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", 0xd69}], 0x8, &(0x7f0000003700)=[{0x18, 0x0, 0x0, "d6"}, {0xe0, 0x0, 0x0, "da0f74139deeb576f263277790fda0bcfaefd5abcfd72defe5546dd45d78fb365abfa48c7d5910e2a379cbe374bf7482153c050ddb73b79211328b08f9ed616444655eda5db539547877982d541a56512ffdb87c072334a277f021c1815905b4dc9c5ea080449dbb0bac521d7d0f5c8d866cf4dc4ff388f16292697dafc01f53295603ff3ee61a2d0acbfe31ce684c81983bb18c0c9219d3df09e258d90ed58dd5938887508b805476ae06ef7a9394ed68dacae1606e2606eb1eafe4bc21fc133e595aac2d6c4c2370"}, {0x108, 0x0, 0x0, "6ed028bdedb860cf176192bed145e24d32a3fef0764aa7e53fac73af1ad47591bcd15f501f3932c696ea5fe34be290efd563da2d6b3655f2d825f2432481a7aa4a29e5068c871a284db72705d96f322d1422bd77288c149cedfd19c777176d57d4a1dffbceceb3b3330fe8b6e602507c5cfb8b42851e1dae04273fd9de262896832dfa5ca74b1707940edaabb9d0092975ac00321bccdb58a1026cd1764092d07d07c29d7e82b15d17216dcd3d8dd7e1d3e4c303bf92da0c40c11c9cdbd442ba97d68c2db7675370e214a1a7d86c58ed467ba98c9124dc42626ccfc501697c1bfdc5f3170bc1f083c8eb64ee6149cf7a60"}], 0x200}, 0x0) 03:21:24 executing program 1: setrlimit(0x8, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, 0x0) 03:21:24 executing program 0: select(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 03:21:24 executing program 5: munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x1810, 0xffffffffffffffff, 0x0) 03:21:24 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @remote, @val, {@ipv6}}, 0x0) 03:21:24 executing program 2: accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x2) 03:21:24 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @val, {@ipv6}}, 0x0) 03:21:24 executing program 0: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x4}) 03:21:24 executing program 1: select(0x4, 0x0, &(0x7f0000000080)={0x13}, &(0x7f00000000c0), &(0x7f0000000100)) 03:21:24 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x212, 0x0) mmap(&(0x7f0000f1c000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0) msync(&(0x7f0000f1c000/0x3000)=nil, 0x3000, 0x4) 03:21:24 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@in6, 0xc, &(0x7f0000002340), 0x200020, &(0x7f00000023c0)=""/4096, 0x1000}, 0x0) 03:21:24 executing program 4: syz_emit_ethernet(0x4f, &(0x7f0000000040)={@local, @random="d574ead08c13", @val, {@ipv6}}, 0x0) 03:21:24 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @random="d574ead08c13", @val, {@ipv6}}, 0x0) 03:21:24 executing program 0: syz_emit_ethernet(0x78, &(0x7f0000000100)={@local, @empty, @val, {@ipv6}}, 0x0) 03:21:24 executing program 3: pipe2(&(0x7f0000001dc0)={0xffffffffffffffff}, 0x10004) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/160, 0xa0}], 0x1) 03:21:24 executing program 2: syz_emit_ethernet(0x23bf, &(0x7f0000001140)={@empty, @empty, @val, {@ipv6}}, 0x0) 03:21:24 executing program 5: stat(&(0x7f0000000000)='.\x00', &(0x7f0000000040)) 03:21:24 executing program 4: mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000) 03:21:24 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x212, 0x0) mmap(&(0x7f0000f1c000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0) munmap(&(0x7f0000f1a000/0x3000)=nil, 0x3000) 03:21:24 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@broadcast, @random="499e83b831a1", @val, {@ipv6}}, 0x0) 03:21:24 executing program 0: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 03:21:24 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{r0, 0x1}], 0x1, 0x0) 03:21:24 executing program 5: setrlimit(0x8, &(0x7f0000000080)) socket$unix(0x1, 0x2, 0x0) 03:21:24 executing program 1: r0 = socket(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000003900)={&(0x7f0000000040)=@in={0x2, 0x2}, 0xc, 0x0}, 0x0) 03:21:24 executing program 4: r0 = getuid() setreuid(0xffffffffffffffff, r0) 03:21:24 executing program 2: syz_emit_ethernet(0x4de, &(0x7f0000000200)={@local, @random="eb3301e18283", @val, {@ipv6}}, 0x0) 03:21:24 executing program 3: mlock(&(0x7f0000800000/0x800000)=nil, 0x800000) munmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000) 03:21:24 executing program 0: syz_emit_ethernet(0x5e, &(0x7f0000000100)={@local, @random="1bb1ebc64037", @val, {@ipv6}}, 0x0) 03:21:24 executing program 1: chroot(&(0x7f0000000000)='./file0\x00') mlock(&(0x7f0000ff6000/0x2000)=nil, 0x2000) munlock(&(0x7f0000fef000/0x11000)=nil, 0x11000) 03:21:24 executing program 4: accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x0) 03:21:24 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x212, 0x0) close(r0) 03:21:24 executing program 5: r0 = socket(0x18, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x0, 0x1000000000000}, 0x10) 03:21:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) poll(&(0x7f0000000140)=[{}, {}, {}], 0x200000000000005f, 0x0) 03:21:24 executing program 1: mlock(&(0x7f0000ff7000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ff7000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4) 03:21:24 executing program 4: r0 = socket(0x18, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, 0x0, 0x0) 03:21:24 executing program 2: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x7fffffffffffffff}, 0x0) 03:21:24 executing program 0: accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) munmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x0) 03:21:24 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @random="b305db3a6fff", @val, {@ipv6}}, 0x0) 03:21:24 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@random="1d3443674711", @empty, @val, {@ipv6}}, 0x0) 03:21:24 executing program 1: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 03:21:24 executing program 4: syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @random="d574ead08c13", @val, {@ipv6}}, 0x0) 03:21:24 executing program 2: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 03:21:24 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x212, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) shutdown(r0, 0x2) 03:21:24 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1004, &(0x7f0000000040), 0x4) 03:21:24 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x212, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 03:21:24 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="2d1952c349245cc6d89161dc90a740c4a29632ad468486602bb76bb9b22bfd310baa609843ddb8e34fa9279c0c87e01a34d5a67d2264c0ee3883ab43aa632d556db4aa565301740df0ccbb59c6a202aaee748d5342d741873f49359d7b8dfcf64865a91bbae6352e5570aa09689adf0d61", 0x71}], 0x1) 03:21:25 executing program 0: r0 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000000), 0x4) 03:21:25 executing program 5: mlock(&(0x7f0000f58000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) 03:21:25 executing program 4: shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x4000)=nil, 0x0) shmdt(0x0) 03:21:25 executing program 3: mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ff7000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000) 03:21:25 executing program 0: syz_emit_ethernet(0x26, &(0x7f00000000c0)={@local, @empty, @val, {@ipv4}}, 0x0) 03:21:25 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f0000000080)) 03:21:25 executing program 4: r0 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000000)=0x3, 0x4) 03:21:25 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="1bb1ebc64037", @val, {@ipv6}}, 0x0) 03:21:25 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000040), 0x4) 03:21:25 executing program 3: syz_emit_ethernet(0x1fbf, &(0x7f0000001140)={@empty, @empty, @val, {@ipv6}}, 0x0) 03:21:25 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) mlock(&(0x7f0000ff6000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ff5000/0x2000)=nil, 0x2000) msync(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x4) 03:21:25 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) 03:21:25 executing program 4: socketpair(0x1, 0x5, 0x1, &(0x7f00000000c0)) 03:21:25 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x212, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="2b10a381c7a7efb682b430e1587183cffc511ce961fe91575cbdfeb132891cfb5f1a8b887faadfd7a1133923798a9879e16bccbe3163c98e8244d72e7147c89d3cbf116f79fbe318f0b02a92644e3832fd790d06061c76a865d5880cba7b88169184f4cf9d53415e5d7e5a46bc22253e93f93ed5eab430d134066c78b2f21c8b9a5687becf97afbda6400a83c62d23cc9a", 0x91}], 0x1}, 0x0) shutdown(r0, 0x0) 03:21:25 executing program 3: mlock(&(0x7f0000ff7000/0x2000)=nil, 0x2000) accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x0) 03:21:25 executing program 5: poll(0x0, 0x2e, 0x0) 03:21:25 executing program 0: syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @local, @val, {@ipv6}}, 0x0) 03:21:25 executing program 1: socketpair(0x1, 0x3, 0x6, 0x0) 03:21:25 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000040), 0x4) 03:21:25 executing program 3: syz_emit_ethernet(0x22, &(0x7f0000000040)={@random="c5e2717a609a", @broadcast, @val, {@ipv4}}, 0x0) 03:21:25 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) readv(r0, &(0x7f0000000000), 0x1000000000000274) 03:21:25 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001840)={@map, 0xffffffffffffffff, 0x1b}, 0x14) 03:21:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000001c0)) 03:21:25 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x148) lstat(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)) 03:21:25 executing program 4: mlock(&(0x7f0000ff1000/0xf000)=nil, 0xf000) munlock(&(0x7f0000ff8000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000) 03:21:25 executing program 2: syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @empty, @val, {@ipv4}}, 0x0) 03:21:25 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x212, 0x0) write(r0, 0x0, 0x0) 03:21:25 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) 03:21:25 executing program 0: socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000000)) 03:21:25 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)=""/185, 0x1a, 0xb9, 0x1}, 0x20) 03:21:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x0, 0x0, 0x0, 0x1e615e11613f6a2b, 0x1}, 0x48) 03:21:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 03:21:25 executing program 4: bpf$PROG_LOAD(0x21, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 03:21:25 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000001c0)=""/241, 0x30, 0xf1, 0x1}, 0x20) 03:21:25 executing program 0: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) 03:21:25 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/185, 0x0, 0xb9}, 0x20) 03:21:25 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000040)=""/185, 0x26, 0xb9, 0x1}, 0x20) 03:21:25 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001140)={0x0, 0x0, 0x18}, 0x10) 03:21:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000005900)={0x0, 0x0, 0x0}, 0x0) 03:21:25 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = syz_clone(0xc4100, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 03:21:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000180)='S', 0x1}], 0x2}, 0x0) 03:21:25 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001300)={0xffffffffffffffff, 0x0, 0x18}, 0xc) 03:21:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003100)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x803e0000}, 0x0) 03:21:25 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004e00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x1b081) 03:21:25 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') r0 = syz_clone(0x82204000, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000001080), &(0x7f00000010c0)) syz_open_procfs$namespace(r0, &(0x7f0000001100)='ns/pid_for_children\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)) 03:21:25 executing program 0: bpf$PROG_LOAD(0xc, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 03:21:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 03:21:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x48) 03:21:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$sock(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x0) 03:21:25 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000007c0)={0xffffffffffffffff}, 0x4) 03:21:25 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000006640)={&(0x7f0000006500)=@l2tp={0x2, 0x0, @local}, 0xfffffffffffffde1, 0x0, 0xfffffffffffffe8c}, 0x0) 03:21:25 executing program 4: bpf$PROG_LOAD(0x1e, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 03:21:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002940)={0x18, 0x1, &(0x7f0000001840)=@raw=[@generic], &(0x7f0000001880)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:21:25 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000006680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000006b00)={0x0, 0x0, &(0x7f0000006840)=[{&(0x7f00000066c0)='N', 0x1}], 0x1, &(0x7f0000006880)=[{0x10}, {0x10}], 0x20}, 0x0) 03:21:26 executing program 2: socketpair(0x0, 0x3edb78090453675, 0x0, 0x0) 03:21:26 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x8, 0x10, 0x0}, 0x80) 03:21:26 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000700)=""/108, 0x0, 0x6c}, 0x20) 03:21:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001080)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001140)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, 0x0}, 0x0) 03:21:26 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28a042, 0x0) 03:21:26 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) 03:21:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x0) 03:21:26 executing program 2: syz_clone(0x20204000, 0x0, 0x0, 0x0, 0x0, 0x0) 03:21:26 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) 03:21:26 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001180), 0x4) 03:21:26 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xa8, &(0x7f0000000080)=""/168, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x8, 0x10, &(0x7f0000000480), 0x10}, 0x80) 03:21:26 executing program 3: recvmsg$unix(0xffffffffffffffff, 0x0, 0x80002041) 03:21:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000380)="a0", 0x1}], 0x2}, 0x0) 03:21:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14}, 0x48) 03:21:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x3) 03:21:26 executing program 5: socketpair(0x10, 0x3, 0x7fffffff, &(0x7f00000003c0)) 03:21:26 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') r0 = syz_clone(0x82204000, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x0) syz_open_procfs$namespace(r0, 0x0) 03:21:26 executing program 3: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0xe7) 03:21:26 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) 03:21:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28a042, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 03:21:26 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480), 0x10}, 0x80) 03:21:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x0) close(r1) 03:21:27 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0xb}]}}, &(0x7f0000000200)=""/253, 0x26, 0xfd, 0x1}, 0x20) 03:21:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003100)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x11}, 0x0) 03:21:27 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x1, &(0x7f00000002c0)=@raw=[@ldst], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2ec46}, 0x80) 03:21:27 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xf27b8a38f31cfff3}, 0xc) 03:21:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002e80)}, 0x80) 03:21:27 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 03:21:27 executing program 4: syz_clone(0x82204000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 03:21:27 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004e00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) 03:21:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000180)='S', 0x1}], 0x2, &(0x7f0000000540)=[{0x10}, {0x10}], 0x20}, 0x0) 03:21:27 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map=0x1, 0xffffffffffffffff, 0x5}, 0x10) 03:21:27 executing program 3: bpf$PROG_LOAD(0x19, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 03:21:27 executing program 5: socketpair(0x10, 0x3, 0x12, &(0x7f00000003c0)) 03:21:27 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x5f3800, 0x0) 03:21:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x84, 0xffffffffffffffff, 0x5}, 0x48) 03:21:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x1, &(0x7f0000000100)=@raw=[@jmp], &(0x7f0000000180)='GPL\x00', 0x1, 0x96, &(0x7f00000001c0)=""/150, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:21:27 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) 03:21:27 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002940)={0x18, 0x1, &(0x7f0000001840)=@raw=[@generic={0x3, 0x0, 0x8, 0x7}], &(0x7f0000001880)='GPL\x00', 0x6, 0x1000, &(0x7f00000018c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002900)={0x1, 0x1}, 0x10}, 0x80) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 03:21:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000840)={&(0x7f00000002c0)=@abs, 0x6e, 0x0}, 0x0) 03:21:27 executing program 5: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socketpair(0x0, 0x0, 0x0, &(0x7f0000002e80)) 03:21:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, 0x48) 03:21:28 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3, 0xcc, &(0x7f0000000100)=""/204, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:21:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) 03:21:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002940)={0x18, 0x2, &(0x7f0000001840)=@raw=[@generic, @func], &(0x7f0000001880)='GPL\x00', 0x6, 0x1000, &(0x7f00000018c0)=""/4096, 0x41100, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002cc0), 0x4) 03:21:28 executing program 5: bpf$PROG_LOAD(0xa, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 03:21:28 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)='\v', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/241, 0xf1}], 0x1}, 0x0) 03:21:28 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 03:21:28 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10c00, 0x0) 03:21:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000240)=@sco, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="fb", 0x1}, {&(0x7f0000000380)="a0", 0x1}], 0x2, &(0x7f0000000540)=[{0x28, 0x0, 0x0, "d8160afca249bab4a55bf7b277011c2312"}], 0x28}, 0x0) 03:21:28 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 03:21:28 executing program 1: socketpair(0x10, 0x0, 0xf2, &(0x7f0000002e80)) 03:21:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) 03:21:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r0) 03:21:28 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000001100)='ns/pid_for_children\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)) 03:21:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002940)={0x0, 0x1, &(0x7f0000001840)=@raw=[@generic], &(0x7f0000001880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:21:28 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x1}]}}, &(0x7f0000000040)=""/234, 0x26, 0xea, 0x1}, 0x20) 03:21:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003100)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[{0x10}], 0x10}, 0x0) 03:21:28 executing program 2: socketpair(0x5, 0x0, 0x0, &(0x7f0000000140)) 03:21:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003100)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000035c0)={&(0x7f0000003140)=@can, 0x80, 0x0}, 0x20008001) 03:21:28 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@txtime={{0x18}}], 0x18}, 0x0) 03:21:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003100)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3e80}, 0x0) 03:21:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003100)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x20008001) 03:21:28 executing program 5: syz_clone(0x0, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) 03:21:28 executing program 4: syz_clone(0x0, &(0x7f0000000580), 0x0, 0x0, &(0x7f0000000600), &(0x7f0000000640)) 03:21:28 executing program 3: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0}, 0x38) 03:21:28 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000001ac0), 0x8) 03:21:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:21:28 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x84000, 0x0) 03:21:28 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 03:21:28 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = dup(r0) write$eventfd(r1, 0x0, 0xff25) 03:21:28 executing program 0: pipe(&(0x7f00000007c0)={0xffffffffffffffff}) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0) 03:21:28 executing program 4: shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) 03:21:28 executing program 1: pipe(&(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 03:21:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002800)={0xffffffffffffffff}) dup(r0) 03:21:28 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) 03:21:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, 0x0) 03:21:28 executing program 4: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFSYNC(r0, 0x0, 0x0) 03:21:28 executing program 1: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) statx(r0, &(0x7f00000018c0)='./file0\x00', 0x0, 0x0, 0x0) 03:21:28 executing program 3: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, 0x0) 03:21:28 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_rm_watch(r0, 0x0) 03:21:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) 03:21:28 executing program 2: semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000001100)=""/157) 03:21:28 executing program 4: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) dup(r0) 03:21:29 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x3938700}, &(0x7f0000000940)={0x0}) 03:21:29 executing program 3: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) write$P9_RWALK(r1, 0x0, 0x0) 03:21:29 executing program 5: fchownat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0xee01, 0xee00, 0x0) 03:21:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 03:21:29 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RFLUSH(r0, &(0x7f0000000200)={0x7}, 0xfffffffffffffe04) 03:21:29 executing program 4: semget$private(0x0, 0x6, 0x5ce) 03:21:29 executing program 3: semget$private(0x0, 0x2, 0x420) 03:21:29 executing program 5: mq_open(&(0x7f0000000000)='+).