&(0x7f0000001340)=""/246, 0xf6}, {&(0x7f0000001440)=""/153, 0x99}, {&(0x7f0000001500)=""/81, 0x51}, {&(0x7f0000001580)=""/161, 0xa1}, {&(0x7f0000001640)=""/187, 0xbb}], 0xa, &(0x7f0000001700)=""/52, 0x34}, 0x60) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000040), 0x8) 17:52:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:34 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) [ 982.395613] nbd: must specify a size in bytes for the device [ 982.412861] nbd: couldn't find device at index -1488881408 17:52:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x48, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000511000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) 17:52:34 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:52:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x44000) 17:52:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2}, 0x2000c080) 17:52:34 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4a613563879b4eb1}, 0x884) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r2) sendmsg$NET_DM_CMD_START(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x800) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) socket$inet(0x2, 0x800, 0x4) [ 982.496654] nbd: must specify a size in bytes for the device 17:52:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4a613563879b4eb1}, 0x884) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r2) sendmsg$NET_DM_CMD_START(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x800) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) socket$inet(0x2, 0x800, 0x4) 17:52:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x48, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000511000080"], 0x14}}, 0x0) [ 982.542513] nbd: couldn't find device at index -1488881408 [ 982.602016] nbd: must specify a size in bytes for the device [ 982.633939] nbd: couldn't find device at index -1488881408 17:52:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x2000c080) 17:52:34 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x3, 0x7, 0x2, 0x7fff}, {0x5, 0xa3, 0x8, 0x4}, {0x6, 0x1, 0x4, 0x800}, {0x5, 0x3, 0x1, 0x4}, {0x1000, 0x4, 0x1, 0x4}, {0x0, 0x9, 0x1f, 0x3f}, {0xea, 0x9, 0x6}]}) (async) recvmsg$can_bcm(r0, &(0x7f0000001740)={&(0x7f0000000100)=@sco, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000180)=""/22, 0x16}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/252, 0xfc}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/34, 0x22}, {&(0x7f0000001340)=""/246, 0xf6}, {&(0x7f0000001440)=""/153, 0x99}, {&(0x7f0000001500)=""/81, 0x51}, {&(0x7f0000001580)=""/161, 0xa1}, {&(0x7f0000001640)=""/187, 0xbb}], 0xa, &(0x7f0000001700)=""/52, 0x34}, 0x60) (async, rerun: 32) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(r1, &(0x7f0000000040), 0x8) 17:52:34 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x48, r2, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x800) 17:52:34 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000ab8fc3fcbf44177eec5bd937b1b1d31104530a6ae1426a44b905d303d1229170379e35b648dc5c89889175580f4156a6d76da5e9726a842df4e13a302c5f2024cb240b5b51c97000dcb762c539ce2e3669", @ANYRES16=r5, @ANYBLOB="012b9ec3cd97f2b1f8ff01"], 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r6) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) ioctl$PPPIOCSMRU1(r9, 0x40047452, &(0x7f00000004c0)=0x84) sendmsg$NBD_CMD_STATUS(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xb3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x88a1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r0}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8001}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4) 17:52:34 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000ab8fc3fcbf44177eec5bd937b1b1d31104530a6ae1426a44b905d303d1229170379e35b648dc5c89889175580f4156a6d76da5e9726a842df4e13a302c5f2024cb240b5b51c97000dcb762c539ce2e3669", @ANYRES16=r5, @ANYBLOB="012b9ec3cd97f2b1f8ff01"], 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r6) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) ioctl$PPPIOCSMRU1(r9, 0x40047452, &(0x7f00000004c0)=0x84) sendmsg$NBD_CMD_STATUS(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xb3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x88a1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r0}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8001}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4) 17:52:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) [ 983.274700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 983.295570] nbd: must specify a size in bytes for the device [ 983.314758] nbd: couldn't find device at index -1488881408 17:52:35 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000ab8fc3fcbf44177eec5bd937b1b1d31104530a6ae1426a44b905d303d1229170379e35b648dc5c89889175580f4156a6d76da5e9726a842df4e13a302c5f2024cb240b5b51c97000dcb762c539ce2e3669", @ANYRES16=r5, @ANYBLOB="012b9ec3cd97f2b1f8ff01"], 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r6) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) ioctl$PPPIOCSMRU1(r9, 0x40047452, &(0x7f00000004c0)=0x84) sendmsg$NBD_CMD_STATUS(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xb3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x88a1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r0}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8001}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4) 