*$^.][@/&,$\x00', 0x0, 0x0, 0x0) 03:21:29 executing program 0: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_devices(r0, &(0x7f00000010c0)='devices.deny\x00', 0x2, 0x0) 03:21:29 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = dup(r0) write$eventfd(r1, 0x0, 0x0) 03:21:29 executing program 2: readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/120, 0x78) 03:21:29 executing program 4: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) fchownat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:21:29 executing program 3: semget(0x1, 0x0, 0x610) 03:21:29 executing program 1: timer_create(0x7, 0x0, &(0x7f0000000300)) 03:21:29 executing program 0: add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x29, 0x0) 03:21:29 executing program 5: timer_create(0x7, &(0x7f00000002c0)={0x0, 0x24, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) 03:21:29 executing program 2: write$P9_RWALK(0xffffffffffffffff, 0x0, 0x30) 03:21:29 executing program 4: semget$private(0x0, 0x2, 0xb6) 03:21:29 executing program 3: semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f0000000040)=""/89) 03:21:29 executing program 1: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x0) 03:21:29 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r0, 0x0, 0x0) 03:21:29 executing program 0: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) 03:21:29 executing program 3: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:21:29 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) 03:21:29 executing program 4: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_freezer_state(r0, 0x0, 0x0) 03:21:29 executing program 1: r0 = inotify_init1(0x0) dup(r0) 03:21:29 executing program 2: pselect6(0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f00000008c0)={0x0, 0x3938700}, &(0x7f0000000940)={0x0}) 03:21:29 executing program 5: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) write$nbd(r1, 0x0, 0x31) 03:21:29 executing program 4: semctl$SEM_STAT_ANY(0x0, 0x3, 0x14, &(0x7f0000000000)=""/11) 03:21:29 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 03:21:29 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001a40), 0x117882, 0x0) 03:21:29 executing program 1: r0 = semget(0x3, 0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000280)={{0x2, 0xee01}}) 03:21:29 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) recvmmsg$unix(r1, 0x0, 0x0, 0x140, 0x0) 03:21:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 03:21:29 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000900), 0x40880, 0x0) 03:21:29 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 03:21:29 executing program 3: timer_create(0x5, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000080)) 03:21:29 executing program 5: semget(0x3, 0x1, 0x200) 03:21:29 executing program 1: r0 = semget(0x3, 0x0, 0x0) semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f0000001000)=""/97) 03:21:29 executing program 0: semget$private(0x0, 0x3, 0x110) 03:21:29 executing program 2: syz_clone(0x0, 0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600), 0x0) 03:21:29 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) 03:21:29 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x0) 03:21:29 executing program 0: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, 0x0, 0x0) 03:21:29 executing program 1: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000080)=""/25) 03:21:30 executing program 4: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) 03:21:30 executing program 2: semget$private(0x0, 0x1, 0x4b0) 03:21:30 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff}) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 03:21:30 executing program 3: semget$private(0x0, 0x1, 0x5cd) 03:21:30 executing program 0: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, 0x0) 03:21:30 executing program 1: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 03:21:30 executing program 1: semget$private(0x0, 0x3, 0x724) 03:21:30 executing program 5: syz_clone(0x0, 0x0, 0x3a, 0x0, 0x0, 0x0) 03:21:30 executing program 3: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, 0x0) 03:21:30 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0) 03:21:30 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) 03:21:30 executing program 4: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) 03:21:30 executing program 1: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) 03:21:30 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/161) 03:21:30 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, 0x0, 0x0) 03:21:30 executing program 0: r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000040)=""/195) 03:21:30 executing program 4: timer_create(0x0, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000140), 0x0) 03:21:30 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_freezer_state(r0, &(0x7f0000003ec0), 0x2, 0x0) 03:21:30 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATu(r0, 0x0, 0x0) 03:21:30 executing program 5: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) 03:21:30 executing program 3: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) 03:21:30 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) 03:21:30 executing program 4: pipe(&(0x7f00000007c0)={0xffffffffffffffff}) write$P9_RSTAT(r0, 0x0, 0xffffffffffffff6f) 03:21:30 executing program 1: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_gettime(r0, 0x0) 03:21:30 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) dup(r0) 03:21:30 executing program 5: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, 0x0, 0x0) 03:21:30 executing program 3: openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) 03:21:30 executing program 0: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) readlinkat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/120, 0x78) 03:21:30 executing program 4: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10020, 0x0, 0x0) 03:21:30 executing program 2: pipe2$9p(&(0x7f0000008240), 0x80000) 03:21:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x20, &(0x7f0000001040)={0x0, 0x989680}) 03:21:30 executing program 3: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAME(r0, 0x0, 0x0) 03:21:30 executing program 4: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(r0, 0x0, 0x0) 03:21:30 executing program 5: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$netlink(r0, 0x0, 0x0) 03:21:30 executing program 0: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) 03:21:30 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2440, 0x0) r0 = open$dir(&(0x7f0000000300)='./file0\x00', 0x102, 0x0) write$binfmt_elf64(r0, 0x0, 0x16) 03:21:30 executing program 4: mq_open(&(0x7f0000000080)='&\x9a\x12\x1e\xbe)K]\x12^-Z\xf4&)\x00U\x85\xa4\xe1\x841\x15\xd7J/c\x94\xf1\xbc\x0f\n\xa1\x7f!\xf9\x82&]\xb2}=\x81\xca{\x11\xe3\xc2\xa6\xd2\xf1\xfb(\xa7\xfc', 0x40, 0x0, 0x0) 03:21:30 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 03:21:30 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0) 03:21:30 executing program 5: r0 = semget(0x3, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/208) 03:21:30 executing program 0: r0 = semget$private(0x0, 0x1, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x1}], 0x1, 0x0) 03:21:31 executing program 2: semget(0x1, 0x4, 0x2b3) [ 1101.887619][ T26] audit: type=1804 audit(1647400890.990:254): pid=6281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1883659781/syzkaller.pAsSYT/3100/file0" dev="sda1" ino=1171 res=1 errno=0 03:21:31 executing program 5: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0x0) 03:21:31 executing program 3: pselect6(0x40, &(0x7f0000000800), 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x3938700}, 0x0) 03:21:31 executing program 0: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLCREATE(r0, 0x0, 0x0) 03:21:31 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0) 03:21:31 executing program 1: pipe(&(0x7f00000007c0)={0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) 03:21:31 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, 0x0) 03:21:31 executing program 4: statx(0xffffffffffffffff, 0x0, 0x4500, 0x0, 0x0) 03:21:31 executing program 5: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_settime(r0, 0x0, 0x0, 0x0) 03:21:31 executing program 3: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r0, 0x0, 0x0, 0x0) 03:21:31 executing program 0: pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 03:21:31 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RATTACH(r0, 0x0, 0x0) 03:21:31 executing program 1: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, 0x0, 0x0) 03:21:31 executing program 4: semget$private(0x0, 0x2, 0x4a1) 03:21:31 executing program 5: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) write$P9_RMKNOD(r1, 0x0, 0x0) 03:21:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f00000000c0)) 03:21:31 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, 0x0) 03:21:31 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) getpeername(r0, 0x0, 0x0) 03:21:31 executing program 0: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_add_watch(r0, 0x0, 0x0) 03:21:31 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r0, 0x0, 0x0) 03:21:31 executing program 1: pipe(&(0x7f00000007c0)={0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) 03:21:31 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40002001) 03:21:31 executing program 2: syz_clone(0x860000, &(0x7f0000000580)='b', 0x1, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) 03:21:31 executing program 0: semget$private(0x0, 0x1, 0x181) 03:21:31 executing program 4: pipe(&(0x7f00000007c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 03:21:31 executing program 5: semget(0x3, 0x0, 0x3a) 03:21:31 executing program 1: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, 0x0, 0x0) 03:21:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000002a80)='wg0\x00', 0x4) 03:21:31 executing program 0: timer_create(0x1, &(0x7f0000000080)={0x0, 0x22}, &(0x7f00000000c0)) 03:21:31 executing program 4: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) 03:21:31 executing program 5: syz_clone(0x2024000, 0x0, 0x0, 0x0, 0x0, 0x0) 03:21:31 executing program 2: syz_clone(0x860000, &(0x7f0000000580)='b', 0x1, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) 03:21:31 executing program 1: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x0) 03:21:31 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)) 03:21:31 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = dup(r0) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 03:21:31 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) 03:21:31 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) 03:21:31 executing program 3: semget$private(0x0, 0x4, 0x416) 03:21:31 executing program 2: syz_clone(0x860000, &(0x7f0000000580)='b', 0x1, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) 03:21:31 executing program 0: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x4) 03:21:31 executing program 1: statx(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x0) 03:21:31 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 03:21:31 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x0) 03:21:31 executing program 0: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) 03:21:31 executing program 3: r0 = semget(0x0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000100)=[{}], 0x1, 0x0) 03:21:31 executing program 1: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) 03:21:32 executing program 4: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r0, 0x0, 0x0) 03:21:32 executing program 0: timer_create(0x2, &(0x7f0000019240)={0x0, 0x0, 0x1}, &(0x7f0000019280)) 03:21:32 executing program 2: syz_clone(0x860000, &(0x7f0000000580)='b', 0x1, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) 03:21:32 executing program 3: r0 = eventfd(0x0) dup(r0) 03:21:32 executing program 5: r0 = semget(0x2, 0x1, 0x2) semtimedop(r0, &(0x7f0000000140)=[{}, {0x3, 0x6, 0x800}], 0x2, &(0x7f0000000180)={0x77359400}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, 0x0, 0x0) r2 = mq_open(&(0x7f0000000080)=',-\\-*:,Y#^\x00', 0xc7104c12a1a77be3, 0x4, &(0x7f00000000c0)={0x1, 0x1, 0x40, 0x400}) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, 0x0) sendmsg$unix(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x2004c000}, 0x4040004) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0) write$P9_RCREATE(r4, &(0x7f0000000040)={0x37, 0x73, 0x1, {{0x20, 0x0, 0x3}, 0x5}}, 0x18) 03:21:32 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 03:21:32 executing program 1: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSRS485(r0, 0x542f, 0x0) 03:21:32 executing program 5: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) accept(r1, 0x0, 0x0) 03:21:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, &(0x7f0000001040)={0x0, 0x989680}) 03:21:32 executing program 0: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) 03:21:32 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 03:21:32 executing program 4: semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000000)=""/253) 03:21:32 executing program 1: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITHAW(r0, 0xc0045878) 03:21:32 executing program 5: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 03:21:32 executing program 0: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 03:21:32 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x404600, 0x0) 03:21:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xa4) 03:21:32 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, 0x0, 0x1) 03:21:32 executing program 5: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, 0x0, 0x0) 03:21:32 executing program 0: r0 = semget(0x1, 0x0, 0x0) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f0000000000)=""/123) 03:21:33 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000002140)=""/209) 03:21:33 executing program 4: semget(0x3, 0x1, 0x20) 03:21:33 executing program 5: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) 03:21:33 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) write$P9_RREADLINK(r1, 0x0, 0x0) 03:21:33 executing program 1: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RUNLINKAT(r0, 0x0, 0x0) 03:21:33 executing program 0: r0 = semget(0x3, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)) 03:21:33 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x0) 03:21:33 executing program 2: semget(0x3, 0x0, 0x181) 03:21:33 executing program 0: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) 03:21:33 executing program 4: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000000)=""/234) 03:21:33 executing program 1: semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f00000000c0)=""/142) 03:21:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f0000000780)) 03:21:33 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 03:21:33 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) dup(r0) 03:21:33 executing program 4: semget$private(0x0, 0x4, 0x241) 03:21:33 executing program 5: shmget(0x1, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) 03:21:33 executing program 0: semget$private(0x0, 0x3, 0xc8) 03:21:33 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 03:21:33 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATu(r0, 0x0, 0x4) 03:21:33 executing program 1: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2440, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x200, 0x20) 03:21:33 executing program 4: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) 03:21:33 executing program 5: semget(0x0, 0x1, 0x80) 03:21:33 executing program 0: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 03:21:33 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, 0x0, 0x0) 03:21:33 executing program 4: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERRORu(r0, 0x0, 0x0) 03:21:33 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 03:21:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f00000000c0)) 03:21:33 executing program 0: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) r3 = getpgid(0x0) syz_open_procfs$userns(r3, 0x0) r4 = getpgid(0x0) syz_open_procfs$userns(r4, 0x0) statx(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x0, 0x4, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000000740)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0xc, &(0x7f0000000680)=[{&(0x7f0000000140)={0x378, 0x1c, 0x100, 0x70bd29, 0x25dfdbfe, "", [@typed={0x8, 0x33, 0x0, 0x0, @pid}, @nested={0x131, 0x65, 0x0, 0x1, [@generic="bb396c9c78af49a2bc03f2e70345357c4b930b3915c51e11df731aecf20c0b23c316807e8e36687601f19859451988ffd00d2a9b22f2cd582b46093678df7e14f15d035b3416d3f3248d039a872e2d48d3b1d5aee8f152", @generic="3d66ad0f59dffa5015f246deb17b3a45533dfda00fa0edb68a9d92d82b228a07f67f9a9be7d6c1cb77444b4edeab7fcbc1fadddfbc8c8f869036cff054b3cdbfdb2793b90b7b7a353480cb9c6b26a931adc238ff31b9b785ff5b89f9ea1acd205d4daf7736b3366d356bcf7cf1dee4d24e929c1be586925ff0da86651f44c9f7c89c4adc06643a75eb79975471de4bb67c6b9528e3d395681ae8d6", @typed={0x8, 0x33, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xc, 0x14, 0x0, 0x0, @u64}, @typed={0x8, 0x80, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}, @generic="3117b20d9bbeed6adddb2dd3c5f4452c4dea98fa70d86820792adc7feb4eaa"]}, @generic="6f4dc2c8f71b3b6692274af1e0981c61f6aedf7b", @generic="ea020d42d4", @typed={0x14, 0x87, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x1f7, 0x7d, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @u32=0x200}, @generic="7d810cc913a099f99a797a6f74e00bf4169324a67e27cade5aba8376d104050cb88568e34273117a47ed8a65b32cfdeecdc1acfd42f630c463c61ec58dfed697af0ad74931790d8fda475529bfb7a5989fb59dbc643834aa41226d55a4598211ad8a30648fddeacc164538a29bc14aef7f089c037b9a078db985b640a8fd22b8a83089ff8d312f52f38cea6965c3b23fb46ee8edd3f0efe0320ca7ca8e5f4757a84920958581310e13c9554d284463b196a84ee37f4978e176b688a3779c22cdb7fbdc5f3cc74ddce93b7840bef76a840f4e37151568f501e8f540b284e45e1cf935e19b9479053592239c4f97eac02c", @typed={0xc, 0x91, 0x0, 0x0, @u64=0x20}, @typed={0x8, 0x65, 0x0, 0x0, @pid}, @generic="526ea8836bcc0f4c7b485ac4a27e867977dfd0a09935f20c49594ab5257784302a9c18d9c5b5883e34f36e685c93d303c1a709af15fc700dca97918ce993d6c1009ec6a938a9dd8d7780c0336ea938df6e692a0cbed97c4d8b30d3e58a611d4762e928a03e23bd68e1a83d2f7fd2b6b1073df88801a71e8dd0704b444c6f851f90202d79f209ad2ebb7bdbff4bef510d65db59c96119a8d916c3c23d7103681aea4cf6e92dae18153042e17f639bdc25dd96936f42dab050e63644391ce9d24a586650c55aad3770f2418dc4506db60b2c5af32fd2dea5f3017e4d10e7ef37536770136e516f14"]}, @typed={0x4, 0x6}]}, 0x378}, {&(0x7f00000004c0)={0x18, 0x3c, 0x300, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x8, 0x7c, 0x0, 0x0, @fd=r0}]}, 0x18}, {&(0x7f0000000800)={0x14a8, 0x14, 0x104, 0x70bd2d, 0x25dfdbfd, "", [@generic="14e4daedd002bdc823ae8390dd825a43b53cc9cdd52fc2aad7b206f24fba57af69e92dc1c8e7766b04164d8ea6f5247f7b228e7de993af6b6882a3b1c152c65b3079bbb02886b7a6fdc61f05732bebc34df3a201e152e700912f8cc86f6304b04a7e82df35e4b2971b4aafead7d3098e66ce38a91a029d4bf33a2ebf71eab0a6b076b2235da5eb5e669bfa613e", @typed={0xc, 0x85, 0x0, 0x0, @u64}, @typed={0x4, 0x53}, @typed={0x8, 0x6, 0x0, 0x0, @uid}, @typed={0x8, 0x24, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="dff38f9049da69a6b74b4e53e1440d1584094b84acacae81705386692aa780bfca26088d0c91c8bc8225ce879d82cbf189a8f77435fd8821046e2eca4570b35da3ccc45646bb999d189dcfc9f23bd8d9c8d074ade8a3f9523aebafc0a32bbce671b02b35f326b14d183ba70d50a3af87c240d42c470a515334232dc66f1183ee2b2a78e9d63d023b173429553a2579ca1d3aabe320262ae5c0d6564983989c7efc18da3a60d742d574ceed0169d732afd72a8b58dcdb1e4064e670fbbab4cb530204b3078ef10828c36b7870975c5deee61a4d4b979c32c7e7945c17cfb8dcd81983041e89e94d40aa4259975e95de9fa65c31b4124f305b", @nested={0x1231, 0x71, 0x0, 0x1, [@generic="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", @generic="01250ddc91858248983e5759b5f83f78c92603fb569511b1b519dbc93aae4cb2c1db7d459645838aafc279720e9dce3c91a537f1ba6fca9270c5f232803ba17ead5b0a6fc50e5528bd5579f9dfc46e1735d7ed4d0b9738ab4d071733fb4e78f66eea45c2c9fd21a0603938fc0685c06c8a708f9497b384e323aa0c5e6ed30695895b43107951a5f13184360eba8d2d055e3ffef32496f6b41ba3d12f37eb70bb2286bd5983ae2d685e1d23073c51f10b8cdf17c1ff2c9137d28155e791a7da2c870b293a425e24d8ffd5d96783021525e527a24b05f676d90b9663b0682dd8fb92c039cb557e7ad9b8949b6cccd8204554951b0755330f93ad", @generic="0e0af5b27e416cf9e1032da8e209df17217e2c1461cf7e6a15bb456d1ed1dd71c83f070fd009ec0a16a8e65b62d52901bfeceed4f39f9e6cbc0d5d7ded4f0cb6b45f88356357ecd1e4c5ee0f84aa5cef9e58238b9a4adda8ee7edf1be47f88f91a523497f8534765d3bc13fa07e24d43313cd6fab87df228e597cc4cfa5ad2bc28373866ae36ab2358b8188e7661e1082ec3cabb6a0419e155be924569ed9c6516df0e3cf7a37e7db4bc20e97c380c4e4c09092b4e7d9d2b402c7de38357d6cadd2d4df8e2c0c5d8702563df2dcea14b32431e82c5e6eabdae35eb02970cf733cb8f0cecabae8ba9c75d55d669", @generic="3bf0c2c7fed4d5ce96c25404de89214b74787452e1d8666c1a3ef9bcd5a90a6749355c0d7a948d0ae06f52f832302e49dc81aca77099e8d040b7d9efe58e813ec34991dd6cffbc"]}, @nested={0x4, 0xa, 0x0, 0x1, [@generic]}, @generic="22ff341439c2fcb51edb12e68ba1c6f80d9824fc805225b1a8276e2e71c677593bd83df15acafdbdfb4f9efae56dc813e2ac88f17eee97d636c2896d69227c0f73cde159f773c90be5286592224a885468936243d04177177474dfefaae7509ae3e77b2984f74413e5f18915ec676df0936c089dc40078169340672862ccde1cbc53dc509e99d86972545c8cf508878a3a2d101e38d8a7de09f6630e", @generic="87cd1ab1c0f8946b2caaa2b03fbe12707a3b199232abace44dbb2e597c"]}, 0x14a8}, {&(0x7f0000000640)={0x10, 0x2f, 0x400, 0x70bd27, 0x25dfdbff}, 0x10}], 0x4, &(0x7f0000001dc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, 0xee00}}}], 0xa0, 0x4000000}, 0x80) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, 0x0) openat$cgroup_pressure(r6, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, 0x0) r9 = mq_open(&(0x7f0000000080)='memory.pressure\x00', 0x40, 0x80, &(0x7f00000000c0)={0x6, 0x7, 0x200, 0x8}) ioctl$FICLONE(r9, 0x40049409, r7) getpeername(r1, 0x0, 0x0) socket(0x21, 0x6, 0x1) 03:21:33 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0x0, 0x0, 0x4000080, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 03:21:33 executing program 3: semget$private(0x0, 0x5, 0x181) 03:21:33 executing program 2: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_INFO(r0, 0x0, 0x3, &(0x7f00000000c0)=""/105) 03:21:33 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) dup(r0) 03:21:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x4, 0x0, 0x0) 03:21:34 executing program 5: semget$private(0x0, 0x2, 0x74) 03:21:34 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a040, 0x0) 03:21:34 executing program 3: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTATFS(r0, 0x0, 0x0) 03:21:34 executing program 2: pipe(&(0x7f0000008180)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLOPEN(r0, 0x0, 0x0) 03:21:34 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 03:21:34 executing program 1: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) 03:21:34 executing program 5: r0 = semget$private(0x0, 0x4, 0x0) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) 03:21:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) 03:21:34 executing program 3: mq_open(&(0x7f0000000080)='\x00', 0x0, 0x0, 0x0) 03:21:34 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pressure(r0, 0x0, 0x0) 03:21:34 executing program 4: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) 03:21:34 executing program 1: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 03:21:34 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) 03:21:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) 03:21:34 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = dup(r0) write$P9_RLCREATE(r1, 0x0, 0x0) 03:21:34 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r0, 0x0, 0x45, 0x0, 0x0) 03:21:34 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, 0x0, 0x0) 03:21:34 executing program 1: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RCREATE(r0, 0x0, 0x0) 03:21:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2440, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x40, &(0x7f0000000100)) 03:21:34 executing program 0: semget(0x3, 0x0, 0x100) 03:21:34 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)) 03:21:34 executing program 4: r0 = semget(0x1, 0x0, 0x0) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000100)=""/121) 03:21:34 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, 0x0, 0x0) 03:21:34 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000200)) 03:21:34 executing program 1: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) 03:21:34 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f00000005c0)={{}, {0x77359400}}, 0x0) 03:21:34 executing program 0: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$netlink(r0, 0x0, 0x0) 03:21:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) 03:21:34 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a040, 0xc) 03:21:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x20000) 03:21:34 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/117) 03:21:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0xfffffffffffffffc, 0x0) 03:21:34 executing program 0: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RXATTRWALK(r0, 0x0, 0x0) 03:21:34 executing program 3: semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000180)=""/138) 03:21:34 executing program 4: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RFSYNC(r0, 0x0, 0x0) 03:21:34 executing program 2: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000900), 0x2, 0x0) 03:21:34 executing program 1: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0) 03:21:34 executing program 5: r0 = semget(0x0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000100)=[{}], 0x1, &(0x7f00000001c0)) 03:21:34 executing program 0: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREAD(r0, 0x0, 0x0) 03:21:34 executing program 3: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 03:21:34 executing program 4: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTAT(r0, 0x0, 0x0) 03:21:34 executing program 2: pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000500)=ANY=[], 0x3b) 03:21:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x4, &(0x7f0000000100)=@abs, 0x6e) 03:21:34 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RFLUSH(r0, 0x0, 0x0) 03:21:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, 0x0) 03:21:34 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semctl$GETNCNT(r0, 0x4, 0xe, &(0x7f0000000180)=""/186) 03:21:34 executing program 4: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 03:21:34 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 03:21:34 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = dup(r0) write$P9_RLERROR(r1, 0x0, 0x0) 03:21:34 executing program 5: syz_clone(0x51040100, 0x0, 0x1880, 0x0, 0x0, 0x0) 03:21:34 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0x1b0}, 0x408c0) 03:21:34 executing program 3: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 03:21:34 executing program 4: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) 03:21:34 executing program 2: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 03:21:34 executing program 1: readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000180)=""/120, 0x78) 03:21:34 executing program 0: socketpair(0x10, 0x3, 0x1000, &(0x7f0000000000)) 03:21:34 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc7}, 0x0) 03:21:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf}, 0x7) 03:21:34 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$cgroup_int(r0, &(0x7f0000000000), 0x12) 03:21:34 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/81, 0x51}, 0x7040) 03:21:35 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$cgroup_int(r0, 0x0, 0x0) 03:21:35 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_lru_insertion\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x6, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x2, &(0x7f0000000200)=@raw=[@alu={0x4, 0x0, 0x9, 0x3, 0x3, 0x2, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000240)='syzkaller\x00', 0xfffffffe, 0x6f, &(0x7f0000000280)=""/111, 0x41000, 0x12, '\x00', r2, 0x17, r1, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x10, 0x7, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[r3]}, 0x80) recvmsg(r0, &(0x7f0000000600)={0x0, 0x7fffef41, &(0x7f0000000580)=[{&(0x7f0000000100)=""/191, 0xbf}], 0x300}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 03:21:35 executing program 3: r0 = syz_clone(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000680)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 03:21:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x14, 0x0, 0x4, 0x0, 0x4}, 0x48) 03:21:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0x4}, 0x48) 03:21:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x1, 0x0, 0xffff}, 0x48) 03:21:35 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) 03:21:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1d, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x3ff, 0x0, 0x7fff}, 0x48) 03:21:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x4}, 0x48) 03:21:35 executing program 1: socketpair(0x29, 0x2, 0x0, &(0x7f0000001a00)) 03:21:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x8}, 0x48) 03:21:35 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='\x00'}, 0x10) 03:21:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 03:21:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'lo\x00', 0xb408f889d4421a3d}) 03:21:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2100) 03:21:35 executing program 1: syz_clone(0x1e011880, 0x0, 0x0, 0x0, 0x0, 0x0) 03:21:35 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @func_proto]}}, &(0x7f0000000140)=""/235, 0x3e, 0xeb, 0x1}, 0x20) 03:21:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x48) 03:21:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x3) 03:21:35 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40002060) 03:21:35 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000ac0)=""/4096, 0x36, 0x1000, 0x1}, 0x20) 03:21:35 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000640)=""/252, 0x2d, 0xfc, 0x1}, 0x20) 03:21:35 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') close(r0) 03:21:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0x0, 0x4}, 0x48) 03:21:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wlan0\x00'}) 03:21:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0x8, 0x7fff, 0x1c0}, 0x48) 03:21:36 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x8, 0x1, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000013c0)={r0, 0x0, 0x0}, 0x20) 03:21:36 executing program 1: bpf$PROG_LOAD(0x1d, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 03:21:36 executing program 2: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x9c087d2ae56e92e5}, 0x20) 03:21:36 executing program 4: syz_clone(0xc000b000, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)) 03:21:36 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xc000, 0x0) 03:21:36 executing program 0: syz_clone(0xc000b000, &(0x7f0000000080)="98", 0x1, &(0x7f0000000100), 0x0, 0x0) 03:21:36 executing program 1: bpf$PROG_LOAD(0x3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 03:21:36 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r0}, 0x10) 03:21:36 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 03:21:36 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/123, 0x7b}, 0x40002060) 03:21:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00'}) 03:21:36 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) 03:21:36 executing program 5: syz_clone(0xc000b000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 03:21:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=@raw=[@func, @cb_func, @func], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xe1, &(0x7f0000000080)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:21:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x0, 0x0, 0x9}, 0x48) 03:21:36 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "a0"}]}}, &(0x7f0000000640)=""/252, 0x2a, 0xfc, 0x1}, 0x20) 03:21:36 executing program 4: bpf$PROG_LOAD(0x1c, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 03:21:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x8, 0x1, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 03:21:36 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1000000021"], 0xc0}, 0x0) 03:21:36 executing program 1: syz_clone(0xc000b000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0) 03:21:36 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000000640)=""/252, 0x26, 0xfc, 0x1}, 0x20) 03:21:36 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvlan1\x00', 0x1}) 03:21:36 executing program 0: syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) 03:21:36 executing program 2: syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000001800)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 03:21:36 executing program 5: syz_clone(0xc000b000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 03:21:36 executing program 0: r0 = shmget(0x3, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) msgctl$IPC_RMID(r0, 0x0) 03:21:36 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}]}}, &(0x7f0000000140)=""/235, 0x32, 0xeb, 0x1}, 0x20) 03:21:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) 03:21:36 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x10}, {}, {0x0, 0x5}]}, @func_proto]}}, &(0x7f0000000ac0)=""/4096, 0x4a, 0x1000, 0x1}, 0x20) 03:21:36 executing program 3: statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 03:21:37 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000001800)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) 03:21:37 executing program 1: syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000019c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x80}}]}}}]}}]}}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x6, &(0x7f0000001a80)=@string={0x6, 0x3, "2bdecd8e"}}, {0x2, &(0x7f0000001ac0)=@string={0x2}}]}) 03:21:37 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0xd0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 03:21:37 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000019c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x404}}}}}]}}]}}, 0x0) [ 1108.057483][ T5657] usb 3-1: new high-speed USB device number 40 using dummy_hcd 03:21:37 executing program 5: syz_clone(0xc000b000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) [ 1108.256179][ T3260] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1108.256213][ T25] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1108.276164][T12325] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1108.306068][ T5657] usb 3-1: Using ep0 maxpacket: 8 [ 1108.336003][T10561] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1108.476591][ T5657] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1108.506404][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 1108.516468][ T3260] usb 1-1: Using ep0 maxpacket: 32 [ 1108.546177][T12325] usb 2-1: Using ep0 maxpacket: 8 [ 1108.566640][ T5657] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1108.576109][T10561] usb 4-1: Using ep0 maxpacket: 8 [ 1108.636278][ T3260] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1108.645311][ T3260] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1108.649085][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1108.667874][ T3260] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1108.686323][T12325] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.696357][T10561] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.703092][T12325] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.728551][T10561] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1028, setting to 1024 [ 1108.735582][T12325] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 1108.749900][T10561] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1108.846117][ T3260] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1108.846409][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1108.855243][ T3260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.855267][ T3260] usb 1-1: Product: syz [ 1108.855283][ T3260] usb 1-1: Manufacturer: syz [ 1108.855299][ T3260] usb 1-1: SerialNumber: syz [ 1108.887103][ T5657] usb 3-1: string descriptor 0 read error: -22 [ 1108.893605][ T5657] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1108.903031][ T5657] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.912490][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.916165][T10561] usb 4-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 1108.921987][ T25] usb 5-1: Product: syz [ 1108.934204][ T25] usb 5-1: Manufacturer: syz [ 1108.939632][ T25] usb 5-1: SerialNumber: syz [ 1108.942957][T10561] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.957237][ T5657] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 1108.965321][T10561] usb 4-1: Product: syz [ 1108.973659][T10561] usb 4-1: Manufacturer: syz [ 1108.982303][ T6737] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1108.986114][T12325] usb 2-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 1108.997379][ T6737] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1108.998657][T12325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.005025][T10561] usb 4-1: SerialNumber: syz [ 1109.013278][T12325] usb 2-1: Product: syz [ 1109.023421][ T25] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1109.030275][T12325] usb 2-1: SerialNumber: syz [ 1109.046366][ T6743] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1109.169608][ T25] usb 3-1: USB disconnect, device number 40 [ 1109.189168][ T3260] usb 1-1: 0:2 : does not exist [ 1109.218479][ T3260] usb 1-1: USB disconnect, device number 45 [ 1109.251331][T10570] usb 5-1: USB disconnect, device number 47 [ 1109.291023][T14044] udevd[14044]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1109.306378][T10561] usbhid 4-1:1.0: can't add hid device: -22 [ 1109.313064][T10561] usbhid: probe of 4-1:1.0 failed with error -22 [ 1109.331711][T12325] usbhid 2-1:1.0: can't add hid device: -22 [ 1109.340056][T12325] usbhid: probe of 2-1:1.0 failed with error -22 [ 1109.350785][T10561] usb 4-1: USB disconnect, device number 27 [ 1109.362748][T12325] usb 2-1: USB disconnect, device number 6 03:21:38 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000019c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000001ac0)=@string={0x2}}]}) 03:21:38 executing program 5: syz_clone(0xc000b000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 03:21:38 executing program 0: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000000)=""/218) r0 = syz_open_dev$evdev(0x0, 0x5, 0x8080) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000140)={0x8, 0x0, 0x0, 0xfd}) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0xaefa17e03bcb6ed0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000001c0)=""/208) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x181000) r2 = syz_open_dev$evdev(&(0x7f0000001380), 0x0, 0x30b000) ioctl$EVIOCSMASK(r2, 0x40104593, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000001440), 0xff, 0x6a101) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001480)=""/254) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001600)={0x0, 0x1, 0x0, {}, {0xfffb, 0x3}, @period={0x59, 0x6, 0xfffb, 0xfff, 0x3, {0x3, 0x0, 0x7, 0x2}, 0x4, &(0x7f00000015c0)=[0x0, 0x71b4, 0x4cd, 0x0]}}) syz_usb_connect$cdc_ecm(0x2, 0x5f, &(0x7f0000001800)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0xcf, 0x20, 0x31, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4}, [@call_mgmt={0x5}, @acm={0x4, 0x24, 0x2, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0xdc, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x20, 0xa0}}}}}]}}]}}, &(0x7f0000001980)={0xa, &(0x7f0000001880)={0xa, 0x6, 0x300, 0x0, 0x70, 0x0, 0x40, 0x2}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000019c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7d, 0x0, 0xe2, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0xdaea, 0x40, 0x1, {0x22, 0x909}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x5, 0x3}}, [{}]}}}]}}]}}, &(0x7f0000001e80)={0xa, &(0x7f0000001a00)={0xa, 0x6, 0x0, 0x0, 0x4, 0x2, 0xff}, 0xf, &(0x7f0000001a40)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x0, 0x0, 0x8}, @ptm_cap={0x3}]}, 0x7, [{0x2, &(0x7f0000001a80)=@string={0x2}}, {0xb0, &(0x7f0000001ac0)=@string={0xb0, 0x3, "65754cf96ede2ebf9cc49da1822a7865257f17955874c7faf720efb40ddaa7fb7380db1a38e84028cc00b92ef3ea03e33f45c3d6f6137c34070c974a9340515b5afc5c62821db9484e9041a66ef9d87a4683265ab3eebf17da5489b7709d5f98671278325181c13c2c01ffb09c57d433a7d97819bd19c77963577ad3d6077b028eda13bbc7e1301f9fbd93a813bc7fd7884063e4b3adfd6d65a21b5afc4bb4182a15003215a7d1289d03f2e982ea"}}, {0xc8, &(0x7f0000001b80)=@string={0xc8, 0x3, "a3941e1e029b54da4fd5eea75bcabbec95c09bc500e89bbe9edca0b56eb1a2e7d1761ec44f0b2bc39b5fdf4fb3655a680a6a6c2bcc0db7fdb2aeea6149249646be7f55a101203790ac3acbb56693b0c8f3199948f6fbcdb6443281dd51c136bf195e0efdfd60629f7c95114e91a2e6e58e84add1d1f5bc7987d8fe824b783b79c41a5743d72a31b2317b4972c691924b684fa4bc353a967cb261099fb75f39251841430d2302021d8f929e369f72b1aa6e788c6fb89cad7424c9d7efa1c1101675c468f4c658"}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x4c0a}}]}) 03:21:38 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000400), 0x2, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000540)=""/119) 03:21:38 executing program 3: syz_open_dev$evdev(&(0x7f0000001340), 0x401, 0x0) 03:21:38 executing program 1: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x4c00) 03:21:38 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000019c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000001a80)=@string={0x2}}, {0x22, &(0x7f0000001ac0)=@string={0x22, 0x3, "65754cf96ede2ebf9cc49da1822a7865257f17955874c7faf720efb40ddaa7fb"}}]}) 03:21:38 executing program 4: syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000019c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x404}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x80}}]}}}]}}]}}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000001a80)=@string={0x2}}, {0x22, &(0x7f0000001ac0)=@string={0x22, 0x3, "65754cf96ede2ebf9cc49da1822a7865257f17955874c7faf720efb40ddaa7fb"}}]}) 03:21:39 executing program 1: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x4c00) 03:21:39 executing program 1: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) r0 = syz_open_dev$evdev(0x0, 0x5, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfd}) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x181000) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000001480)=""/254) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001600)={0x0, 0x1, 0x0, {}, {0xfffb}, @period={0x59, 0x6, 0x0, 0xfff, 0x3, {0x0, 0x2, 0x7, 0x2}, 0x0, 0x0}}) syz_usb_connect$cdc_ecm(0x2, 0x5f, &(0x7f0000001800)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x3}, [@acm={0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x0, 0xa0}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000019c0)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7d, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x0, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x909}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000001e80)={0xa, &(0x7f0000001a00)={0xa, 0x6, 0x201, 0x0, 0x4, 0x0, 0xff, 0xf5}, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x2, &(0x7f0000001b80)=@string={0x2}}, {0x3d, &(0x7f0000001cc0)=@string={0x3d, 0x3, "502dbdebe020b66b1c88216526c3c6e80e1a12733372b9fcafda29fe9ca9b4924864b18f5c3c63d2bb2fefa10d31ed8b6defcfdd616ad46f49e9b6"}}, {0x0, 0x0}]}) [ 1109.966185][T10561] usb 1-1: new full-speed USB device number 46 using dummy_hcd 03:21:39 executing program 5: syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) [ 1110.006460][T10570] usb 3-1: new high-speed USB device number 41 using dummy_hcd 03:21:39 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000019c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x404}}}}}]}}]}}, 0x0) [ 1110.186427][ T5] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1110.206139][T12325] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1110.256638][T10570] usb 3-1: Using ep0 maxpacket: 8 [ 1110.266069][ T3260] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1110.376154][T10561] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1110.384630][T10570] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1110.406072][ T5471] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1110.436171][T10561] usb 1-1: not running at top speed; connect to a high speed hub [ 1110.444658][T10570] usb 3-1: language id specifier not provided by device, defaulting to English [ 1110.454107][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 1110.483328][T12325] usb 5-1: Using ep0 maxpacket: 8 [ 1110.546680][T10561] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1110.566590][T10561] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.586118][ T5] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1110.600012][T10570] usb 3-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 1110.616262][T10570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.616706][T12325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.625083][T10561] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1110.643601][T10570] usb 3-1: Product: syz [ 1110.648398][ T3260] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1110.659119][T12325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1028, setting to 1024 [ 1110.659911][T10570] usb 3-1: Manufacturer: syz [ 1110.675519][ T3260] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1110.683104][ T5] usb 4-1: language id specifier not provided by device, defaulting to English [ 1110.692522][ T5471] usb 6-1: Using ep0 maxpacket: 8 [ 1110.692750][T12325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 1110.706159][T10570] usb 3-1: SerialNumber: syz [ 1110.746953][T12325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1110.759207][T10570] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1110.826347][ T5471] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1110.839859][ T5] usb 4-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 1110.844371][T12325] usb 5-1: language id specifier not provided by device, defaulting to English [ 1110.849985][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.867915][ T5] usb 4-1: Product: syz [ 1110.872344][ T5] usb 4-1: Manufacturer: 略樓뼮쒜ꆝ⪂數缥锗瑘難⃷듯ﮧ [ 1110.881184][ T5] usb 4-1: SerialNumber: syz [ 1110.887107][ T3260] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1110.899816][ T3260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.909743][T10561] usb 1-1: string descriptor 0 read error: -22 [ 1110.917178][T10561] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1110.926628][ T3260] usb 2-1: Product: syz [ 1110.931061][ T3260] usb 2-1: Manufacturer: syz [ 1110.938694][ T5] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1110.946780][T10561] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.955104][ T3260] usb 2-1: SerialNumber: syz [ 1110.959574][T11470] usb 3-1: USB disconnect, device number 41 [ 1111.035407][T12325] usb 5-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 1111.036333][ T5471] usb 6-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 1111.054098][ T5471] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.062526][ T5471] usb 6-1: Product: syz [ 1111.065935][T12325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.067119][ T5471] usb 6-1: Manufacturer: syz [ 1111.079977][ T5471] usb 6-1: SerialNumber: syz [ 1111.091937][T12325] usb 5-1: Product: syz [ 1111.106481][ T6779] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1111.111499][T12325] usb 5-1: Manufacturer: 略樓뼮쒜ꆝ⪂數缥锗瑘難⃷듯ﮧ [ 1111.132494][ T5471] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 1111.140665][T12325] usb 5-1: SerialNumber: syz [ 1111.152535][T10570] usb 4-1: USB disconnect, device number 28 [ 1111.186249][ T6772] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1111.219293][ T6775] UDC core: couldn't find an available UDC or it's busy: -16 [ 1111.231557][ T6775] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1111.237157][ T6758] UDC core: couldn't find an available UDC or it's busy: -16 [ 1111.256290][ T3260] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 1111.258524][ T6758] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1111.281128][ T3260] usb 2-1: USB disconnect, device number 7 [ 1111.288401][T10561] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 1111.318099][T10561] usb 1-1: USB disconnect, device number 46 [ 1111.348631][ T5471] usb 6-1: USB disconnect, device number 83 03:21:40 executing program 2: syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000019c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x404}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x80}}]}}}]}}]}}, 0x0) [ 1111.456436][T12325] usbhid 5-1:1.0: can't add hid device: -22 [ 1111.462745][T12325] usbhid: probe of 5-1:1.0 failed with error -22 [ 1111.488667][T12325] usb 5-1: USB disconnect, device number 48 03:21:40 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000019c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 03:21:40 executing program 0: syz_open_dev$evdev(&(0x7f0000000640), 0x7fffffffffffffff, 0x0) 03:21:40 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000019c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0xdaea}}}]}}]}}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000001a80)=@string={0x2}}, {0x22, &(0x7f0000001ac0)=@string={0x22, 0x3, "65754cf96ede2ebf9cc49da1822a7865257f17955874c7faf720efb40ddaa7fb"}}]}) 03:21:40 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000001800)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@acm={0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) [ 1111.806564][ T3260] usb 3-1: new high-speed USB device number 42 using dummy_hcd 03:21:40 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000044649a40200e010102c6ffe5000109021b000100000000090400000139cd2c000905050040"], 0x0) 03:21:41 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000001800)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10}}]}}}]}}]}}, 0x0) [ 1111.976401][T12325] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1112.056090][ T3260] usb 3-1: Using ep0 maxpacket: 8 [ 1112.106131][ T5] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1112.156458][T11470] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1112.176159][ T3260] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.193553][ T3260] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1028, setting to 1024 [ 1112.204720][ T3260] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 1112.215959][ T5657] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1112.224541][ T3260] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1112.234515][T10561] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1112.235952][T12325] usb 4-1: Using ep0 maxpacket: 8 [ 1112.366418][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 1112.388824][T12325] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1112.401741][T11470] usb 6-1: Using ep0 maxpacket: 8 [ 1112.406194][ T3260] usb 3-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 1112.422251][ T3260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.430626][ T3260] usb 3-1: Product: syz [ 1112.434798][ T3260] usb 3-1: Manufacturer: syz [ 1112.442969][ T3260] usb 3-1: SerialNumber: syz [ 1112.466390][ T6783] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1112.487994][T10561] usb 5-1: Using ep0 maxpacket: 8 [ 1112.496342][ T5] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1112.536817][T11470] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1112.556364][ T5] usb 2-1: language id specifier not provided by device, defaulting to English [ 1112.586662][T12325] usb 4-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 1112.595782][T12325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.606126][T10561] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1112.625500][T12325] usb 4-1: Product: syz [ 1112.642869][T12325] usb 4-1: Manufacturer: syz [ 1112.648325][T12325] usb 4-1: SerialNumber: syz [ 1112.697050][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 1112.712902][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.723062][ T5] usb 2-1: Product: syz [ 1112.728771][ T3260] usbhid 3-1:1.0: can't add hid device: -22 [ 1112.729525][T12325] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1112.735136][ T3260] usbhid: probe of 3-1:1.0 failed with error -22 [ 1112.743366][T11470] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1112.749332][ T5] usb 2-1: Manufacturer: 略樓뼮쒜ꆝ⪂數缥锗瑘難⃷듯ﮧ [ 1112.768552][T11470] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.781036][ T3260] usb 3-1: USB disconnect, device number 42 [ 1112.787705][T10561] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1112.799657][ T5] usb 2-1: SerialNumber: syz [ 1112.804548][T10561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.806352][ T5657] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=c6.02 [ 1112.822758][T11470] usb 6-1: Product: syz [ 1112.830152][T10561] usb 5-1: Product: syz [ 1112.834602][T10561] usb 5-1: Manufacturer: syz [ 1112.839850][T10561] usb 5-1: SerialNumber: syz [ 1112.849284][T11470] usb 6-1: Manufacturer: syz [ 1112.853888][T11470] usb 6-1: SerialNumber: syz [ 1112.859044][ T5657] usb 1-1: New USB device strings: Mfr=255, Product=229, SerialNumber=0 [ 1112.868763][ T5] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 1112.876993][ T5657] usb 1-1: Product: syz [ 1112.882450][ T5657] usb 1-1: Manufacturer: syz [ 1112.886971][T10561] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1112.906378][ T6791] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1112.913926][ T6791] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1112.947606][T12325] usb 4-1: USB disconnect, device number 29 [ 1112.959837][T11470] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1112.968384][ T5657] usb 1-1: config 0 descriptor?? [ 1113.019322][ T5657] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input32 [ 1113.070102][ T3260] usb 2-1: USB disconnect, device number 8 [ 1113.089796][ T5] usb 5-1: USB disconnect, device number 49 03:21:42 executing program 2: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x4c00) syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x220102) [ 1113.160035][ T5657] usb 6-1: USB disconnect, device number 84 [ 1113.219758][T12325] usb 1-1: USB disconnect, device number 47 03:21:42 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000001800)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 03:21:42 executing program 3: getresuid(0x0, &(0x7f0000000080), &(0x7f00000000c0)) 03:21:42 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000001800)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000019c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 03:21:42 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000019c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0xdaea}}}]}}]}}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000001a80)=@string={0x2}}, {0x22, &(0x7f0000001ac0)=@string={0x22, 0x3, "65754cf96ede2ebf9cc49da1822a7865257f17955874c7faf720efb40ddaa7fb"}}]}) 03:21:42 executing program 4: syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000019c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x40}}]}}}]}}]}}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 03:21:42 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000001800)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000019c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 1113.626164][ T6753] usb 3-1: new high-speed USB device number 43 using dummy_hcd 03:21:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0) 03:21:42 executing program 0: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000001800)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4}, [@call_mgmt={0x5}]}}}]}}]}}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 1113.776453][ T5] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1113.926002][ T3260] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1113.936059][ T5471] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1113.936426][ T6753] usb 3-1: Using ep0 maxpacket: 8 [ 1113.996312][T10561] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1114.016203][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 1114.066331][ T6753] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1114.136211][ T6753] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1114.136317][ T5] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1114.146156][ T6753] usb 3-1: can't read configurations, error -71 [ 1114.154041][T10570] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1114.168454][ T3260] usb 2-1: Using ep0 maxpacket: 8 [ 1114.174173][ T5] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1114.184118][ T5] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1114.197627][ T5471] usb 5-1: Using ep0 maxpacket: 8 [ 1114.246189][T10561] usb 6-1: Using ep0 maxpacket: 8 [ 1114.296273][ T3260] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1114.316522][ T5471] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.328299][ T5471] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.338592][ T5471] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1114.350098][ T3260] usb 2-1: language id specifier not provided by device, defaulting to English [ 1114.373637][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1114.382990][T10561] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1114.393204][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.401966][T10561] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1114.412038][ T5] usb 4-1: Product: syz [ 1114.416411][ T5] usb 4-1: Manufacturer: syz [ 1114.421030][ T5] usb 4-1: SerialNumber: syz [ 1114.425977][T10561] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1114.439393][T10570] usb 1-1: Using ep0 maxpacket: 8 [ 1114.466471][ T6805] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1114.474089][ T6805] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1114.476375][ T3260] usb 2-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 1114.491627][ T3260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.500087][ T3260] usb 2-1: Product: syz [ 1114.504281][ T3260] usb 2-1: Manufacturer: 略樓뼮쒜ꆝ⪂數缥锗瑘難⃷듯ﮧ 03:21:43 executing program 2: getresuid(0x0, 0x0, &(0x7f00000000c0)) getresuid(&(0x7f00000008c0), &(0x7f0000000900), 0x0) [ 1114.512819][ T3260] usb 2-1: SerialNumber: syz 03:21:43 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000005c0), 0x4) [ 1114.559514][ T3260] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 1114.596251][ T5471] usb 5-1: string descriptor 0 read error: -22 [ 1114.602535][ T5471] usb 5-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 1114.612141][T10570] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1114.619998][T10561] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1114.629458][T10561] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.637975][ T5471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.647718][T10561] usb 6-1: Product: syz [ 1114.652047][T10561] usb 6-1: Manufacturer: syz [ 1114.657818][T10561] usb 6-1: SerialNumber: syz 03:21:43 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x53, 0x0, 0x0) [ 1114.689445][ T6811] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1114.697954][ T6811] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1114.698297][ T5471] usbhid 5-1:1.0: can't add hid device: -22 [ 1114.711899][T10570] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1114.717660][ T6805] UDC core: couldn't find an available UDC or it's busy: -16 [ 1114.736642][ T5471] usbhid: probe of 5-1:1.0 failed with error -22 [ 1114.756102][ T6805] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 03:21:43 executing program 2: chown(&(0x7f00000009c0)='./file0\x00', 0x0, 0x0) [ 1114.784907][T12325] usb 2-1: USB disconnect, device number 9 [ 1114.806390][ T5] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 1114.825102][ T5] usb 4-1: USB disconnect, device number 30 03:21:43 executing program 2: getresuid(0x0, 0x0, &(0x7f00000000c0)) 03:21:44 executing program 2: socket$inet(0x2, 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) [ 1114.903894][T11470] usb 5-1: USB disconnect, device number 50 [ 1114.912625][ T6811] UDC core: couldn't find an available UDC or it's busy: -16 [ 1114.925975][ T6811] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1114.966475][T10561] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 1114.973406][T10570] usb 1-1: string descriptor 0 read error: -22 [ 1114.980766][T10570] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1114.995792][T10561] usb 6-1: USB disconnect, device number 85 [ 1115.013684][T10570] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.097001][T10570] cdc_ether: probe of 1-1:1.0 failed with error -22 03:21:44 executing program 3: socketpair(0x0, 0x0, 0x69, 0x0) 03:21:44 executing program 2: sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@rights, @cred, @rights, @rights], 0x94}, 0x0) [ 1115.308832][T10570] usb 1-1: USB disconnect, device number 48 [ 1115.367486][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.373861][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 03:21:44 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 03:21:44 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./bus\x00') 03:21:44 executing program 1: getresuid(0x0, 0x0, &(0x7f00000000c0)) getresuid(&(0x7f00000008c0), 0x0, 0x0) 03:21:44 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) 03:21:44 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) chown(0x0, 0x0, 0x0) 03:21:44 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x4a, 0x0, 0x0) 03:21:44 executing program 5: sendmsg$unix(0xffffffffffffff9c, 0x0, 0x0) 03:21:44 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x49, &(0x7f0000000140)={@remote={0xac, 0x14, 0x0}, @broadcast, @remote={0xac, 0x14, 0x0}}, 0xc) 03:21:44 executing program 4: sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)}, 0x0) 03:21:44 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) accept4$inet(r0, &(0x7f0000000600), &(0x7f0000000640)=0x10, 0x0) 03:21:45 executing program 5: sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001640)={&(0x7f0000000000)=@file={0xa}, 0xa, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000001480)=[@rights, @cred, @rights, @rights, @cred, @rights, @rights, @cred], 0x184}, 0x0) 03:21:45 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x0) 03:21:45 executing program 5: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffff9c, 0x80284504, 0x0) 03:21:45 executing program 3: sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) 03:21:45 executing program 1: getgroups(0x3, &(0x7f0000000000)=[0x0, 0x0, 0xffffffffffffffff]) 03:21:45 executing program 0: chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) chown(&(0x7f00000009c0)='./file0\x00', 0x0, 0x0) 03:21:45 executing program 1: sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000001480)=[@rights, @cred, @rights, @rights, @cred, @rights, @rights, @cred], 0x184}, 0x0) 03:21:45 executing program 4: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000005c0)=0x5, 0x4) 03:21:45 executing program 3: lchown(0x0, 0xffffffffffffffff, 0x0) 03:21:45 executing program 5: recvfrom$unix(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000200)=@file={0xa}, 0xa) 03:21:45 executing program 2: accept4$inet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x10, 0x0) 03:21:45 executing program 1: sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001640)={&(0x7f0000000000)=@file={0xa}, 0xa, 0x0}, 0x0) 03:21:45 executing program 3: chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) 03:21:45 executing program 0: sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@rights], 0xc}, 0x0) 03:21:45 executing program 5: socketpair(0x17, 0x0, 0x69, 0x0) 03:21:45 executing program 2: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000780)) 03:21:45 executing program 1: getresuid(&(0x7f0000000040), 0x0, &(0x7f00000000c0)) 03:21:45 executing program 2: sendmsg$unix(0xffffffffffffff9c, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@rights, @cred, @rights, @rights, @cred, @rights, @rights, @cred], 0x184}, 0x0) 03:21:45 executing program 4: getgroups(0x1, &(0x7f0000000800)=[0xffffffffffffffff]) 03:21:45 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6}]}) 03:21:45 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5451, 0x0) 03:21:45 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000000000), 0x0, 0x10001000000000}]) 03:21:45 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000540)=""/188, 0x724) getdents(r0, &(0x7f0000000340)=""/215, 0xd7) getdents64(r0, 0x0, 0x0) 03:21:45 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x49, 0x0, 0x0) 03:21:45 executing program 3: bpf$MAP_CREATE(0x7, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:45 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x80045400, 0x0) [ 1116.562175][ T6925] loop5: detected capacity change from 0 to 81920 03:21:45 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x1) 03:21:45 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8) getsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 03:21:45 executing program 4: bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x1) 03:21:45 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000540)=[{&(0x7f0000000100)="003c3c8da2828b6f29a51b0d39a3e39ad91b09ccde9113badb6e6313db37c5bdd631391bf11c49a1ac80fd5c24c1a2f2c27fc77733ccf720da2ad3ab8dd537c63557b28468bc3196d8f624d93361f99ff875514eb5f2729ee91a5bca78184a11259ee0c5c8e5ad5a0d91d287aca3190032f74b81037e4dcbcaacab4adc9964892026e959e59d1f9b77c0abb905869e8dfde58cd86c6bdb150246891a88c097b13ed7e757b201abbd53a7", 0xaa, 0x64da}, {&(0x7f00000001c0)="301229850ec8cb8fa148050c72a2af82b4e2948408185dab", 0x18, 