17:52:35 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 983.347019] nbd: must specify an index to disconnect [ 983.355257] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 17:52:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) [ 983.389948] nbd: must specify a size in bytes for the device [ 983.405042] nbd: must specify an index to disconnect 17:52:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r2) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r6 = accept4$phonet_pipe(r5, &(0x7f0000000240), &(0x7f0000000380)=0x10, 0x80800) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f00000003c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f00000017c0)={r7, 0x0, "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", "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"}) bind$bt_sco(r5, 0x0, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) connect$bt_sco(r8, &(0x7f00000013c0), 0x8) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="1ed228bd7000fedbdf25020000000c00030002000000000000000c00040009000000000000001400078008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0c00040009000000000000003400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="ea8b536c77785ca8210cccd74a4735864e9cd0aea19932af82aaa94f1acabdd589f97cae988cffa39bb89164239fc232cf54dca45ea46511247d271c74eebe8a57cf531d592da1bf2633a9266fc8ed08ff4c6d0fedb542986f89577493ba2270576391b26da61b35897174fe52f68eb3630daf43387b395a61db70c56dd823a0514b7790eb91c89c4a346f6817e8d072d019a7ed701b968ca91407bbd5d4d22ed51e4d2a84357a1ced2224ebbb7c"], 0x80}, 0x1, 0x0, 0x0, 0x44894}, 0x4000010) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:52:35 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) [ 983.460699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 983.490740] nbd: couldn't find device at index -1488881408 [ 983.499858] nbd: must specify an index to disconnect 17:52:35 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x8000, 0x5, {"cff88d7f977d65c507143e8d02a65add"}, 0x2, 0xa3ca, 0x7ffffffffffffffe}}}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 17:52:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:52:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:52:35 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000ab8fc3fcbf44177eec5bd937b1b1d31104530a6ae1426a44b905d303d1229170379e35b648dc5c89889175580f4156a6d76da5e9726a842df4e13a302c5f2024cb240b5b51c97000dcb762c539ce2e3669", @ANYRES16=r5, @ANYBLOB="012b9ec3cd97f2b1f8ff01"], 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r6) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) ioctl$PPPIOCSMRU1(r9, 0x40047452, &(0x7f00000004c0)=0x84) sendmsg$NBD_CMD_STATUS(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x8c, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xb3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x88a1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r0}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8001}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4) 17:52:35 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 17:52:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000fedbadeb0c8fbed908c2008014000780080001000000000000000000", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00030009000000000000000c0006000100000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="012b9ec3c797f2b1d72652f7c83e24611266b8ec913014f8ff01"], 0x14}}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@gettfilter={0x6c, 0x2e, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0xffff}, {0x7, 0xfff1}}, [{0x8, 0xb, 0x8001}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x40000000}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xf76}, {0x8, 0xb, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x44c12) 17:52:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:35 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 984.207250] nbd: couldn't find device at index -1488881408 [ 984.227614] nbd: couldn't find device at index -1488881408 [ 984.235356] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 984.276044] nbd: must specify an index to disconnect 17:52:35 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000ab8fc3fcbf44177eec5bd937b1b1d31104530a6ae1426a44b905d303d1229170379e35b648dc5c89889175580f4156a6d76da5e9726a842df4e13a302c5f2024cb240b5b51c97000dcb762c539ce2e3669", @ANYRES16=r5, @ANYBLOB="012b9ec3cd97f2b1f8ff01"], 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r6) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) ioctl$PPPIOCSMRU1(r9, 0x40047452, &(0x7f00000004c0)=0x84) 17:52:35 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000400)="49eb1d720dad4d0bee0afd02161594fda1f085a3b43f03e089d9cc3352ad69d83f0041a4490006d9305ce80877bee6d41ad9f5f1d691f0657071a869ae3415404ab2f4e444441471655659aac10c62745ea5fa483e32fb20a0e76c91a955c2bc1283481742b4ffa7c8f16dd673ca090bf8cb31eebf0e70e07a99e80e7de377816848c9075dbf713c836c169ab7fef088", &(0x7f0000000200)=@tcp, 0x2}, 0x20) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f00000001c0)=0x2) connect$bt_sco(r0, &(0x7f0000000040), 