0xffff}, {&(0x7f0000000200)="10aaee7a912bd49b6c23b122d51851d4cdb34f4fac8b931fc63d2b568390b868963e365f636470677ccb387666db0e646dfe7b1d3b8e965e6958cfe33da47c5835ccb3071a8d8969c3adf73d1927b5466cc23e092a475b11f06fc79356b4e34c574fc49c8d47aa7b6514ee60250cecf212546da2b8564ce64856bd9e142dbffe9c99868136ed8019a98f8cc6ae5d124c644fe46fc5b6b299a3283081ee7fc236b82dc762ec9cec69418603636e0048aaf516dece23d506b2", 0xb8}, {&(0x7f00000002c0)="397f18e21ea76b9d0b2c11deb952123ce74f6bc6c43b277de9e8fa1db31337c9b334320af0ca2866f3ebf6551f96fa6aced51648771bb8f06fddcabca004a60cb2351dc5170eb1b924d1369e4ed300fad505345a2e1e", 0x56, 0x8e}, {&(0x7f0000000340)="0559bbec1389be46babb8eb5fa3b959e51f876fb7bfb1e3605bd96f87115eebfe0cdaa7fef992b3905f06b7a094a1802c63576dbc98acb27850b522951757d3f5c4101b68c4c1d88dc5a00bdda50bb61812809af2751fab9bd8d2966e2b82af0de780abfde28ca8dd168e507b2279bb35302cf74e3eaf9102ae378c5e336777b77ed37b9f8f78093874dee6c22e101e2f5b0afba15cb44d06c25b0d72fa460f1d9c10aafde96f1f601320b4251f4fd9198e28d17819cb0139605f68816e17b6d4d23e21324c703cd084253dcc6eefff15054b83cd7b96bbeab70c49b", 0xdc, 0x3}, {0x0, 0x0, 0xffff}], 0x0, &(0x7f00000005c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x33]}}}}, {@huge_never}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@dont_hash}, {@appraise_type}, {@measure}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x3a}}, {@subj_type}, {@euid_lt}, {@dont_appraise}, {@subj_user={'subj_user', 0x3d, '{#'}}]}) [ 1116.729638][ T26] audit: type=1326 audit(1647400905.830:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6920 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f640c785049 code=0x0 03:21:45 executing program 1: bpf$LINK_DETACH(0x22, &(0x7f0000000080), 0xfffffffffffffc3a) 03:21:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8910, &(0x7f0000000080)={'sit0\x00', 0x0}) 03:21:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5421, &(0x7f0000000080)={'sit0\x00', 0x0}) [ 1116.792828][ T6942] loop5: detected capacity change from 0 to 255 03:21:45 executing program 2: bpf$MAP_CREATE(0xb, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:45 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000240)="413fe73152d8570ce7eb8a68aaa80d1c", 0x10) 03:21:46 executing program 1: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000001c0), &(0x7f0000000100), 0x0) 03:21:46 executing program 5: syz_read_part_table(0xbd0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="3ed814e0dae37bfdd3a08759b646331390c599599fb52a5b26a29f7841ef9741fac6509342e2e26f95916f2f89fde416bc6700f5917fcca3008a9c74847c8eb43f167f897033fe41de9e596a5ee1e6a91c2e25abdb255752d2e55a0ccf4739b5950d87d73e191120c8d8cbf0fdb8e3688bf34aa25a86f421ee77c71ff1d21e2e0eb59214dbe020f6d0597556ba34f71b67aa36e643c0d44ca03b4b5b98e39870b5298f12f643ecb3794c1225a021f832a26e8f467a64514547af1a3d547c82e5a22364d9b9d567925951e924b447d58d8c35e95a908a798ef2652519a7c7540351bd19f2334bbc0983e0bdd469", 0xed, 0x3}, {&(0x7f0000000200)="4b87e463fc9316846c440a0f635c68620c63253de1cd8f10dcef46ab7ac3ee4893a3491d0504f3b45d060cbda93c8b907e8e3369fe7fb07896848491b2ed0a6cdcf401b67f857bf4dda24579fe04f3f4de0ba87de576c11bd0e00cba5fbb57199ffee0e75769e38793836796967b111c163a2f138d90db8e52e6a194b696d58624591f0d9401090000170d88d911387e466913a6128ff07e452b8b215373c4350dcf8b8504c2cd0f1d8c0dac3910c23883e9822d9edc5dd7b99895b22d5e61f5d5866d3e65e8d6de5c8d3b38b63280507a771b866dd93d8267065406bf5b94fc3214011a7510930ede13", 0xea, 0x6}]) syz_read_part_table(0x4, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="5c6c83d09c0ba2b10d5c877c416604dd3d774feb5b6a1cec6db4807b7923a45789e9e432e10aeea49cb08d8cd2df5cbd9cf82c58cd4b92749c32fc1bfcb487dfc299cdc697f75b2fd5b0d1409655b62c0803cde9279c5a062a176807c8b59e032af4309c2dc9efda06c9fd128c1331ae0374fad3dfca38d2fd34690b11", 0x7d}]) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, 0x0, 0x10}}) 03:21:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet(0x2, 0x200000003, 0x6) connect$inet(r0, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) 03:21:46 executing program 3: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x5, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000140)={0x8, 0x0, 0xda8, 0xfd, 0x80000000, 0x800}) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f00000001c0)=""/208) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00000002c0)={0x3, 0x6, 0x0, 0x10001, 0x1, 0x8}) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000300)=0x5) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000340)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000001380), 0x0, 0x30b000) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000001400)={0x11, 0x1f, &(0x7f00000013c0)="5e4abf56a8f2caa6ffd899e5765c9c7d18401d528342aa8238d4302ab0e35c"}) r2 = syz_open_dev$evdev(&(0x7f0000001440), 0xff, 0x6a101) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000001480)=""/254) r3 = syz_open_dev$evdev(&(0x7f0000001580), 0x8000000000000001, 0x408000) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000001600)={0x53, 0x1, 0x7, {0x7ff, 0xe8}, {0xfffb, 0x3}, @period={0x59, 0x6, 0xfffb, 0xfff, 0x3, {0x3, 0x2, 0x7, 0x2}, 0x4, &(0x7f00000015c0)=[0x4, 0x71b4, 0x4cd, 0x80]}}) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000001680)=""/114) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000017c0)={0x12, 0x9d, &(0x7f0000001700)="5ade30feb020934218f528caf4a0f232732ba499a9a4f1a9dd07d5de9877f55df4c0cd68c3ae008ab356095f3b687a0fa9dca0fe01dd5507c8cf3b9a5172bf3b7f62c6d0db83d5b6702681f246840fb1e736f67da2318a8c892792b1ab7ba4f7dace1b74c95f84d097419d1bdbaa88b81cd6e463d2098d04a2d549e7668cad7403708fa309d04088aa50af669d53a9eae9602d96e53c9c47526d5eb95a"}) syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f0000001800)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0xcf, 0x20, 0x31, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0x1f, 0x3}, [@dmm={0x7, 0x24, 0x14, 0x3ff, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7f}, @acm={0x4, 0x24, 0x2, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xff}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x5, 0xa3, 0x40}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x1, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0xdc, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x20, 0xa0}}}}}]}}]}}, &(0x7f0000001980)={0xa, &(0x7f0000001880)={0xa, 0x6, 0x300, 0x0, 0x70, 0x0, 0x40, 0x2}, 0x2e, &(0x7f00000018c0)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xc0, 0x40, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "59d6984beb4beac6aa7fdf3e609cc5fe"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe9, 0x4, 0x20, 0x4b, 0x1f}]}, 0x2, [{0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x1c0a}}]}) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000019c0)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7d, 0x0, 0xe2, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0xdaea, 0x40, 0x1, {0x22, 0x909}}, {{{0x9, 0x5, 0x81, 0x3, 0x404, 0x0, 0x5, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x80}}]}}}]}}]}}, &(0x7f0000001e80)={0xa, &(0x7f0000001a00)={0xa, 0x6, 0x201, 0x80, 0x4, 0x2, 0xff, 0xf5}, 0xf, &(0x7f0000001a40)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x1, 0x4, 0x8}, @ptm_cap={0x3}]}, 0x8, [{0x2f, &(0x7f0000001a80)=@string={0x2f, 0x3, "2bdecd8ed13c9831651fa13e1d7cdc609d082e7da6d1c1eb9316b6ec897fd8e9f18d9b741f5ec3e2ff3170d35e"}}, {0xb2, &(0x7f0000001ac0)=@string={0xb2, 0x3, "65754cf96ede2ebf9cc49da1822a7865257f17955874c7faf720efb40ddaa7fb7380db1a38e84028cc00b92ef3ea03e33f45c3d6f6137c34070c974a9340515b5afc5c62821db9484e9041a66ef9d87a4683265ab3eebf17da5489b7709d5f98671278325181c13c2c01ffb09c57d433a7d97819bd19c77963577ad3d6077b028eda13bbc7e1301f9fbd93a813bc7fd7884063e4b3adfd6d65a21b5afc4bb4182a15003215a7d1289d03f2e982ea40a1"}}, {0xc8, &(0x7f0000001b80)=@string={0xc8, 0x3, "a3941e1e029b54da4fd5eea75bcabbec95c09bc500e89bbe9edca0b56eb1a2e7d1761ec44f0b2bc39b5fdf4fb3655a680a6a6c2bcc0db7fdb2aeea6149249646be7f55a101203790ac3acbb56693b0c8f3199948f6fbcdb6443281dd51c136bf195e0efdfd60629f7c95114e91a2e6e58e84add1d1f5bc7987d8fe824b783b79c41a5743d72a31b2317b4972c691924b684fa4bc353a967cb261099fb75f39251841430d2302021d8f929e369f72b1aa6e788c6fb89cad7424c9d7efa1c1101675c468f4c658"}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x2001}}, {0xd6, &(0x7f0000001cc0)=@string={0xd6, 0x3, "502dbdebe020b66b1c88216526c3c6e80e1a12733372b9fcafda29fe9ca9b4924864b18f5c3c63d2bb2fefa10d31ed8b6defcfdd616ad46f49e9b6189db9c013dd57b3ddab5171bd9117aa6060ba6b9471b12bfe28b39e98b7888b06dc15abd147de7adb47c4e7d905eed348458d93f919f61d20e03c7f166d38d203b739e47514b109f46cf82a476a28e65ec6282b5c380d8cc53d5307f8aed4a3c03782d22e3abad2fd4e9b03cb5b62a01fcd3b184aae26ebef4dd11c1790077c281c3a270ddad144cd57021aa4bf16bd912455744a9abf771a"}}, {0x1d, &(0x7f0000001dc0)=@string={0x1d, 0x3, "c67febb1cd1754d7de07aac4852d95f5b81e4e35ca26726970ad5f"}}, {0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x4c0a}}]}) 03:21:46 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0)="9c21ecb2fc397428a20a765a2b4bd32704ab", 0x12}, 0x68) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/video', 0x0, 0x0) 03:21:46 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5422, 0x0) 03:21:46 executing program 1: clock_gettime(0x7, &(0x7f0000000200)) [ 1116.956680][ T6960] loop5: detected capacity change from 0 to 5 03:21:46 executing program 0: bpf$MAP_CREATE(0x21, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:46 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x200, "ce8625c7dd19efb07603a384da86677e211189983ddd5df984a7e9ad20c2445a"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x40045701, &(0x7f0000000000)={0x0, "479d3888e3d0f567cbfb1de52c4a223f6fb5900cb10c8069da042aec83c564bb"}) 03:21:46 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x5}]}) 03:21:46 executing program 1: bpf$MAP_CREATE(0x3, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 1117.030372][ T2964] Dev loop5: unable to read RDB block 5 [ 1117.046094][ T2964] loop5: unable to read partition table [ 1117.055451][ T2964] loop5: partition table beyond EOD, truncated [ 1117.067778][ T6960] Dev loop5: unable to read RDB block 5 03:21:46 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5450, 0x0) [ 1117.076464][ T6960] loop5: unable to read partition table [ 1117.094906][ T6960] loop5: partition table beyond EOD, truncated 03:21:46 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) [ 1117.128106][ T6960] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 1117.128476][ T2964] Dev loop5: unable to read RDB block 5 [ 1117.158332][ T2964] loop5: unable to read partition table [ 1117.169823][ T2964] loop5: partition table beyond EOD, truncated 03:21:46 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x44801) 03:21:46 executing program 1: syz_usb_connect$hid(0x2, 0x36, &(0x7f00000019c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x26, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x404}}}}}]}}]}}, 0x0) [ 1117.276165][T11470] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1117.536129][ T5] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1117.716482][T11470] usb 4-1: not running at top speed; connect to a high speed hub [ 1117.816329][T11470] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1117.896252][ T5] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1117.987302][T11470] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1117.996540][T11470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.004545][T11470] usb 4-1: Product: syz [ 1118.008865][T11470] usb 4-1: Manufacturer: ᰊ [ 1118.013460][T11470] usb 4-1: SerialNumber: syz [ 1118.066270][ T5] usb 2-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.40 [ 1118.075576][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.083884][ T5] usb 2-1: Product: syz [ 1118.088405][ T5] usb 2-1: Manufacturer: syz [ 1118.093460][ T5] usb 2-1: SerialNumber: syz [ 1118.116512][ T6986] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1118.138781][ T5] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 1118.278281][ T6965] UDC core: couldn't find an available UDC or it's busy: -16 [ 1118.285691][ T6965] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1118.343476][T12325] usb 2-1: USB disconnect, device number 10 [ 1118.386548][T11470] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 1118.396798][T11470] usb 4-1: USB disconnect, device number 31 03:21:47 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 03:21:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) 03:21:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000480)=""/180) 03:21:47 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000010c0)={@broadcast, @remote, @val, {@ipv6}}, 0x0) 03:21:47 executing program 5: bpf$MAP_CREATE(0x16, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:47 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40505412, 0x0) 03:21:47 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 03:21:47 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5452, &(0x7f0000000080)=0xfdfdffff) 03:21:47 executing program 5: bpf$MAP_CREATE(0x7, 0x0, 0x700) 03:21:47 executing program 1: bpf$MAP_CREATE(0x14, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:48 executing program 0: bpf$MAP_CREATE(0x10, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:48 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5452, &(0x7f0000000080)) 03:21:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000002c0)) 03:21:48 executing program 2: syz_clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000400)=""/204, 0xcc, 0x0, 0x0}, 0x58) 03:21:48 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x4020940d, 0x0) 03:21:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000716000000080099"], 0x20}}, 0x0) 03:21:48 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0)="9c21ecb2fc397428a20a765a2b4bd32704ab1bfe95468838fa365e8dd63ba2e2ed9966e5bb91d4d2acce6faf", 0x2c}, 0x68) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/video', 0x0, 0x0) 03:21:48 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)) 03:21:48 executing program 4: r0 = gettid() syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[r0], 0x1}, 0x58) 03:21:48 executing program 3: getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r1, r0, 0xffffffffffffffff) setreuid(r0, 0xee00) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="0143643030f3b07dcdcf4493261121507b4b374c31", 0x15, 0x8000}], 0x0, &(0x7f0000011700)) [ 1119.062180][ T7022] netlink: 'syz-executor.5': attribute type 153 has an invalid length. 03:21:48 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x4004551e, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r0, 0x5514, 0x0) 03:21:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{}]}) 03:21:48 executing program 2: bpf$MAP_CREATE(0x22, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:48 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 03:21:48 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) write$evdev(r0, 0x0, 0x0) 03:21:48 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x4004551e, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r0, 0x5514, 0x0) 03:21:48 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 03:21:48 executing program 5: bpf$BPF_LINK_UPDATE(0x1d, 0xfffffffffffffffd, 0x0) 03:21:48 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)) 03:21:48 executing program 1: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) 03:21:48 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)) 03:21:48 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x4004551e, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r0, 0x5514, 0x0) 03:21:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045518, &(0x7f0000000380)) 03:21:48 executing program 1: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) 03:21:48 executing program 5: syz_read_part_table(0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000380)) 03:21:48 executing program 4: syz_read_part_table(0xbd0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)='>', 0x1, 0x3}, {&(0x7f0000000200)}]) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 03:21:48 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x16}]}) 03:21:48 executing program 2: syz_clone3(&(0x7f00000005c0)={0x140a00000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:21:48 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x4004551e, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r0, 0x5514, 0x0) 03:21:48 executing program 1: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) 03:21:48 executing program 1: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) 03:21:48 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0145401, 0x0) [ 1119.466423][ T7066] loop4: detected capacity change from 0 to 5 [ 1119.476354][ T26] audit: type=1326 audit(1647400908.570:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7063 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f931cf31049 code=0x0 03:21:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/162) 03:21:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xf4, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) [ 1119.559095][ T7066] Dev loop4: unable to read RDB block 5 [ 1119.573567][ T7066] loop4: unable to read partition table [ 1119.596264][ T7066] loop4: partition table beyond EOD, truncated 03:21:48 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {0x6}]}) 03:21:48 executing program 1: socket$packet(0x11, 0xfa68fcac71f490fe, 0x300) 03:21:48 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000380)) [ 1119.605168][ T2964] Dev loop4: unable to read RDB block 5 [ 1119.612938][ T2964] loop4: unable to read partition table [ 1119.628870][ T7066] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 1119.656705][ T2964] loop4: partition table beyond EOD, truncated [ 1119.673115][ T26] audit: type=1326 audit(1647400908.770:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7084 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f931cf31049 code=0x0 03:21:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8924, &(0x7f0000000080)={'sit0\x00', 0x0}) 03:21:48 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xffffff84}}, &(0x7f0000000180)='GPL\x00'}, 0x48) read(r0, 0x0, 0x0) 03:21:48 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) add_key(&(0x7f0000000540)='ceph\x00', 0x0, 0x0, 0x0, r0) 03:21:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8923, &(0x7f0000000080)={'sit0\x00', 0x0}) 03:21:48 executing program 3: bpf$MAP_CREATE(0xf, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:48 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/video', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/iio', 0x440, 0x0) 03:21:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) 03:21:48 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000380)) 03:21:48 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000380)) 03:21:48 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 03:21:48 executing program 2: bpf$MAP_CREATE(0x4, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000380)) 03:21:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x104, 0x0, 0x0, 0x0) 03:21:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@base={0x10, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x48) 03:21:49 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PIO_FONT(r0, 0x4b61, 0x0) 03:21:49 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/video', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5452, &(0x7f0000000000)=0x100000) 03:21:49 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 03:21:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000380)) 03:21:49 executing program 1: memfd_create(&(0x7f0000000100)='/+-&($\'Z\'.\x00', 0x0) 03:21:49 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5460, 0x0) 03:21:49 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5421, &(0x7f0000000080)) 03:21:49 executing program 0: syz_mount_image$udf(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0xedc0, 0x0) 03:21:49 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0189436, &(0x7f0000000080)) 03:21:49 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40086602, 0x0) 03:21:49 executing program 1: bpf$MAP_CREATE(0x7, 0x0, 0x2) 03:21:49 executing program 5: bpf$MAP_CREATE(0x15, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:49 executing program 3: bpf$MAP_CREATE(0x1d, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:49 executing program 4: bpf$MAP_CREATE(0x2, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:49 executing program 2: syz_mount_image$udf(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x1020, 0x0) 03:21:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000240)) 03:21:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x8}, 0x48) 03:21:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil}) 03:21:49 executing program 3: bpf$MAP_CREATE(0x23, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:49 executing program 4: syz_read_part_table(0x0, 0x1, &(0x7f00000012c0)=[{0x0, 0x0, 0x10001000000000}]) 03:21:49 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x400) 03:21:49 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00;/v']) 03:21:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4c000, 0x0) 03:21:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xf4, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 03:21:49 executing program 3: io_setup(0x6, &(0x7f0000000140)=0x0) io_pgetevents(r0, 0x8, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x989680}, 0x0) [ 1120.352659][ T7157] loop4: detected capacity change from 0 to 81920 03:21:49 executing program 0: openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) 03:21:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x4}, {0x6}]}) 03:21:49 executing program 5: syz_clone3(&(0x7f0000000400)={0x104920000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1}, 0x58) [ 1120.393839][ T7163] loop2: detected capacity change from 0 to 262160 03:21:49 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x2, "479d3888e3d0f567cbfb1de52c4a223f6fb5900cb10c8069da042aec83c564bb"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000240)={0x2, "ddcb981621525d25b976a911daee40b2bb8b323b4c5d5dc7c7c952efe6f24896"}) 03:21:49 executing program 0: bpf$MAP_CREATE(0x1c, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:49 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x80044501, 0x0) [ 1120.490261][ T2964] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1120.508296][ T26] audit: type=1326 audit(1647400909.610:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7168 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecc154a049 code=0x0 [ 1120.551559][ T2964] Buffer I/O error on dev loop4, logical block 0, async page read [ 1120.565711][ T2964] ldm_validate_partition_table(): Disk read failed. 