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "889b9ebebcc3171ebddf5b6d615660d3234040d1665b0d49687af1af7a1cc4d491173cdd4961eadd987abc9c57c12e8e0ef12696c50fc72a903349c38e61b4c54ade6aac39067379fa9f1d6e48c537c83f6b2d4d4df003491534cb2e0d46e14e681ea90ee53f976215678584de2859331967121438ae5c767bb7a883e0540baa859d3ac152c8477dea8a139a42dec2c3c83991f55904b7003d351b3d905b97ac4181112f558e2213cb08e2bcd962e5022add237dd09efa41d9b1f18c1898ae022d08e31be818065c059a80b2d9d4aec9e897cc43e05dd603e4290ee81473bc22b787d33a1268298f4924b2c17f2b387901d3f7e02b542a76cc65d08d7fa20530", 0x0, 0xfe, 0x0, 0x0, 0x8, 0x0, 0xef, 0x1}, r3}}, 0x120) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in6={0xa, 0x4e21, 0x8, @local, 0x7}}}, 0x90) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000140)) [ 984.327897] nbd: couldn't find device at index -1488881408 [ 984.367426] nbd: couldn't find device at index -1488881408 [ 984.387878] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 984.411815] nbd: must specify an index to disconnect 17:52:36 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x8000, 0x5, {"cff88d7f977d65c507143e8d02a65add"}, 0x2, 0xa3ca, 0x7ffffffffffffffe}}}, 0x90) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 17:52:36 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:36 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:52:36 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000ab8fc3fcbf44177eec5bd937b1b1d31104530a6ae1426a44b905d303d1229170379e35b648dc5c89889175580f4156a6d76da5e9726a842df4e13a302c5f2024cb240b5b51c97000dcb762c539ce2e3669", @ANYRES16=r5, @ANYBLOB="012b9ec3cd97f2b1f8ff01"], 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r6) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r9, 0x0, 0x0) 17:52:36 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:52:36 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) [ 985.115003] nbd: couldn't find device at index -1488881408 [ 985.145451] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:52:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="012b9ec3cd97f2b1f8ff01"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r3, 0x10, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x20040000) 17:52:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:36 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) bind$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) [ 985.203033] nbd: couldn't find device at index -1488881408 [ 985.214933] nbd: must specify an index to disconnect [ 985.287501] nbd: couldn't find device at index -1488881408 17:52:37 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x8000, 0x5, {"cff88d7f977d65c507143e8d02a65add"}, 0x2, 0xa3ca, 0x7ffffffffffffffe}}}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x8000, 0x5, {"cff88d7f977d65c507143e8d02a65add"}, 0x2, 0xa3ca, 0x7ffffffffffffffe}}}, 0x90) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) 17:52:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:37 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000ab8fc3fcbf44177eec5bd937b1b1d31104530a6ae1426a44b905d303d1229170379e35b648dc5c89889175580f4156a6d76da5e9726a842df4e13a302c5f2024cb240b5b51c97000dcb762c539ce2e3669", @ANYRES16=r5, @ANYBLOB="012b9ec3cd97f2b1f8ff01"], 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r6) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 17:52:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:37 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:37 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) [ 986.046671] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:52:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:37 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0xffffffffffffff80) 17:52:37 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) [ 986.087279] nbd: must specify an index to disconnect 17:52:37 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) bind$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:37 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000ab8fc3fcbf44177eec5bd937b1b1d31104530a6ae1426a44b905d303d1229170379e35b648dc5c89889175580f4156a6d76da5e9726a842df4e13a302c5f2024cb240b5b51c97000dcb762c539ce2e3669", @ANYRES16=r5, @ANYBLOB="012b9ec3cd97f2b1f8ff01"], 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r6) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) 17:52:37 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x24000040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000440), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="009d6e76227c00", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, r1, 0x201, 0x70bd2b, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xb8, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x8801) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r6, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '/+^p*'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81c8}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4028000) 17:52:37 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:37 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000ab8fc3fcbf44177eec5bd937b1b1d31104530a6ae1426a44b905d303d1229170379e35b648dc5c89889175580f4156a6d76da5e9726a842df4e13a302c5f2024cb240b5b51c97000dcb762c539ce2e3669", @ANYRES16=r5, @ANYBLOB="012b9ec3cd97f2b1f8ff01"], 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r6) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x1}, 0x14}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) [ 986.257583] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 986.293676] nbd: must specify an index to disconnect [ 986.344421] nbd: must specify an index to disconnect [ 986.364960] nbd: must specify an index to disconnect [ 986.394316] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 986.405877] nbd: must specify an index to disconnect 17:52:38 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0xffffffffffffff80) 17:52:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:38 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:38 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000ab8fc3fcbf44177eec5bd937b1b1d31104530a6ae1426a44b905d303d1229170379e35b648dc5c89889175580f4156a6d76da5e9726a842df4e13a302c5f2024cb240b5b51c97000dcb762c539ce2e3669", @ANYRES16=r5, @ANYBLOB="012b9ec3cd97f2b1f8ff01"], 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r6) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r8, 0x0, 0x0) 17:52:38 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000ab8fc3fcbf44177eec5bd937b1b1d31104530a6ae1426a44b905d303d1229170379e35b648dc5c89889175580f4156a6d76da5e9726a842df4e13a302c5f2024cb240b5b51c97000dcb762c539ce2e3669", @ANYRES16=r5, @ANYBLOB="012b9ec3cd97f2b1f8ff01"], 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r6) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x1}, 0x14}}, 0x0) 17:52:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x4000000) 17:52:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) [ 987.100100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 987.126189] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:52:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x4000000) 17:52:38 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:38 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000ab8fc3fcbf44177eec5bd937b1b1d31104530a6ae1426a44b905d303d1229170379e35b648dc5c89889175580f4156a6d76da5e9726a842df4e13a302c5f2024cb240b5b51c97000dcb762c539ce2e3669", @ANYRES16=r5, @ANYBLOB="012b9ec3cd97f2b1f8ff01"], 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r6) [ 987.154016] nbd: must specify an index to disconnect [ 987.173725] nbd: must specify an index to disconnect [ 987.246205] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:52:39 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0xffffffffffffff80) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0xffffffffffffff80) (async) 17:52:39 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x24000040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000440), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="009d6e76227c00", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, r1, 0x201, 0x70bd2b, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xb8, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x8801) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r6, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '/+^p*'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81c8}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4028000) 17:52:39 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000ab8fc3fcbf44177eec5bd937b1b1d31104530a6ae1426a44b905d303d1229170379e35b648dc5c89889175580f4156a6d76da5e9726a842df4e13a302c5f2024cb240b5b51c97000dcb762c539ce2e3669", @ANYRES16=r5, @ANYBLOB="012b9ec3cd97f2b1f8ff01"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:52:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x4000000) 17:52:39 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) [ 987.984183] nbd: must specify an index to disconnect 17:52:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x70bd26}, 0x14}}, 0x1840) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r2) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="25d7ba2646df3dac8b19ba44f3fb112feb4f3a6f4b6a3e55fa8f67a86d9b90c30634e61a0962356574183cd95e3e513d04d1986ce97a267ef3415bc041b5484706df4762f462aa31597b08df51d16490dbc0ee328c2ce6cfc639d4a5d16661c7755c4945a65f894ffbabdde0e1cdba26eb250afac1002b9a864567c3bb0b9b49af211f52b3bafde129a4516cafe63725d180e465a499f0cf671b98cb8373d1a77f9ea484aaa7132d1b71d684c8cbbb37d59e3c76022959fb6258859630768923a1456c1b0193664933788b616beeb0122e301cb10249ae16170ba1ddbc199e4640a87a"], 0x14}, 0x1, 0x0, 0x0, 0x768b492a4c779aa3}, 0x20040881) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f00000004c0), r0) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r9) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400d734abe3e419e2ff913f37260000", @ANYRES16=r10, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) sendmsg$NBD_CMD_STATUS(r8, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r10, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000000000000001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0xfd83}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '&#'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x102}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000094}, 0xab4ba5c2facb8dbf) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="f800000000002a1eb5559100000e0002000000"], 