03:21:49 executing program 4: bpf$MAP_CREATE(0x12, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:49 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x0) 03:21:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x5452, &(0x7f0000000080)={'sit0\x00', 0x0}) 03:21:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:49 executing program 0: brk(0xffffffffffffffad) 03:21:49 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x80e85411, 0x0) [ 1120.618252][ T2964] Dev loop4: unable to read RDB block 0 [ 1120.624398][ T2964] loop4: unable to read partition table [ 1120.632363][ T2964] loop4: partition table beyond EOD, truncated 03:21:49 executing program 5: syz_read_part_table(0xbd0, 0x0, 0x0) syz_read_part_table(0x4, 0x0, &(0x7f0000000380)) 03:21:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x35}]}) 03:21:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, 0x0) 03:21:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x8004550f, &(0x7f0000000380)) 03:21:49 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/video', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x0, 0x13, r0, 0x82000000) 03:21:49 executing program 4: brk(0xffffffffffff7fff) 03:21:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:21:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x3, &(0x7f0000000480)=[{0x5}, {}, {}]}) [ 1120.788957][ T7194] loop5: detected capacity change from 0 to 5 03:21:49 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/video', 0x0, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x61013, r0, 0x0) 03:21:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 03:21:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8911, &(0x7f0000000080)={'sit0\x00', 0x0}) 03:21:50 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000200)) [ 1120.886354][ T7194] Dev loop5: unable to read RDB block 5 [ 1120.906793][ T7194] loop5: unable to read partition table [ 1120.946942][ T7194] loop5: partition table beyond EOD, truncated [ 1120.978526][ T7194] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 03:21:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 03:21:50 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 03:21:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8913, &(0x7f0000000080)={'sit0\x00', 0x0}) 03:21:50 executing program 4: prctl$PR_SET_PDEATHSIG(0x1, 0x45) 03:21:50 executing program 0: bpf$MAP_CREATE(0xd, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x4004551e, &(0x7f0000000040)=@usbdevfs_connect={0x9, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r0, 0x5514, &(0x7f0000000380)) [ 1121.023929][ T2964] Dev loop5: unable to read RDB block 5 [ 1121.036973][ T2964] loop5: unable to read partition table [ 1121.063828][ T2964] loop5: partition table beyond EOD, truncated 03:21:50 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x8) 03:21:50 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x80284504, 0x0) 03:21:50 executing program 2: bpf$MAP_CREATE(0x6, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:50 executing program 0: bpf$MAP_CREATE(0x13, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x4004551e, &(0x7f0000000040)=@usbdevfs_connect={0x9, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r0, 0x5514, &(0x7f0000000380)) 03:21:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x1, 0xf0}, 0x18) sendfile(r1, r0, &(0x7f0000000100)=0x3f, 0x4) ioctl$USBDEVFS_IOCTL(r0, 0x4004551e, &(0x7f0000000040)=@usbdevfs_connect={0x9, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, &(0x7f0000000380)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) r5 = dup(r4) r6 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) setsockopt$inet6_int(r6, 0x29, 0x3e, &(0x7f0000000000)=0x5, 0x4) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, 0x0) 03:21:50 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x80605414, 0x0) 03:21:50 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x2, 0x0) 03:21:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d00)=ANY=[], 0x1) 03:21:50 executing program 4: brk(0x555555884000) 03:21:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x400445a0, 0x0) 03:21:50 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x80045400, &(0x7f0000000080)) 03:21:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x4004551e, &(0x7f0000000040)=@usbdevfs_connect={0x9, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r0, 0x5514, &(0x7f0000000380)) [ 1121.312468][ T26] audit: type=1800 audit(1647400910.410:259): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1180 res=0 errno=0 03:21:50 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc020660b, 0x0) 03:21:50 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x80104592, 0x0) 03:21:50 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0145401, &(0x7f0000000080)) 03:21:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x4004551e, &(0x7f0000000040)=@usbdevfs_connect={0x9, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r0, 0x5514, &(0x7f0000000380)) 03:21:50 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x28}]}) 03:21:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x80084504, 0x0) 03:21:50 executing program 5: syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x163303) 03:21:50 executing program 3: syz_usb_connect(0x0, 0x3e, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0xaa, 0xe7, 0xc0, 0x40, 0x1b3d, 0x1f2, 0xa91c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf1, 0x0, 0x1, 0xfe, 0xd, 0x10, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "ccd805d77c12"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0x83, 0xe5}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x19, &(0x7f0000000040)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xff}, @ss_cap={0xa}]}, 0x1, [{0x2, &(0x7f0000000080)=@string={0x2}}]}) 03:21:50 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x3, 0x0, 0x0, 0x800}]}) 03:21:50 executing program 1: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder-control\x00', 0x0, 0x0) 03:21:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x80084502, 0x0) 03:21:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0x7c4, 0xffffffffffffffff, 0x1}, 0x48) 03:21:51 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x4020940d, &(0x7f0000000080)) 03:21:51 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380)=@usbdevfs_driver={0x0, 0x3970003, 0x0}) 03:21:51 executing program 4: setregid(0x0, 0x0) setregid(0x0, 0x0) 03:21:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000180)=[0x0, 0xfffffffa]) 03:21:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000140)=""/102) 03:21:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80085504, &(0x7f0000000380)) 03:21:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x80045300, &(0x7f0000000080)={{}, 'port0\x00'}) [ 1122.126194][ T5] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1122.566320][ T5] usb 4-1: config 0 has an invalid interface number: 241 but max is 1 [ 1122.574589][ T5] usb 4-1: config 0 has no interface number 1 [ 1122.628831][ T5] usb 4-1: config 0 interface 241 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1122.706384][ T5] usb 4-1: language id specifier not provided by device, defaulting to English [ 1122.846693][ T5] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01f2, bcdDevice=a9.1c [ 1122.876414][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.884501][ T5] usb 4-1: Product: syz [ 1122.926057][ T5] usb 4-1: Manufacturer: syz [ 1122.933085][ T5] usb 4-1: SerialNumber: syz [ 1122.962153][ T5] usb 4-1: config 0 descriptor?? [ 1123.017450][ T5] ftdi_sio 4-1:0.241: FTDI USB Serial Device converter detected [ 1123.038261][ T5] usb 4-1: Detected FT2232C [ 1123.226188][ T5] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1123.256065][ T5] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1123.275558][ T5] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1123.285637][ T5] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1123.294062][ T5] usb 4-1: Detected FT2232C [ 1123.316279][ T5] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 1123.336419][ T5] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 1123.344581][ T5] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 1123.365570][ T5] usb 4-1: USB disconnect, device number 32 [ 1123.401073][ T5] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1123.414438][ T5] ftdi_sio 4-1:0.241: device disconnected [ 1123.424180][ T5] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 1123.434184][ T5] ftdi_sio 4-1:0.0: device disconnected 03:21:52 executing program 3: syz_usb_connect(0x0, 0x3e, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0xaa, 0xe7, 0xc0, 0x40, 0x1b3d, 0x1f2, 0xa91c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf1, 0x0, 0x1, 0xfe, 0xd, 0x10, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "ccd805d77c12"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0x83, 0xe5}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x19, &(0x7f0000000040)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xff}, @ss_cap={0xa}]}, 0x1, [{0x2, &(0x7f0000000080)=@string={0x2}}]}) 03:21:52 executing program 4: syz_mount_image$udf(0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[{&(0x7f0000000080)="ec", 0x1}, {&(0x7f00000000c0)="a729cecd81a2386e1d8453eda2e9cc6e517c555dc9c4f8fac58b4f8a48032f6965cb70a706bff769bcfac64f006ca74b9875ba3668d60faead0fd57858c855695eca1400496461cd50a2584066eefb6987abf571cd1fe284652dbc70efe1a38a6e6b13fe9c39b1939593", 0x6a, 0x80000001}, {&(0x7f00000001c0)="9f", 0x1, 0xf8ed}, {&(0x7f00000002c0)="d8", 0x1}, {&(0x7f0000000380)="0b3fd09170", 0x5, 0x7f89724}, {0x0}], 0x0, &(0x7f0000000600)={[{@session}, {@unhide}], [{@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, '-*+*'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@subj_user={'subj_user', 0x3d, '\xa5\\-*\x9a/:}'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) 03:21:52 executing program 2: msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) 03:21:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000180)) 03:21:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80085504, &(0x7f0000000380)) 03:21:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 03:21:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000001c0)=""/136) 03:21:52 executing program 2: bpf$MAP_CREATE(0x9, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 1123.760733][ T7298] loop4: detected capacity change from 0 to 264192 03:21:52 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "8703bd0460cafb8e7aedee12d062be02464c8441fc8c5188731a13d2cd5225e8"}) 03:21:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80085504, &(0x7f0000000380)) 03:21:52 executing program 4: syz_open_dev$dri(&(0x7f0000000200), 0x0, 0xc080) 03:21:53 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x200, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x701]) [ 1124.076183][ T5] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1124.516108][ T5] usb 4-1: config 0 has an invalid interface number: 241 but max is 1 [ 1124.524356][ T5] usb 4-1: config 0 has no interface number 1 [ 1124.530566][ T5] usb 4-1: config 0 interface 241 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1124.576164][ T5] usb 4-1: language id specifier not provided by device, defaulting to English [ 1124.696393][ T5] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01f2, bcdDevice=a9.1c [ 1124.706536][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.715506][ T5] usb 4-1: Product: syz [ 1124.719815][ T5] usb 4-1: Manufacturer: syz [ 1124.724405][ T5] usb 4-1: SerialNumber: syz [ 1124.731208][ T5] usb 4-1: config 0 descriptor?? [ 1124.777033][ T5] ftdi_sio 4-1:0.241: FTDI USB Serial Device converter detected [ 1124.785130][ T5] usb 4-1: Detected FT2232C [ 1124.986248][ T5] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1125.006555][ T5] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1125.020731][ T5] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1125.030811][ T5] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1125.039565][ T5] usb 4-1: Detected FT2232C [ 1125.056312][ T5] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 1125.076310][ T5] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 1125.085330][ T5] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 1125.095644][ T5] usb 4-1: USB disconnect, device number 33 [ 1125.132830][ T5] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1125.144513][ T5] ftdi_sio 4-1:0.241: device disconnected [ 1125.159161][ T5] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 1125.174720][ T5] ftdi_sio 4-1:0.0: device disconnected 03:21:54 executing program 3: syz_usb_connect(0x0, 0x3e, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0xaa, 0xe7, 0xc0, 0x40, 0x1b3d, 0x1f2, 0xa91c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf1, 0x0, 0x1, 0xfe, 0xd, 0x10, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "ccd805d77c12"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0x83, 0xe5}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x19, &(0x7f0000000040)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xff}, @ss_cap={0xa}]}, 0x1, [{0x2, &(0x7f0000000080)=@string={0x2}}]}) 03:21:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80085504, &(0x7f0000000380)) 03:21:54 executing program 5: bpf$MAP_CREATE(0x8, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:54 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) 03:21:54 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x20000000000003d5, &(0x7f0000000040)=[{}]}) 03:21:54 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x34}]}) 03:21:54 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x64}]}) 03:21:54 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0xfffff00000000000) 03:21:54 executing program 2: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x181c00) 03:21:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000380), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000003c0)=""/221) 03:21:54 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) 03:21:54 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x35, &(0x7f0000000040)}) [ 1125.703058][ T26] audit: type=1326 audit(1647400914.800:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7337 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b0ba45049 code=0x0 [ 1125.846235][ T5] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1126.286047][ T5] usb 4-1: config 0 has an invalid interface number: 241 but max is 1 [ 1126.294379][ T5] usb 4-1: config 0 has no interface number 1 [ 1126.301090][ T5] usb 4-1: config 0 interface 241 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1126.346193][ T5] usb 4-1: language id specifier not provided by device, defaulting to English [ 1126.466291][ T5] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01f2, bcdDevice=a9.1c [ 1126.475519][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.484229][ T5] usb 4-1: Product: syz [ 1126.488582][ T5] usb 4-1: Manufacturer: syz [ 1126.493258][ T5] usb 4-1: SerialNumber: syz [ 1126.501636][ T5] usb 4-1: config 0 descriptor?? [ 1126.547031][ T5] ftdi_sio 4-1:0.241: FTDI USB Serial Device converter detected [ 1126.557108][ T5] usb 4-1: Detected FT2232C [ 1126.756715][ T5] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1126.776262][ T5] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1126.783899][ T5] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1126.800233][ T5] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1126.808698][ T5] usb 4-1: Detected FT2232C [ 1126.826281][ T5] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 1126.846359][ T5] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 1126.855073][ T5] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 1126.873635][ T5] usb 4-1: USB disconnect, device number 34 [ 1126.897106][ T5] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1126.910828][ T5] ftdi_sio 4-1:0.241: device disconnected [ 1126.921239][ T5] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 1126.931400][ T5] ftdi_sio 4-1:0.0: device disconnected 03:21:56 executing program 3: syz_usb_connect(0x0, 0x3e, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0xaa, 0xe7, 0xc0, 0x40, 0x1b3d, 0x1f2, 0xa91c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf1, 0x0, 0x1, 0xfe, 0xd, 0x10, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "ccd805d77c12"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0x83, 0xe5}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x19, &(0x7f0000000040)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xff}, @ss_cap={0xa}]}, 0x1, [{0x2, &(0x7f0000000080)=@string={0x2}}]}) 03:21:56 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup(r2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80001d00c0d0) 03:21:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x891d, &(0x7f0000000080)={'sit0\x00', 0x0}) 03:21:56 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@empty}, 0x14) 03:21:56 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f00000000c0)) 03:21:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f0000000080)={'sit0\x00', 0x0}) 03:21:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xffffffffffffff0c}}}]}, 0x34}}, 0x0) 03:21:56 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc5, 0x1b, 0xbf, 0x20, 0x16d8, 0x7002, 0x35f6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x64, 0xed, 0x2e}}]}}]}}, 0x0) 03:21:56 executing program 2: bpf$MAP_CREATE(0x11, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000080)="adb7cda586c16c1e51804373e8ac3a97", 0x10) 03:21:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000002c0)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}}) 03:21:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) [ 1127.484350][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1127.656051][ T5] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1127.676257][ T5471] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1127.946358][ T5471] usb 6-1: Using ep0 maxpacket: 32 [ 1128.136552][ T5] usb 4-1: config 0 has an invalid interface number: 241 but max is 1 [ 1128.144796][ T5] usb 4-1: config 0 has no interface number 1 [ 1128.151087][ T5] usb 4-1: config 0 interface 241 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1128.216432][ T5] usb 4-1: language id specifier not provided by device, defaulting to English [ 1128.296284][ T5471] usb 6-1: New USB device found, idVendor=16d8, idProduct=7002, bcdDevice=35.f6 [ 1128.305537][ T5471] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.313655][ T5471] usb 6-1: Product: syz [ 1128.318637][ T5471] usb 6-1: Manufacturer: syz [ 1128.323312][ T5471] usb 6-1: SerialNumber: syz [ 1128.330201][ T5471] usb 6-1: config 0 descriptor?? [ 1128.356359][ T5] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01f2, bcdDevice=a9.1c [ 1128.365543][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.373659][ T5] usb 4-1: Product: syz [ 1128.381502][ T5] usb 4-1: Manufacturer: syz [ 1128.386170][ T5] usb 4-1: SerialNumber: syz [ 1128.400232][ T5] usb 4-1: config 0 descriptor?? [ 1128.448242][ T5] ftdi_sio 4-1:0.241: FTDI USB Serial Device converter detected [ 1128.456788][ T5] usb 4-1: Detected FT2232C [ 1128.581189][ T5471] usb 6-1: USB disconnect, device number 86 [ 1128.656243][ T5] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1128.676237][ T5] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1128.684967][ T5] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1128.698875][ T5] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1128.708475][ T5] usb 4-1: Detected FT2232C [ 1128.726327][ T5] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 1128.746626][ T5] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 1128.755437][ T5] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 1128.776567][ T5] usb 4-1: USB disconnect, device number 35 [ 1128.784845][ T5] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1128.795193][ T5] ftdi_sio 4-1:0.241: device disconnected [ 1128.812782][ T5] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 1128.823248][ T5] ftdi_sio 4-1:0.0: device disconnected 03:21:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x5}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x50c4, 0x0, 0x54}, 0x9c) 03:21:58 executing program 4: syz_clone(0x4226000, 0x0, 0x0, 0x0, 0x0, 0x0) 03:21:58 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/stat\x00', 0x5c, 0x0) 03:21:58 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x8, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 03:21:58 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:21:58 executing program 2: syz_clone(0xb90a0040, 0x0, 0x0, 0x0, 0x0, 0x0) 03:21:58 executing program 1: bpf$MAP_CREATE(0xa, &(0x7f00000013c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:21:58 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01002e"], &(0x7f0000000580)=""/160, 0x2e, 0xa0, 0x1}, 0x20) 03:21:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10160) 03:21:58 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) io_setup(0x20fe, &(0x7f00000001c0)) 03:21:58 executing program 4: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0) 03:21:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone(0xab340200, 0x0, 0x0, 0x0, 0x0, 0x0) 03:21:58 executing program 1: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040), 0x8) 03:21:58 executing program 2: syz_clone(0xb90a0040, 0x0, 0x0, 0x0, 0x0, 0x0) 03:21:58 executing program 0: bind$can_raw(0xffffffffffffffff, 0x0, 0x0) io_setup(0x20fe, &(0x7f00000001c0)) 03:21:58 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) 03:21:59 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:21:59 