0x14}}, 0x0) 17:52:39 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14040000ab8fc3fcbf44177eec5bd937b1b1d31104530a6ae1426a44b905d303d1229170379e35b648dc5c89889175580f4156a6d76da5e9726a842df4e13a302c5f2024cb240b5b51c97000dcb762c539ce2e3669", @ANYRES16=r5, @ANYBLOB="012b9ec3cd97f2b1f8ff01"], 0x14}}, 0x0) [ 988.008686] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 988.028292] nbd: must specify an index to disconnect 17:52:39 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) [ 988.147125] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:52:40 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x120) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:40 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 17:52:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:40 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) 17:52:40 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x4000814) 17:52:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:40 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:52:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:40 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:41 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x120) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) connect$bt_sco(r0, &(0x7f0000000040), 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x120) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) 17:52:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:41 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) 17:52:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:41 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) 17:52:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:41 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) [ 989.880458] nla_parse: 2 callbacks suppressed [ 989.880463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:52:41 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) 17:52:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:41 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) [ 989.927049] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:52:41 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x120) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) connect$bt_sco(r0, &(0x7f0000000040), 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2}}, 0x120) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) 17:52:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:41 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:41 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:41 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r4) [ 990.030834] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 990.063602] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:52:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) 17:52:41 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) 17:52:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:41 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000080)={0x35c7, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) connect$bt_sco(r0, &(0x7f0000000040), 0x8) [ 990.152240] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:52:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) 17:52:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:41 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:52:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:41 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) [ 990.217284] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:52:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) 17:52:42 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) 17:52:42 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) [ 990.312473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:52:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000100007941a7a923000000"], 0x1c}}, 0x0) 17:52:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) [ 990.445254] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:52:42 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000080)={0x35c7, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 17:52:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 17:52:42 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) 17:52:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) 17:52:42 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6_vti0\x00'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x58}}, 0x4008050) 17:52:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:42 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r1, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) 17:52:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 17:52:42 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) [ 991.147636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:52:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) 17:52:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 17:52:42 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r1, 0x1, 0x70bd2a, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0xfc83}]}, 0x38}}, 0x0) [ 991.277993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 991.737915] ================================================================== [ 