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140), 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:21:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140), 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:21:59 executing program 2: syz_clone(0xb90a0040, 0x0, 0x0, 0x0, 0x0, 0x0) 03:21:59 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r6 = dup3(r0, r1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r8, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r8, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x10000, 0x8be3, 0x80000000, 0x1}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x880) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r8, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1f}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000a0000000000000000000a20000000000a03000000000005000000010000000900010073797a300000000078000000090a010400000000000000000100000208000640ffffff000900020073797a3100000000080005400000002b080005400000003b400012800c000180080001006c6f6700300001800d00010073796e70726f7879000000001c000280080003400000000e0800034000000000060001400e6d0000140000001008010000000000000000000000000a"], 0xc0}}, 0x0) [ 1130.010066][ T7409] tipc: Started in network mode 03:21:59 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x80140, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x7, 0x8, 0x4b, @mcast2, @empty, 0x8000, 0x40, 0xffffffff, 0x6}}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000280)={@private, @remote, 0x0}, &(0x7f00000002c0)=0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000008000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=@deltfilter={0x13d4, 0x2d, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x5, 0xfff9}, {0xb, 0xd}, {0x4, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0x1308, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'erspan0\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0xd, 0x7}}, @TCA_U32_ACT={0x12a8, 0x7, [@m_ctinfo={0x160, 0x1e, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x2, 0x4, 0x5f8, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfbe}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7f, 0x2, 0x0, 0xe2, 0x3f}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x3, 0x1, 0x4}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80000001}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x800}, @TCA_CTINFO_ACT={0x18, 0x3, {0x46b9, 0x40, 0x10000003, 0x934e9f9}}]}, {0xb1, 0x6, "e52c11a6b9447ffbd274d35a7cf2286f420143b252251f1d4d2f39b9131bbd9e3e0348c8110fd98571e175579294e646200eb8edd779b94cd0fe0124e61956c85e19bb3149a1fac49bdfdd0cb597feec6350e5084d53240b165fcd35a008f7a3e1b9977eb7c340d0355c155226af1a4e1e20bde2c5cb0ac7dbb1952438f34da574e1570aace00a6a6805c4ed465334479b04d4305f4bf2c7ea53f8e919564ecfc61c5f1278ed5d05f94ab88de6"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0xfc, 0xd, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x401, 0x0, 0x2, 0x3}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x84, 0xfffffff7, 0x7, 0x9, 0x1}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x20, 0x3, 0x4, 0x3ff}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x0, 0xffffffffffffffff, 0x3, 0x6}, 0x2}}]}, {0x50, 0x6, "7b7a3e011c2d6e21f2bc3e23e8e5dbedff2deed1eb17491eaf9941a866c9c18be3d4b867477f12486cb3c412abfb4ef5e790c3c08e7419f5a25cf4b41fab184e01fdadcd7c637943aa0b4482"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x100, 0x0, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x999}]}, {0xba, 0x6, "c82340a1f895ee595d1201f80fcc5c57f21068bc03b2a321370072b7a2b1a81b21aa953701aabe4b83231bf4b4c51086afbb921846e18e5472acd22025adc462c10937c284e65caf83909e1cb840273b4b9816d0f331c9792c5f7679483b4a89e005e17e02c2ffae9d9e26aec66481b68dffb05badaa9caad368eef87e7ea700187c1d5a4d8fcf43c183602dccef790c33559cc4796644d4bc1b61d1589b9dd16e8a18257bbebc9f5c2a18bfdf0f9cb038b5b0468332"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0xf48, 0xf, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0xc185, 0x0, 0x4, 0x5, 0x5}, 0x81, 0x2, [{0x4, 0x3, 0x696, 0x2, 0x8, 0x9}, {0xffff, 0x6263, 0x101, 0x3, 0x7, 0x6}]}, [{0x2, 0x80000000, 0x7, 0x80000000, 0x1ff, 0x9}, {0x2, 0x0, 0x8000, 0x2, 0x9, 0x3}, {0x8001, 0x8, 0x7f, 0x0, 0x7e, 0x3}, {0x7f, 0x912, 0x3ff, 0x2b, 0x9, 0x6fd}, {0x1, 0xff, 0x5, 0x6, 0x100, 0x1}, {0x80000001, 0xfffffff9, 0x8, 0x8001, 0x80000001, 0x4000}, {0x1, 0x7, 0xfffffff7, 0x80, 0x1, 0x5}, {0x7f, 0x4, 0x2, 0x7, 0xffffffb2, 0x4}, {0xffffffff, 0x8, 0x28, 0x1, 0x1ca, 0x6}, {0xffffffff, 0x5, 0x8, 0x0, 0x7, 0x6}, {0x3, 0x9, 0x80000000, 0x7, 0x40, 0x100}, {0x1, 0xfffffffd, 0x1000, 0x3ff, 0x4, 0x4}, {0x34, 0x7, 0x800000, 0x0, 0xfffffffe, 0x2}, {0xdac5, 0x1, 0x138, 0x7, 0xfffffffa, 0x4}, {0x6, 0x6, 0x100, 0x412, 0x0, 0x3}, {0x32fc, 0x9, 0x800, 0x7, 0xfffffffb, 0x1c0336f5}, {0x1b85, 0x6, 0x4, 0x800, 0xffff, 0x1e0c}, {0x0, 0x0, 0xfed, 0x6, 0x400, 0x100}, {0x4280, 0x2, 0x6, 0x91a, 0x3ff, 0xffffffff}, {0x0, 0x6, 0x200, 0x7, 0x9, 0x6}, {0x0, 0xffffd880, 0x3, 0x6, 0x2, 0x3}, {0x6, 0x3, 0x9, 0x4, 0x7, 0x8}, {0xcd, 0x7, 0x9, 0x7, 0x1, 0x3f}, {0x7, 0x1, 0x40, 0x84, 0x0, 0x5}, {0x8, 0x2, 0x7ff, 0x1, 0x0, 0x6}, {0x2, 0x9, 0x800, 0x101, 0x3e, 0x1}, {0x6, 0x7, 0x444, 0x6, 0x8, 0x2}, {0x6, 0x7, 0x6, 0xffff, 0x9, 0x4}, {0xd6b, 0x3, 0x4, 0x400, 0x8000, 0x8}, {0x1, 0x8, 0x1ff, 0x101, 0xab96, 0x9}, {0x2, 0x569bb710, 0x2, 0x5, 0x7}, {0x5, 0x100, 0xffff, 0x2, 0x1, 0x3}, {0x2, 0x4, 0x0, 0x481, 0x4, 0xffffffff}, {0x6, 0x3, 0x6, 0x101, 0x1, 0x1ff}, {0x0, 0x400, 0xfffff001, 0x8, 0x718, 0xf1}, {0x3, 0x4, 0xfffff001, 0x10000, 0xff, 0x3}, {0xffffffff, 0x0, 0x9, 0x9, 0x8, 0x7fffffff}, {0x7fffffff, 0x0, 0xc7c, 0xff, 0xd35, 0xdd71}, {0x3, 0x5, 0x0, 0xfffffffe, 0x100, 0x4}, {0x6, 0xaa7, 0x8, 0x401, 0x1f}, {0x5, 0x8, 0x80000001, 0x8, 0x6, 0x86d1}, {0x10001, 0x1, 0x5, 0x1, 0xfffffff8, 0x202b}, {0x1b, 0x1, 0x200, 0x7, 0x101, 0x1}, {0x0, 0x8000, 0xfffffc01, 0x2, 0x8, 0x1}, {0xdcc, 0x3, 0x80000001, 0xfff, 0x0, 0x9}, {0x1f, 0x3ff, 0x2, 0x74, 0x7, 0x4}, {0x20, 0x9, 0x1, 0x6, 0x2, 0x8000}, {0x9, 0x12b, 0x9, 0x80000000, 0x10000, 0xfffffff8}, {0x2, 0x400, 0x3, 0x0, 0x1, 0x5}, {0xfffffffc, 0xffff, 0x20, 0x1, 0x8, 0x7ff}, {0x4, 0x6, 0x1, 0x0, 0x0, 0x7}, {0x1f, 0x2, 0x0, 0x3, 0x3526f5c0, 0x8}, {0x5, 0x2, 0x2, 0xcd28, 0x5, 0x1}, {0x101, 0x0, 0xffffffff, 0x3, 0x4, 0x2}, {0x10001, 0x6, 0x8, 0x4, 0x9, 0x892f}, {0x0, 0x2, 0x6, 0x2, 0x6}, {0x5, 0x4, 0x5, 0x1, 0x9}, {0x3, 0x1f, 0x6, 0x7, 0x917f, 0x6}, {0x48ab, 0x7, 0x10001, 0x3ff, 0x5, 0x3}, {0x6, 0x6d2, 0x1, 0x8, 0x5b8d, 0x62f}, {0x2, 0x8, 0x1f, 0x0, 0x8, 0xc9}, {0x9, 0x3, 0x4, 0xd11, 0x6}, {0x9, 0x7fffffff, 0x0, 0x40, 0x6, 0x20}, {0x8, 0x7, 0x2, 0x6, 0x43e, 0x8}, {0x8, 0x3, 0x8000, 0x0, 0x2, 0x9}, {0x80, 0x5dde, 0x0, 0x7fffffff, 0x8, 0x1f}, {0x7, 0x0, 0x1, 0x7, 0xffffffe1, 0x80}, {0x81, 0x20, 0x1, 0x80000000, 0x1}, {0x101, 0x2, 0x2, 0x4, 0x4, 0xa0000}, {0x400, 0x3, 0x93, 0x1, 0x7, 0x8}, {0x5, 0x6, 0x200, 0x46, 0x100, 0x6}, {0x665, 0x6, 0xfffffffc, 0x9, 0x2, 0x10000}, {0x4, 0x2, 0x532, 0x5, 0x4, 0xfffffffa}, {0x1f, 0x4, 0x80, 0x2, 0x5, 0x6}, {0x1f, 0x42a9, 0x7, 0x8, 0x1, 0xb2}, {0xf7c, 0x18000, 0x80000000, 0x3, 0x1, 0x401}, {0x3, 0x8000, 0xfffffff7, 0x80000001, 0xd6c, 0x3f}, {0x4, 0x4, 0x6, 0x1, 0x91f6, 0x4}, {0xffff, 0x7, 0x5, 0x6, 0x1f, 0x9}, {0xfffffe00, 0x6, 0x0, 0x5, 0x0, 0x5}, {0x1, 0xfd, 0xc4, 0x6}, {0x5, 0x1f, 0x9, 0x5, 0x3, 0x4}, {0x9, 0x75b, 0x1ff, 0xb68, 0x6de, 0x6}, {0x8, 0x5, 0x10001, 0x5, 0xfff, 0x7fffffff}, {0x0, 0x6, 0x40, 0x5, 0xffffffff, 0x5d8}, {0x7, 0x0, 0x404, 0x7f, 0x6, 0x6}, {0x81, 0x3, 0x800, 0x5, 0x8001, 0x1}, {0x6, 0x10001, 0x0, 0x8, 0xe1b, 0x6}, {0x8, 0x8, 0x80b, 0x3, 0x3ff, 0x8}, {0x46, 0x5, 0x8, 0xe1, 0x7, 0x9}, {0x3, 0x1ff, 0x3, 0x5, 0x43, 0x3}, {0x400, 0x8, 0x80000000, 0x9, 0x5, 0x10000000}, {0x0, 0x0, 0x6, 0x3, 0x5, 0x3f}, {0x7, 0x7, 0x2eb4dcb7, 0x8, 0x8, 0x3}, {0x3, 0x100, 0x200, 0x28d, 0x5, 0x3}, {0xf1b0, 0xfff, 0xffffffff, 0x401, 0x7, 0xffffffff}, {0x8, 0x21, 0x0, 0xffffffff, 0x1, 0x4}, {0x0, 0x889, 0x400, 0x9, 0xfffffffa, 0x3}, {0x583, 0x8, 0x0, 0x1, 0x3, 0x5}, {0x4, 0xfb72, 0x6f85, 0x0, 0x3, 0x1}, {0x3c1, 0x80000001, 0x7, 0x9b, 0xfffffffb, 0x8001}, {0x2, 0xfff, 0x5, 0x401, 0x8, 0x4}, {0x2c2000, 0x7f, 0x0, 0xc0f7, 0x6, 0x15}, {0xfffff000, 0x3, 0x9, 0x0, 0xa2, 0x3}, {0x204, 0xffff, 0x5, 0xfffffe01, 0x0, 0x6}, {0x6, 0x80010, 0x8000000, 0x80000000, 0x80000001, 0xcf8}, {0x6, 0x4, 0xa5ac, 0x1, 0x0, 0x3f}, {0x5, 0x4, 0x7, 0x8, 0x7f143489, 0x2}, {0x4, 0x3, 0xca, 0x7ff, 0x7fffffff, 0x5}, {0x6, 0x0, 0x1, 0x3, 0x2, 0x20}, {0x6, 0x3, 0x7a, 0xff, 0x7ff, 0x20}, {0x3, 0x1000, 0x6, 0x1000200, 0x7f, 0xe2ea}, {0xfffffffd, 0xfff, 0x8, 0x8, 0xff, 0xe0e3}, {0x9, 0x6, 0x7fffffff, 0x3, 0x36dd40, 0x87}, {0xffff, 0x9, 0x0, 0x0, 0xffff8000, 0x7}, {0xfffffff7, 0x2, 0x5e2, 0x200, 0x200}, {0x3c, 0x2000000, 0x5, 0x3, 0x1, 0x7a2}, {0xfff, 0xffe000, 0xfffffffa, 0x8, 0x9, 0x10000}, {0x500000, 0x2, 0x3ff, 0x1, 0xd9, 0xfff}, {0xfffffffe, 0x7, 0x6, 0x9, 0xffff, 0x7}, {0x3, 0x3, 0x7, 0x6, 0x400, 0x40}, {0xfffffffe, 0x10001, 0x4, 0x2, 0xdc, 0x7fff}, {0x2, 0x7, 0x100, 0x8, 0x7, 0xf26}, {0x2, 0x81, 0x75, 0x1, 0x80000000, 0x9}, {0x5, 0x3, 0x4, 0x9fc, 0x9, 0xded}, {0x1, 0x5, 0x48994c56, 0x7, 0x0, 0xfffffbff}, {0x9, 0x7, 0x7, 0x0, 0x6, 0x2}, {0x7, 0xd9df, 0x1, 0x7, 0x3, 0x9}], [{}, {0x3}, {0x3, 0x1}, {0x1}, {0x4, 0xa58f4b1492e98c2}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0xc}, {}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x2}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x9df2348d6352fbb6}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x5}, {0x3}, {0x1}, {0x3}, {0x3}, {0x5}, {0x1}, {0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x7}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x3, 0x1}]}}]}, {0xcb, 0x6, "3230603139f9aec13cab794cd30d18b6ea043b2733c0b75fcddc218c67735c42631176574189eb1f1d408271991e0c96a25747e9cb556560afd3043e45111c42380e137f7166ca93a914d1b7dde8ca9080ccd3d4b4ed72b2f5ed0d66c351ea1cfc902011891a27cd399f40519ace25735f10f0d1980a6ba3b9f08026de433170ccd9f10497b3595564314d7a889e2819ba743e23ed7229cf96517ca1ac326b58b4b14819b5c6b7ec25f07b53d251adc8d0c6a9a0be2e8e77a76ff5454a68381bed8e5299c7e64c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_CLASSID={0x8, 0x1, {0x6, 0xa}}, @TCA_U32_INDEV={0x14, 0x8, 'bridge_slave_1\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x84, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "859cec3e28235da2ac3f6b2c22ff1679"}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3ff80}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x65d}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4dc}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7fff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x67c5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x7d}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x13d4}, 0x1, 0x0, 0x0, 0x810}, 0x4004800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000a0000000000000000000a20000000000a030000000000050000000100000009000100730000000000000060000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000003b24001180090001006d657461000000001400028008000140000000000800024000000018140000001000010000000000000000000000000a"], 0xa8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, r8, {0x1, 0x1}}, './file0\x00'}) 03:21:59 executing program 1: ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002840)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{}, r1, 0x4, @unused=[0x101, 0x2, 0xfffffffffffffffe, 0x8], @name="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"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001840)={{}, r1, 0x8, @inherit={0x78, 0x0}, @devid}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"d81bccdcb82566fab92bf81139723e39", r1, 0x0, {0x46, 0x143}, {}, 0x132, [0xfffffffffffffcda, 0x7, 0x2, 0x0, 0x401, 0x9, 0x8, 0x6, 0xfffffffffffff901, 0x401, 0x0, 0x1]}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000400)={{}, r1, 0x18, @inherit={0x68, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000400000000000000000000000100000080ffffff3f000000280000000000000002000000000000003f0000000000000007000000000000001e09000000000000ffff000000f11c83445490c0be00000007000000000000003f00000000000000"]}, @name="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"}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000000c0)={0x0, 0x83, 0x6, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000004c0)={{}, r1, 0x12, @unused=[0x5, 0x5, 0x1, 0x4], @devid=r2}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000180)={{}, r1, 0x1a, @inherit={0x60, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"/320]}, @name="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"}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000000600000001591a6721677962198ff711abcfeca4bcaef51e462d6c824c46735b1e0233dc5230ce4e339f12d8bce2a8a2d4e634e73937f844c78e283133440583006e9ee726d233cc285a2bfab6ae7b5032b7279dea299bcb20610fe32a8e9a2c9e42f0dec3ce05f38fe7482b2badd3868389efe1ac09877a402a484a617d90eaf184e9f077048054f320bf43bd1f0738"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000016c0)="1a", 0x1}], 0x1}}, {{&(0x7f0000002c80)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000004180)=[{&(0x7f0000001700)="928f104c68ec3f22eb315062449443c337f4097dc6bd8077c685cd3d9a37f3caf3d3d3f416a06f60a2d62f07d01f4ebfc5bfb0c45a15fa34d4cc4d30cce9539cdd033b6c78ed5236085757e8b9727b57d83b02fa267b844d548099236c21b13998a1d1d67fb0592952887355d62d650d39522e5b4903ff0700008954f2549a69ee66a471acb7981902486571a87cde75634046c0108c691d7165215eae3fb708afbdd8d171f5c546c011323b1ebb89a0a17eff4a59e27344faf70ba574168547f10eca534600000000", 0xc9}], 0x1}}], 0x2, 0x200080c0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000007c0)={r5, 0x6, 0x6}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={r5, 0x401, 0x7}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000240)={{}, r1, 0x8, @unused=[0x1, 0x3, 0x4, 0x4f6], @devid=r5}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000a0000000000000000000a20000000000a03000000000005000000010000000900010073797a300000000060000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000003b24001180090001006f657461000000001400028008000140000000000800024000000018140000001000010000000000000000000000000a"], 0xa8}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) [ 1130.059498][ T7409] tipc: Node identity 9, cluster identity 4711 [ 1130.088595][ T7409] tipc: Node number set to 9 [ 1130.184578][ T7417] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 03:21:59 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000280)={0x0, 0x702, 0x1, [0x2, 0xe9, 0x0, 0x7f, 0x82], [0x0, 0x4, 0x0, 0x2, 0xfffffffffffffffa, 0x2, 0x4, 0x6, 0x6, 0xc1a, 0x6, 0x2, 0x8, 0x10, 0x59, 0x0, 0x3ff, 0x1, 0x5, 0x9, 0x9, 0x4, 0x2, 0x3, 0xffffffffffffffff, 0x80000, 0x2fa4, 0x4, 0x7, 0x10001, 0x7, 0x7, 0x100000000, 0xba, 0x8000000000000001, 0x9, 0x75, 0x0, 0x9, 0xffffffffffff08fe, 0x5, 0x3, 0x0, 0x3, 0x200, 0x100000000, 0x3, 0x3f, 0x1, 0x100, 0x5000, 0x5, 0xffffffffffffffd9, 0x1, 0x4, 0x4, 0x9, 0x100000000, 0x0, 0xb1, 0x1, 0xfffffffffffffff7, 0x80, 0x1, 0xb6, 0x6, 0x401, 0x2, 0x7de9, 0x6, 0x0, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x9, 0xff, 0x600000000, 0x101, 0xe74, 0x5, 0xaf1, 0x9, 0x1000, 0x67ead2e, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x800, 0x8, 0x3, 0x7, 0xf5fa, 0x80000000, 0x748, 0x0, 0x10000, 0x80000000, 0x400, 0x1, 0xa49, 0x0, 0x6, 0x520, 0xfffffffffffffff9, 0x49, 0x81, 0x18e, 0x9, 0x3c5, 0xffffffffffffffc1, 0x0, 0x100000000, 0x9, 0x59f, 0x8, 0x5, 0x3ff]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x400, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000008000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048004}, 0x40000) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001a80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000740)=@deltfilter={0x12e8, 0x2d, 0x2, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff3, 0xe}, {0xf, 0x2}, {0x0, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x12b8, 0x2, [@TCA_CGROUP_POLICE={0xc54, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x401, 0x4, 0x9b5, 0x2, 0x1d0, 0x6399, 0xc123, 0x9, 0xffff76f2, 0x7, 0x1, 0x7f, 0x2, 0x880f, 0x8000, 0x1, 0x8c, 0xfffffffc, 0x4, 0x7fffffff, 0x7, 0x2, 0x0, 0x9, 0xfff, 0x7, 0xd65, 0xf8000000, 0x101, 0x81, 0x80000000, 0x9, 0x2, 0xffff, 0x1fc, 0x54a, 0x3, 0x2, 0xfffffff7, 0x9, 0xd8, 0x200, 0x9, 0x5, 0x200000, 0xff, 0x9, 0x4, 0x3, 0x7, 0x20, 0x6, 0x1, 0x4, 0x3, 0x101, 0xfe5e, 0x6, 0x405, 0x8, 0x401, 0x100, 0xfffff000, 0x7fff, 0x401, 0x1ff, 0xfff, 0xa14, 0x7, 0x7ff, 0x7, 0x3, 0xff, 0xa8, 0x10001, 0x7, 0x100, 0xb, 0x0, 0xfffff801, 0x7, 0x4, 0x8, 0x0, 0x4, 0x7, 0x6d9f, 0x3, 0xf4, 0x4ce, 0x4, 0x5, 0xfffffffe, 0x8, 0x731e, 0xffffffff, 0x9, 0x4, 0x2, 0xffffffff, 0x66, 0x6dad, 0x1a, 0xc856, 0x1, 0x6, 0x8, 0x4, 0x5, 0x9d, 0x7f, 0xf66, 0x3, 0x5, 0x89f2ef7c, 0x5, 0x1ff, 0x1, 0xe0c, 0x2, 0x8, 0x217, 0x6, 0x2, 0x4, 0xff, 0x5, 0x7fff, 0x10000, 0x6, 0x7c2f0ca4, 0x7, 0x9, 0x200, 0xffffff7f, 0x4, 0x7b, 0x3, 0x10000, 0x100, 0x6, 0x7fff, 0xffff8001, 0x1, 0x2, 0x55b1, 0x3, 0x80000000, 0x8001, 0x1, 0x3, 0x5, 0x4, 0x10001, 0x9, 0x0, 0x8, 0x6, 0x0, 0x49, 0x2, 0x401, 0x4, 0x5, 0x3, 0x35, 0x9, 0x800, 0x3, 0x6, 0x76, 0x0, 0xfffffff7, 0x8, 0x4, 0x0, 0x7f, 0x3, 0x8, 0x769c, 0x4, 0x72f, 0x3f, 0x6, 0x6, 0x9, 0x80000000, 0x2, 0x5, 0x3, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x0, 0x7, 0x3c, 0xfffffffa, 0x5be, 0x4, 0x80000000, 0x8d4, 0x2, 0x96, 0x0, 0xdc34, 0x80000000, 0x1, 0x81, 0x5, 0x8, 0x41, 0xc117, 0x8, 0x5, 0x40, 0xfffffffc, 0x3, 0x80, 0x20, 0x0, 0x0, 0x3, 0x1, 0xff, 0x2, 0x7, 0x5, 0x0, 0x5, 0x3, 0x40d, 0x1, 0x40, 0x5, 0x6, 0x9, 0x1, 0x8000, 0x3f, 0x1, 0x1ff, 0x101, 0x93, 0x20, 0xff, 0xd6, 0x4bd, 0x9, 0x8, 0x6, 0x6, 0xffff, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x5, 0x4, 0x5, 0x73fb, 0x3ff, 0x4db, 0x8, 0x7, 0x3, 0xffffffc1, 0x0, 0x16, 0x7, 0x10001, 0xffffffe2, 0x4, 0x7, 0x4, 0x0, 0xffff452b, 0x8, 0x80, 0x3, 0x5, 0x4, 0x4, 0x178, 0xf6, 0x8001, 0xa7a700, 0x10001, 0x5, 0x26d8, 0xfffffffe, 0x10001, 0x2, 0x600, 0x4, 0x0, 0x401, 0x5, 0x0, 0x3e7, 0x1, 0x6, 0xffffffff, 0x9, 0x9, 0x3, 0xe5d, 0xf53e, 0x6, 0x1, 0x6, 0x10000, 0x411, 0xef7, 0x25ea, 0x3, 0xdf2, 0x101, 0x200, 0x1, 0x6a000000, 0x200000, 0x800, 0x5, 0x6, 0x5, 0x4, 0x101, 0x6, 0xffffff0d, 0x7, 0x3ff, 0x0, 0x8, 0x5, 0x4, 0x3, 0xfffffffe, 0x7b, 0x7, 0x4, 0x33da, 0x8001, 0x5, 0x6, 0x0, 0x3, 0x9, 0x4, 0xffffffff, 0x400, 0x1, 0x4, 0x6, 0x2800000, 0x9, 0x3, 0x290, 0x936c, 0x5, 0x3f, 0x8000, 0x80000001, 0x1ff, 0x7ff, 0x3f, 0x5, 0x5, 0x2, 0x3, 0x10001, 0x4, 0x7, 0x0, 0x6, 0xa6c, 0x55ad, 0x6, 0x5, 0x4, 0x1f, 0x80, 0x1, 0x0, 0x0, 0x80, 0x0, 0x2c8, 0x7, 0x1, 0x129, 0x7fffffff, 0x9, 0x72af7053, 0x4, 0x3f, 0x800, 0x2, 0x81, 0x20, 0x7, 0x3ff, 0xffffff81, 0x3, 0x1ff, 0x2604, 0x7, 0x3ff, 0xc41, 0x7, 0xf4, 0x29e, 0x1f, 0x4, 0x3, 0x8001, 0x3, 0x80000000, 0x8, 0x200, 0x9, 0x2, 0x7a, 0xffffffff, 0xc52, 0xff, 0x8000, 0x0, 0x3a21, 0x7ff, 0xfff, 0x0, 0x9, 0x9, 0x2, 0xe66, 0x9, 0x1ff, 0x6, 0xfff, 0x800, 0xf4, 0x8, 0x39, 0x6, 0x6, 0x0, 0xcc0, 0x4, 0x0, 0x7f, 0xd, 0x1f, 0x5, 0x2, 0xffffffd5, 0x5, 0x100, 0xffff0000, 0x80, 0x6, 0x2, 0x85d, 0xfffffff7, 0x129, 0x1, 0x1000, 0x0, 0x1f, 0xffffff28, 0xa2, 0x1, 0x4, 0x5, 0x7, 0xb6cd, 0x0, 0xfff, 0x10000, 0xfffffffb, 0x9, 0x9, 0x2, 0x7, 0xffffff42, 0xc19f, 0x80000000, 0xee, 0xff, 0x0, 0x2, 0x401, 0x40, 0xdfcb, 0x2, 0x7, 0x80d, 0x0, 0x5, 0x5b05, 0xb6b, 0xffffffff, 0x0, 0xfff, 0x7e5, 0x4, 0x1, 0x7ff, 0x5, 0x3, 0x72, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x19, 0x85, 0x5, 0x5, 0x0, 0x3, 0x161e4ae6, 0x2, 0x6, 0x400, 0xfd74, 0x33, 0x8001, 0x1, 0x6, 0x0, 0x7, 0x20, 0x40, 0x1, 0x8, 0xffffff53, 0x5c3, 0x10001, 0xa0, 0x2000, 0x3, 0x100, 0xfff, 0xfffffffe, 0x7d, 0x1, 0x40, 0x2, 0x1ff, 0x8, 0x9, 0x5, 0x7f, 0x7, 0x20, 0x39b8, 0x1, 0x1ff, 0x7fffffff, 0x0, 0x7f, 0x7fff, 0x3, 0x2dd3, 0x7902, 0xe3, 0x8, 0x3f, 0x80000000, 0xffffffff, 0x8, 0x7, 0x9, 0x7, 0x3, 0x1f, 0x844, 0x9, 0x800, 0x6, 0x5, 0x3, 0x6b, 0x7, 0x7fffffff, 0xfffffff8, 0x0, 0x9, 0x20, 0x3, 0x633, 0x8000, 0x7, 0x0, 0xe, 0x40, 0x8, 0x800, 0xfffff800, 0x101, 0x1d2d, 0x6, 0x80000001, 0x6, 0x1, 0x800, 0xfffffffb, 0x0, 0x3, 0x67, 0x5, 0xa6, 0x3, 0xb, 0x6, 0x6, 0xff, 0xacc7, 0xffff, 0x10000, 0x31a, 0x4, 0x12, 0xc547, 0x7, 0x4, 0xfff, 0x80000001, 0xe1, 0x200, 0x0, 0x3, 0x0, 0xfc, 0x9, 0x7, 0x8, 0x80, 0xffff, 0x1, 0x1, 0x2, 0xf4a, 0xaa69, 0x7, 0x8, 0x4, 0x5, 0x57, 0x0, 0xffffff14, 0x2, 0x9, 0x7f, 0x7, 0x3, 0x101, 0x4, 0x8, 0xfffffffd, 0x9, 0x670, 0xfffffffb, 0x2, 0x1ff, 0x80, 0x5, 0x7, 0x5, 0xee, 0x7, 0x96, 0x1, 0x0, 0xb47, 0x1, 0x10001, 0x1, 0x400, 0x8, 0x1, 0x6, 0x2, 0xda4, 0x2, 0x0, 0x7d27621b, 0x2, 0x5, 0xe1, 0x1, 0xe97, 0x4, 0x1ff, 0x8, 0x7, 0x1, 0x38000, 0x1000, 0x5, 0xc000, 0x7fffffff, 0x7, 0x700d9a48, 0x8001, 0x8, 0x7a, 0xffffff81, 0x5, 0x82, 0x5, 0xfffffc00, 0x1a5, 0x40, 0x5, 0x8, 0x0, 0x1, 0xe8, 0x3, 0x6, 0x8001, 0x0, 0x401, 0x7, 0x0, 0x4, 0x3, 0x10000, 0x0, 0x0, 0x8, 0x200, 0x2, 0x4, 0x4, 0x7, 0x8, 0xffff7f1e, 0x3, 0xffffffff, 0x0, 0x0, 0x94fd, 0x200, 0x8, 0x8, 0x8000, 0xf12, 0x1, 0x4cb7548a, 0x3ff, 0xd4, 0x9, 0xfff, 0x3, 0x8, 0x0, 0x3ff, 0xfffffe00, 0x80, 0xffffffff, 0xffffff0c, 0x1, 0xff, 0x7, 0x1, 0x10001, 0x0, 0x3]}]}, @TCA_CGROUP_POLICE={0x430, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6b}, @TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x6, 0x5, 0x8001, 0x80, 0x9, 0x7, 0x7, 0x4, 0x9, 0x2, 0xfff, 0x5bb2, 0x61697d0c, 0x9, 0x9, 0xffffdf0e, 0xffff, 0x40, 0x3, 0x8, 0x6, 0x4, 0x0, 0x9, 0x5, 0x1, 0x200, 0x101, 0x33c000, 0x3, 0x6, 0x1, 0x1, 0x3, 0x800, 0x0, 0x7, 0x8, 0x401, 0x1, 0x1, 0x1, 0x40, 0xffff, 0x0, 0x3f, 0x800, 0x2, 0x8f, 0x80000000, 0x100, 0x20, 0x80000000, 0x4, 0x93, 0x7, 0x6, 0x8, 0x9, 0xf0, 0x4, 0x400, 0x3, 0x8, 0x5e4, 0x200, 0x8001, 0xfffffffa, 0x1, 0x1, 0x4, 0x3, 0x1, 0x2, 0x230, 0x5, 0x10000, 0xd265, 0x0, 0x6, 0xfd2f, 0xdd, 0x7, 0x800, 0x94, 0x8, 0xf9, 0x9, 0x44, 0x1, 0x3db8, 0x8, 0x6f, 0x391, 0x8, 0x0, 0x3, 0xea, 0x3, 0x6, 0xd0, 0xffff, 0x6e22, 0xa6, 0xfffffff9, 0x3, 0x7, 0x80, 0x7, 0x9, 0x7a0, 0x1, 0x7, 0x10001, 0x8, 0xffffffff, 0x1b, 0xfffffff7, 0x3, 0x9, 0x1f, 0x2, 0x3, 0x6b, 0x0, 0x1, 0x16, 0x8, 0x0, 0x3, 0x0, 0x6f51e503, 0x99, 0x8, 0x6, 0x8000, 0x0, 0x4, 0x3, 0x22, 0x6, 0x0, 0x5, 0x8, 0xbdc, 0x7, 0x2, 0x9, 0x47, 0x5, 0x8, 0x7841efa0, 0x200, 0x4, 0x3, 0x7f, 0x1, 0x526, 0x34, 0x1d9, 0xb602, 0x1, 0x2, 0x1, 0xc7, 