991.745398] BUG: KASAN: use-after-free in __lock_acquire+0x2c57/0x3f20 [ 991.752041] Read of size 8 at addr ffff8880a92ca1a0 by task kworker/1:1/10290 [ 991.759284] [ 991.760893] CPU: 1 PID: 10290 Comm: kworker/1:1 Not tainted 4.14.282-syzkaller #0 [ 991.768489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.777824] Workqueue: events sco_sock_timeout [ 991.782381] Call Trace: [ 991.784950] dump_stack+0x1b2/0x281 [ 991.788554] print_address_description.cold+0x54/0x1d3 [ 991.793811] kasan_report_error.cold+0x8a/0x191 [ 991.798460] ? __lock_acquire+0x2c57/0x3f20 [ 991.802757] __asan_report_load8_noabort+0x68/0x70 [ 991.807681] ? __lock_acquire+0x2c57/0x3f20 [ 991.811978] __lock_acquire+0x2c57/0x3f20 [ 991.816101] ? trace_hardirqs_on+0x10/0x10 [ 991.820335] ? debug_object_deactivate+0x1da/0x2e0 [ 991.825245] ? trace_hardirqs_on+0x10/0x10 [ 991.829460] ? sco_sock_timeout+0x5d/0x1a0 [ 991.833790] lock_acquire+0x170/0x3f0 [ 991.837576] ? sco_sock_timeout+0x7b/0x1a0 [ 991.841790] _raw_spin_lock+0x2a/0x40 [ 991.845566] ? sco_sock_timeout+0x7b/0x1a0 [ 991.849780] sco_sock_timeout+0x7b/0x1a0 [ 991.853837] process_one_work+0x793/0x14a0 [ 991.858051] ? work_busy+0x320/0x320 [ 991.861740] ? worker_thread+0x158/0xff0 [ 991.865796] ? _raw_spin_unlock_irq+0x24/0x80 [ 991.870308] worker_thread+0x5cc/0xff0 [ 991.874185] ? rescuer_thread+0xc80/0xc80 [ 991.878309] kthread+0x30d/0x420 [ 991.881651] ? kthread_create_on_node+0xd0/0xd0 [ 991.886312] ret_from_fork+0x24/0x30 [ 991.890006] [ 991.891610] Allocated by task 20844: [ 991.895298] kasan_kmalloc+0xeb/0x160 [ 991.899073] __kmalloc+0x15a/0x400 [ 991.902587] sk_prot_alloc+0x1ba/0x290 [ 991.906451] sk_alloc+0x36/0xcd0 [ 991.909808] __netlink_create+0x63/0x270 [ 991.913928] netlink_create+0x276/0x520 [ 991.917874] __sock_create+0x303/0x620 [ 991.921775] SyS_socket+0xd1/0x1b0 [ 991.925289] do_syscall_64+0x1d5/0x640 [ 991.929151] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 991.934328] [ 991.935941] Freed by task 20837: [ 991.939284] kasan_slab_free+0xc3/0x1a0 [ 991.943237] kfree+0xc9/0x250 [ 991.946315] __sk_destruct+0x5e3/0x760 [ 991.950177] __sk_free+0xd9/0x2d0 [ 991.953605] sk_free+0x2b/0x40 [ 991.956772] deferred_put_nlk_sk+0xed/0x260 [ 991.961086] rcu_process_callbacks+0x780/0x1180 [ 991.965731] __do_softirq+0x24d/0x9ff [ 991.969502] [ 991.971113] The buggy address belongs to the object at ffff8880a92ca100 [ 991.971113] which belongs to the cache kmalloc-2048 of size 2048 [ 991.984008] The buggy address is located 160 bytes inside of [ 991.984008] 2048-byte region [ffff8880a92ca100, ffff8880a92ca900) [ 991.995947] The buggy address belongs to the page: [ 992.000853] page:ffffea0002a4b280 count:1 mapcount:0 mapping:ffff8880a92ca100 index:0x0 compound_mapcount: 0 [ 992.010797] flags: 0xfff00000008100(slab|head) [ 992.015362] raw: 00fff00000008100 ffff8880a92ca100 0000000000000000 0000000100000003 [ 992.023240] raw: ffffea00029610a0 ffffea00024d37a0 ffff88813fe74c40 0000000000000000 [ 992.031094] page dumped because: kasan: bad access detected [ 992.036775] [ 992.038376] Memory state around the buggy address: [ 992.043285] ffff8880a92ca080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 992.050617] ffff8880a92ca100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 992.058037] >ffff8880a92ca180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 992.065366] ^ [ 992.069746] ffff8880a92ca200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 992.077091] ffff8880a92ca280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 992.084422] ================================================================== [ 992.091751] Disabling lock debugging due to kernel taint [ 992.097176] Kernel panic - not syncing: panic_on_warn set ... [ 992.097176] [ 992.104519] CPU: 1 PID: 10290 Comm: kworker/1:1 Tainted: G B 4.14.282-syzkaller #0 [ 992.113326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.122764] Workqueue: events sco_sock_timeout [ 992.127326] Call Trace: [ 992.129902] dump_stack+0x1b2/0x281 [ 992.133593] panic+0x1f9/0x42d [ 992.136770] ? add_taint.cold+0x16/0x16 [ 992.140732] ? lock_downgrade+0x740/0x740 [ 992.144920] kasan_end_report+0x43/0x49 [ 992.148910] kasan_report_error.cold+0xa7/0x191 [ 992.153563] ? __lock_acquire+0x2c57/0x3f20 [ 992.157866] __asan_report_load8_noabort+0x68/0x70 [ 992.162773] ? __lock_acquire+0x2c57/0x3f20 [ 992.167073] __lock_acquire+0x2c57/0x3f20 [ 992.171201] ? trace_hardirqs_on+0x10/0x10 [ 992.175422] ? debug_object_deactivate+0x1da/0x2e0 [ 992.180331] ? trace_hardirqs_on+0x10/0x10 [ 992.184542] ? sco_sock_timeout+0x5d/0x1a0 [ 992.188759] lock_acquire+0x170/0x3f0 [ 992.192624] ? sco_sock_timeout+0x7b/0x1a0 [ 992.196833] _raw_spin_lock+0x2a/0x40 [ 992.200613] ? sco_sock_timeout+0x7b/0x1a0 [ 992.204997] sco_sock_timeout+0x7b/0x1a0 [ 992.209052] process_one_work+0x793/0x14a0 [ 992.213266] ? work_busy+0x320/0x320 [ 992.216951] ? worker_thread+0x158/0xff0 [ 992.220990] ? _raw_spin_unlock_irq+0x24/0x80 [ 992.225459] worker_thread+0x5cc/0xff0 [ 992.229324] ? rescuer_thread+0xc80/0xc80 [ 992.233448] kthread+0x30d/0x420 [ 992.236789] ? kthread_create_on_node+0xd0/0xd0 [ 992.241434] ret_from_fork+0x24/0x30 [ 992.245304] Kernel Offset: disabled [ 992.248912] Rebooting in 86400 seconds..