0xffffffff, 0x7, 0x2, 0x4, 0x1, 0x10000, 0x1, 0x2, 0x0, 0xdfd, 0x4, 0x80000000, 0x0, 0x8, 0x80000000, 0x4, 0x80000001, 0x6, 0xffff8001, 0x40, 0x7d, 0x4, 0x8, 0x2, 0x2, 0x4, 0x4, 0x0, 0x800, 0xfff, 0xbac, 0x40, 0x5, 0x0, 0x0, 0x15f0, 0xffff, 0x4, 0x9, 0x3, 0x3, 0xda9, 0x7f, 0x0, 0x387, 0xf132, 0x7, 0x8, 0x9, 0x400, 0x0, 0x8, 0x4, 0x80000001, 0x9, 0x200, 0x8, 0x1000, 0x7, 0x8, 0x80000000, 0xfffffffd, 0x9, 0x60a, 0x80, 0xfff, 0x8, 0x8000, 0x6, 0x9, 0x1, 0xff, 0xfffffffd, 0x23, 0x6e3, 0x7, 0x9, 0x5, 0x9, 0xa1c, 0x0, 0x7ff, 0x7f7f, 0x3, 0xe1, 0x8c9, 0xfffffff7, 0x7, 0xffff, 0x68]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}]}, @TCA_CGROUP_EMATCHES={0x230, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf213}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x44}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_LIST={0x1f4, 0x2, 0x0, 0x1, [@TCF_EM_META={0xd8, 0x2, 0x0, 0x0, {{0x7fff}, [@TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="beb56dd7db", @TCF_META_TYPE_VAR="0715", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x6, 0x1}, {0x5, 0x6, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8000, 0x80, 0x2}, {0xfff, 0x4, 0x1}}}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="d68a", @TCF_META_TYPE_VAR="b8c556", @TCF_META_TYPE_VAR="11171d", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="53e979731b"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xff, 0x2}, {0x85, 0x81}}}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="8ccc2946c35b", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="41e193"]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="6990f0815d"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8001, 0x8}, {0xffff, 0x64, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x20, 0x5, 0x1}, {0x9, 0x1, 0x2}}}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_VAR="8f", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="6620df372caf65", @TCF_META_TYPE_VAR="9d2c48198b", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x280, 0x8, 0x5}, {0x3, 0x5, 0x4}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x7, 0x0, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8cd, 0x3, 0x6}, {0x149, 0x1f, 0x7f}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9}, {{}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_META={0x50, 0x1, 0x0, 0x0, {{0xda1f, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="810c0d83", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="e03f0eaea563", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="67fab6c6a37d14", @TCF_META_TYPE_VAR='kA\n<', @TCF_META_TYPE_VAR="635cdb880bd5810a1812"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x3, 0x1}, {0xec80, 0x2, 0x2}}}]}}, @TCF_EM_CONTAINER={0x60, 0x3, 0x0, 0x0, {{0x7f, 0x0, 0x2}, "84e3874449cd70123f0f08cd18884021ad35df6ab7021f52029eb01da356804b6d2e061b048c20f65a6c0f720595c952822c05a91bca863f8b545077924bbd90d894cbedc871f4fae353f3aa9930a45d04d353a7"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xe06, 0x3, 0xa800}, {0x1f, 0x8, 0x0, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x1}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x12e8}, 0x1, 0x0, 0x0, 0x80}, 0x804) r7 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x1c7801) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4001) 03:21:59 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000280)={0x0, 0x702, 0x1, [0x2, 0xe9, 0x0, 0x7f, 0x82], [0x0, 0x4, 0x0, 0x2, 0xfffffffffffffffa, 0x2, 0x4, 0x6, 0x6, 0xc1a, 0x6, 0x2, 0x8, 0x10, 0x59, 0x0, 0x3ff, 0x1, 0x5, 0x9, 0x9, 0x4, 0x2, 0x3, 0xffffffffffffffff, 0x80000, 0x2fa4, 0x4, 0x7, 0x10001, 0x7, 0x7, 0x100000000, 0xba, 0x8000000000000001, 0x9, 0x75, 0x0, 0x9, 0xffffffffffff08fe, 0x5, 0x3, 0x0, 0x3, 0x200, 0x100000000, 0x3, 0x3f, 0x1, 0x100, 0x5000, 0x5, 0xffffffffffffffd9, 0x1, 0x4, 0x4, 0x9, 0x100000000, 0x0, 0xb1, 0x1, 0xfffffffffffffff7, 0x80, 0x1, 0xb6, 0x6, 0x401, 0x2, 0x7de9, 0x6, 0x0, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x9, 0xff, 0x600000000, 0x101, 0xe74, 0x5, 0xaf1, 0x9, 0x1000, 0x67ead2e, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x800, 0x8, 0x3, 0x7, 0xf5fa, 0x80000000, 0x748, 0x0, 0x10000, 0x80000000, 0x400, 0x1, 0xa49, 0x0, 0x6, 0x520, 0xfffffffffffffff9, 0x49, 0x81, 0x18e, 0x9, 0x3c5, 0xffffffffffffffc1, 0x0, 0x100000000, 0x9, 0x59f, 0x8, 0x5, 0x3ff]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x400, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000008000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048004}, 0x40000) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001a80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000740)=@deltfilter={0x12e8, 0x2d, 0x2, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff3, 0xe}, {0xf, 0x2}, {0x0, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x12b8, 0x2, [@TCA_CGROUP_POLICE={0xc54, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x401, 0x4, 0x9b5, 0x2, 0x1d0, 0x6399, 0xc123, 0x9, 0xffff76f2, 0x7, 0x1, 0x7f, 0x2, 0x880f, 0x8000, 0x1, 0x8c, 0xfffffffc, 0x4, 0x7fffffff, 0x7, 0x2, 0x0, 0x9, 0xfff, 0x7, 0xd65, 0xf8000000, 0x101, 0x81, 0x80000000, 0x9, 0x2, 0xffff, 0x1fc, 0x54a, 0x3, 0x2, 0xfffffff7, 0x9, 0xd8, 0x200, 0x9, 0x5, 0x200000, 0xff, 0x9, 0x4, 0x3, 0x7, 0x20, 0x6, 0x1, 0x4, 0x3, 0x101, 0xfe5e, 0x6, 0x405, 0x8, 0x401, 0x100, 0xfffff000, 0x7fff, 0x401, 0x1ff, 0xfff, 0xa14, 0x7, 0x7ff, 0x7, 0x3, 0xff, 0xa8, 0x10001, 0x7, 0x100, 0xb, 0x0, 0xfffff801, 0x7, 0x4, 0x8, 0x0, 0x4, 0x7, 0x6d9f, 0x3, 0xf4, 0x4ce, 0x4, 0x5, 0xfffffffe, 0x8, 0x731e, 0xffffffff, 0x9, 0x4, 0x2, 0xffffffff, 0x66, 0x6dad, 0x1a, 0xc856, 0x1, 0x6, 0x8, 0x4, 0x5, 0x9d, 0x7f, 0xf66, 0x3, 0x5, 0x89f2ef7c, 0x5, 0x1ff, 0x1, 0xe0c, 0x2, 0x8, 0x217, 0x6, 0x2, 0x4, 0xff, 0x5, 0x7fff, 0x10000, 0x6, 0x7c2f0ca4, 0x7, 0x9, 0x200, 0xffffff7f, 0x4, 0x7b, 0x3, 0x10000, 0x100, 0x6, 0x7fff, 0xffff8001, 0x1, 0x2, 0x55b1, 0x3, 0x80000000, 0x8001, 0x1, 0x3, 0x5, 0x4, 0x10001, 0x9, 0x0, 0x8, 0x6, 0x0, 0x49, 0x2, 0x401, 0x4, 0x5, 0x3, 0x35, 0x9, 0x800, 0x3, 0x6, 0x76, 0x0, 0xfffffff7, 0x8, 0x4, 0x0, 0x7f, 0x3, 0x8, 0x769c, 0x4, 0x72f, 0x3f, 0x6, 0x6, 0x9, 0x80000000, 0x2, 0x5, 0x3, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x0, 0x7, 0x3c, 0xfffffffa, 0x5be, 0x4, 0x80000000, 0x8d4, 0x2, 0x96, 0x0, 0xdc34, 0x80000000, 0x1, 0x81, 0x5, 0x8, 0x41, 0xc117, 0x8, 0x5, 0x40, 0xfffffffc, 0x3, 0x80, 0x20, 0x0, 0x0, 0x3, 0x1, 0xff, 0x2, 0x7, 0x5, 0x0, 0x5, 0x3, 0x40d, 0x1, 0x40, 0x5, 0x6, 0x9, 0x1, 0x8000, 0x3f, 0x1, 0x1ff, 0x101, 0x93, 0x20, 0xff, 0xd6, 0x4bd, 0x9, 0x8, 0x6, 0x6, 0xffff, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x5, 0x4, 0x5, 0x73fb, 0x3ff, 0x4db, 0x8, 0x7, 0x3, 0xffffffc1, 0x0, 0x16, 0x7, 0x10001, 0xffffffe2, 0x4, 0x7, 0x4, 0x0, 0xffff452b, 0x8, 0x80, 0x3, 0x5, 0x4, 0x4, 0x178, 0xf6, 0x8001, 0xa7a700, 0x10001, 0x5, 0x26d8, 0xfffffffe, 0x10001, 0x2, 0x600, 0x4, 0x0, 0x401, 0x5, 0x0, 0x3e7, 0x1, 0x6, 0xffffffff, 0x9, 0x9, 0x3, 0xe5d, 0xf53e, 0x6, 0x1, 0x6, 0x10000, 0x411, 0xef7, 0x25ea, 0x3, 0xdf2, 0x101, 0x200, 0x1, 0x6a000000, 0x200000, 0x800, 0x5, 0x6, 0x5, 0x4, 0x101, 0x6, 0xffffff0d, 0x7, 0x3ff, 0x0, 0x8, 0x5, 0x4, 0x3, 0xfffffffe, 0x7b, 0x7, 0x4, 0x33da, 0x8001, 0x5, 0x6, 0x0, 0x3, 0x9, 0x4, 0xffffffff, 0x400, 0x1, 0x4, 0x6, 0x2800000, 0x9, 0x3, 0x290, 0x936c, 0x5, 0x3f, 0x8000, 0x80000001, 0x1ff, 0x7ff, 0x3f, 0x5, 0x5, 0x2, 0x3, 0x10001, 0x4, 0x7, 0x0, 0x6, 0xa6c, 0x55ad, 0x6, 0x5, 0x4, 0x1f, 0x80, 0x1, 0x0, 0x0, 0x80, 0x0, 0x2c8, 0x7, 0x1, 0x129, 0x7fffffff, 0x9, 0x72af7053, 0x4, 0x3f, 0x800, 0x2, 0x81, 0x20, 0x7, 0x3ff, 0xffffff81, 0x3, 0x1ff, 0x2604, 0x7, 0x3ff, 0xc41, 0x7, 0xf4, 0x29e, 0x1f, 0x4, 0x3, 0x8001, 0x3, 0x80000000, 0x8, 0x200, 0x9, 0x2, 0x7a, 0xffffffff, 0xc52, 0xff, 0x8000, 0x0, 0x3a21, 0x7ff, 0xfff, 0x0, 0x9, 0x9, 0x2, 0xe66, 0x9, 0x1ff, 0x6, 0xfff, 0x800, 0xf4, 0x8, 0x39, 0x6, 0x6, 0x0, 0xcc0, 0x4, 0x0, 0x7f, 0xd, 0x1f, 0x5, 0x2, 0xffffffd5, 0x5, 0x100, 0xffff0000, 0x80, 0x6, 0x2, 0x85d, 0xfffffff7, 0x129, 0x1, 0x1000, 0x0, 0x1f, 0xffffff28, 0xa2, 0x1, 0x4, 0x5, 0x7, 0xb6cd, 0x0, 0xfff, 0x10000, 0xfffffffb, 0x9, 0x9, 0x2, 0x7, 0xffffff42, 0xc19f, 0x80000000, 0xee, 0xff, 0x0, 0x2, 0x401, 0x40, 0xdfcb, 0x2, 0x7, 0x80d, 0x0, 0x5, 0x5b05, 0xb6b, 0xffffffff, 0x0, 0xfff, 0x7e5, 0x4, 0x1, 0x7ff, 0x5, 0x3, 0x72, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x19, 0x85, 0x5, 0x5, 0x0, 0x3, 0x161e4ae6, 0x2, 0x6, 0x400, 0xfd74, 0x33, 0x8001, 0x1, 0x6, 0x0, 0x7, 0x20, 0x40, 0x1, 0x8, 0xffffff53, 0x5c3, 0x10001, 0xa0, 0x2000, 0x3, 0x100, 0xfff, 0xfffffffe, 0x7d, 0x1, 0x40, 0x2, 0x1ff, 0x8, 0x9, 0x5, 0x7f, 0x7, 0x20, 0x39b8, 0x1, 0x1ff, 0x7fffffff, 0x0, 0x7f, 0x7fff, 0x3, 0x2dd3, 0x7902, 0xe3, 0x8, 0x3f, 0x80000000, 0xffffffff, 0x8, 0x7, 0x9, 0x7, 0x3, 0x1f, 0x844, 0x9, 0x800, 0x6, 0x5, 0x3, 0x6b, 0x7, 0x7fffffff, 0xfffffff8, 0x0, 0x9, 0x20, 0x3, 0x633, 0x8000, 0x7, 0x0, 0xe, 0x40, 0x8, 0x800, 0xfffff800, 0x101, 0x1d2d, 0x6, 0x80000001, 0x6, 0x1, 0x800, 0xfffffffb, 0x0, 0x3, 0x67, 0x5, 0xa6, 0x3, 0xb, 0x6, 0x6, 0xff, 0xacc7, 0xffff, 0x10000, 0x31a, 0x4, 0x12, 0xc547, 0x7, 0x4, 0xfff, 0x80000001, 0xe1, 0x200, 0x0, 0x3, 0x0, 0xfc, 0x9, 0x7, 0x8, 0x80, 0xffff, 0x1, 0x1, 0x2, 0xf4a, 0xaa69, 0x7, 0x8, 0x4, 0x5, 0x57, 0x0, 0xffffff14, 0x2, 0x9, 0x7f, 0x7, 0x3, 0x101, 0x4, 0x8, 0xfffffffd, 0x9, 0x670, 0xfffffffb, 0x2, 0x1ff, 0x80, 0x5, 0x7, 0x5, 0xee, 0x7, 0x96, 0x1, 0x0, 0xb47, 0x1, 0x10001, 0x1, 0x400, 0x8, 0x1, 0x6, 0x2, 0xda4, 0x2, 0x0, 0x7d27621b, 0x2, 0x5, 0xe1, 0x1, 0xe97, 0x4, 0x1ff, 0x8, 0x7, 0x1, 0x38000, 0x1000, 0x5, 0xc000, 0x7fffffff, 0x7, 0x700d9a48, 0x8001, 0x8, 0x7a, 0xffffff81, 0x5, 0x82, 0x5, 0xfffffc00, 0x1a5, 0x40, 0x5, 0x8, 0x0, 0x1, 0xe8, 0x3, 0x6, 0x8001, 0x0, 0x401, 0x7, 0x0, 0x4, 0x3, 0x10000, 0x0, 0x0, 0x8, 0x200, 0x2, 0x4, 0x4, 0x7, 0x8, 0xffff7f1e, 0x3, 0xffffffff, 0x0, 0x0, 0x94fd, 0x200, 0x8, 0x8, 0x8000, 0xf12, 0x1, 0x4cb7548a, 0x3ff, 0xd4, 0x9, 0xfff, 0x3, 0x8, 0x0, 0x3ff, 0xfffffe00, 0x80, 0xffffffff, 0xffffff0c, 0x1, 0xff, 0x7, 0x1, 0x10001, 0x0, 0x3]}]}, @TCA_CGROUP_POLICE={0x430, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6b}, @TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x6, 0x5, 0x8001, 0x80, 0x9, 0x7, 0x7, 0x4, 0x9, 0x2, 0xfff, 0x5bb2, 0x61697d0c, 0x9, 0x9, 0xffffdf0e, 0xffff, 0x40, 0x3, 0x8, 0x6, 0x4, 0x0, 0x9, 0x5, 0x1, 0x200, 0x101, 0x33c000, 0x3, 0x6, 0x1, 0x1, 0x3, 0x800, 0x0, 0x7, 0x8, 0x401, 0x1, 0x1, 0x1, 0x40, 0xffff, 0x0, 0x3f, 0x800, 0x2, 0x8f, 0x80000000, 0x100, 0x20, 0x80000000, 0x4, 0x93, 0x7, 0x6, 0x8, 0x9, 0xf0, 0x4, 0x400, 0x3, 0x8, 0x5e4, 0x200, 0x8001, 0xfffffffa, 0x1, 0x1, 0x4, 0x3, 0x1, 0x2, 0x230, 0x5, 0x10000, 0xd265, 0x0, 0x6, 0xfd2f, 0xdd, 0x7, 0x800, 0x94, 0x8, 0xf9, 0x9, 0x44, 0x1, 0x3db8, 0x8, 0x6f, 0x391, 0x8, 0x0, 0x3, 0xea, 0x3, 0x6, 0xd0, 0xffff, 0x6e22, 0xa6, 0xfffffff9, 0x3, 0x7, 0x80, 0x7, 0x9, 0x7a0, 0x1, 0x7, 0x10001, 0x8, 0xffffffff, 0x1b, 0xfffffff7, 0x3, 0x9, 0x1f, 0x2, 0x3, 0x6b, 0x0, 0x1, 0x16, 0x8, 0x0, 0x3, 0x0, 0x6f51e503, 0x99, 0x8, 0x6, 0x8000, 0x0, 0x4, 0x3, 0x22, 0x6, 0x0, 0x5, 0x8, 0xbdc, 0x7, 0x2, 0x9, 0x47, 0x5, 0x8, 0x7841efa0, 0x200, 0x4, 0x3, 0x7f, 0x1, 0x526, 0x34, 0x1d9, 0xb602, 0x1, 0x2, 0x1, 0xc7, 0xffffffff, 0x7, 0x2, 0x4, 0x1, 0x10000, 0x1, 0x2, 0x0, 0xdfd, 0x4, 0x80000000, 0x0, 0x8, 0x80000000, 0x4, 0x80000001, 0x6, 0xffff8001, 0x40, 0x7d, 0x4, 0x8, 0x2, 0x2, 0x4, 0x4, 0x0, 0x800, 0xfff, 0xbac, 0x40, 0x5, 0x0, 0x0, 0x15f0, 0xffff, 0x4, 0x9, 0x3, 0x3, 0xda9, 0x7f, 0x0, 0x387, 0xf132, 0x7, 0x8, 0x9, 0x400, 0x0, 0x8, 0x4, 0x80000001, 0x9, 0x200, 0x8, 0x1000, 0x7, 0x8, 0x80000000, 0xfffffffd, 0x9, 0x60a, 0x80, 0xfff, 0x8, 0x8000, 0x6, 0x9, 0x1, 0xff, 0xfffffffd, 0x23, 0x6e3, 0x7, 0x9, 0x5, 0x9, 0xa1c, 0x0, 0x7ff, 0x7f7f, 0x3, 0xe1, 0x8c9, 0xfffffff7, 0x7, 0xffff, 0x68]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}]}, @TCA_CGROUP_EMATCHES={0x230, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf213}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x44}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_LIST={0x1f4, 0x2, 0x0, 0x1, [@TCF_EM_META={0xd8, 0x2, 0x0, 0x0, {{0x7fff}, [@TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="beb56dd7db", @TCF_META_TYPE_VAR="0715", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x6, 0x1}, {0x5, 0x6, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8000, 0x80, 0x2}, {0xfff, 0x4, 0x1}}}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="d68a", @TCF_META_TYPE_VAR="b8c556", @TCF_META_TYPE_VAR="11171d", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="53e979731b"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xff, 0x2}, {0x85, 0x81}}}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="8ccc2946c35b", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="41e193"]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="6990f0815d"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8001, 0x8}, {0xffff, 0x64, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x20, 0x5, 0x1}, {0x9, 0x1, 0x2}}}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_VAR="8f", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="6620df372caf65", @TCF_META_TYPE_VAR="9d2c48198b", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x280, 0x8, 0x5}, {0x3, 0x5, 0x4}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x7, 0x0, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8cd, 0x3, 0x6}, {0x149, 0x1f, 0x7f}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9}, {{}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_META={0x50, 0x1, 0x0, 0x0, {{0xda1f, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="810c0d83", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="e03f0eaea563", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="67fab6c6a37d14", @TCF_META_TYPE_VAR='kA\n<', @TCF_META_TYPE_VAR="635cdb880bd5810a1812"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x3, 0x1}, {0xec80, 0x2, 0x2}}}]}}, @TCF_EM_CONTAINER={0x60, 0x3, 0x0, 0x0, {{0x7f, 0x0, 0x2}, "84e3874449cd70123f0f08cd18884021ad35df6ab7021f52029eb01da356804b6d2e061b048c20f65a6c0f720595c952822c05a91bca863f8b545077924bbd90d894cbedc871f4fae353f3aa9930a45d04d353a7"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xe06, 0x3, 0xa800}, {0x1f, 0x8, 0x0, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x1}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x12e8}, 0x1, 0x0, 0x0, 0x80}, 0x804) r7 = syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x1c7801) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4001) 03:21:59 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r6 = dup3(r0, r1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r8, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x9}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r8, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x10000, 0x8be3, 0x80000000, 0x1}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x880) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r8, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1f}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000a0000000000000000000a20000000000a03000000000005000000010000000900010073797a300000000078000000090a010400000000000000000100000208000640ffffff000900020073797a3100000000080005400000002b080005400000003b400012800c000180080001006c6f6700300001800d00010073796e70726f7879000000001c000280080003400000000e0800034000000000060001400e6d0000140000001008010000000000000000000000000a"], 0xc0}}, 0x0) 03:21:59 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000008000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000008000280012000c00010076657468078d105a2d2ded6ce10ec5d239d860553886bc6fcf1f82ec94d3c307a35f59453c92a7bf50d8c877c959f63861cfdec874012a4c761f09896591f4b6222ed15d099ba08a352a4027aee2c9736c33129b60ff8374146a9b41f58ff436dd81d1aee74bc8988b19cc77ec0351e9e3b100ef75162d7afbd8d2b588ffeb0d1df257c2834081f3dce4e16edd80f36f3f7c9c2dc5fa605e826407a25017001dc81de10e364395ed536c953c02cbb03f7c6dfe59864f2dcf7c5a004c"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x6b, 0x482, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, 0x8, 0x1, 0x4}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80010004}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="e80000001900040028bd7000fddbdf251c202003ff0100ca000200000c000900514d0281", @ANYRES32=0x0, @ANYBLOB="8400130000000000000000000000080000000000000000000000000000000f000000000000000000000000000000000000000000000000000000060000000000000000000000040000000c00000000000000000000000000000000000000000000000000000001000000000000000000000002000000010000000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="0c000900020024fa", @ANYRES32=0x0, @ANYBLOB="2b00040050b3af164c17009b18226c209bcfa330df24829149d2b581682b", @ANYRES32=0x0, @ANYBLOB="140012002600ae25e6973014d4766c619282b9670c00090006000802", @ANYRES32=r6, @ANYBLOB], 0xe8}}, 0x1810) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000efb7cc9df3f50100000a0000000000000000000a20e000002fac02810c38d8f405000000010000000900010073797a300000000060aafc000000090a0104000000000000000001001a0008000a40000000000900020073797a31000000000900010073797a3000000000080005400000003b24001180090001006d65746100000000140002800800014000000000080002400000001814000000100001000000000000000c8bc0d0834a32ab51125cc35d7e3e2a52639b3adfcd16ccffc78711b0dca271b2f4a96f60e3145c3007884ef6f3ddbb62704f3a"], 0xa8}, 0x1, 0x0, 0x0, 0x54}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000002000000066696cfb3000745697abd6875b8781595435a67532d527863671fa2ceb8cf615dfae8900"/59]) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="a001000084753faf4c4ad29d583d7de39e78905142e003000000000000499fa06f651f6ffaa74f85ce9ebc689b291494b012184756541ec8568bb6f92bbe1fd5c2d3e446965a769fe615cf0cfeb8330e9d82a07c771faa922312d527a412fcb4e1694cf61c5a3886b471dfcb97d0197dd2117ce068e1e766a1bac350b9562d086d4d9621a88f75de3cca8e54", @ANYRES16=0x0, @ANYBLOB="000827bd7000fbdbdf250b000000240001801700010069623a76657468305f746f5f626174616476000008000300350000005c0005800800010075647000070001006962000008000100657468000700010069620000140002800800010009000000080001000d0000001c0002800800010003000000080004000100000008000200070000000800010065746800100007800c0004000300000000000000b40006808b000300af5df182436a11602c07518b24ce9ce47b9c1a5d68c1cbb111b3d1a767f8c797544e7d2f7585dcf595921f73ac804529588c2467963e1474cb3276dab437f33c77f293b309b887eed187955027202ab5aa961de1a5d62283dacf3744999e81062d95aa93dd59ddeb9ca7dc76de2d634980385f2736de71a0638ce97b44dc296442eb8531ad9bce002200030006e8f88e5aaf95f3d7f88cada2e444b4b2849d3d52018a09bb047107dfc800004800028024000380080001003c0000000800020081000000080001001f00000008000100ffffffff08000200400000000c000380080001005e000000080001000500000004000400"], 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) 03:21:59 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x900000000000000) [ 1130.457701][ T7425] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1130.538953][ T7429] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1130.571246][ T7435] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:22:00 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:00 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x100000000000000) 03:22:00 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000080)=@phonet}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) io_uring_enter(r0, 0x2c, 0x7, 0x0, 0x0, 0x700) 03:22:00 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x0, 0x0}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) io_uring_enter(r0, 0x2c, 0x7, 0x1, 0x0, 0x700) 03:22:00 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x0, 0x0}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) io_uring_enter(r0, 0x2c, 0x7, 0x1, 0x0, 0x700) 03:22:00 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@phonet}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) io_uring_enter(r0, 0x2c, 0x7, 0x1, 0x0, 0x700) 03:22:00 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) io_uring_enter(r0, 0x2c, 0x7, 0x1, 0x0, 0x700) 03:22:00 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000080)=@phonet}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) io_uring_enter(r0, 0x2c, 0x7, 0x1, 0x0, 0x700) [ 1131.345345][ T7456] cgroup: fork rejected by pids controller in /syz0 [ 1131.375400][ T7452] cgroup: fork rejected by pids controller in /syz1 03:22:00 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x0, 0x0}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) io_uring_enter(r0, 0x2c, 0x7, 0x1, 0x0, 0x700) 03:22:00 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000080)=@phonet}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) io_uring_enter(r0, 0x2c, 0x7, 0x1, 0x0, 0x700) 03:22:01 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x8) 03:22:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[], 0x16) 03:22:01 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:01 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000080)=@phonet}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) io_uring_enter(r0, 0x2c, 0x7, 0x1, 0x0, 0x700) 03:22:01 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) io_uring_enter(r0, 0x2c, 0x7, 0x1, 0x0, 0x700) [ 1132.043130][ T9145] loop3: detected capacity change from 0 to 262160 [ 1132.055302][ T9145] FAT-fs (loop3): bogus number of reserved sectors [ 1132.061994][ T9145] FAT-fs (loop3): Can't find a valid FAT filesystem 03:22:01 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) io_uring_enter(r0, 0x2c, 0x7, 0x1, 0x0, 0x700) 03:22:01 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000080)=@phonet}, 0x6) io_uring_enter(r0, 0x2c, 0x7, 0x1, 0x0, 0x700) 03:22:01 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}, 0x1, 0x0, 0x0, 0x94}, 0x0) 03:22:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x5) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[], 0x16) 03:22:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[], 0x16) [ 1132.452342][ T9233] loop2: detected capacity change from 0 to 262160 03:22:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[], 0x16) 03:22:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[], 0x16) 03:22:01 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[], 0x16) [ 1132.833188][ T9638] loop2: detected capacity change from 0 to 262160 03:22:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[], 0x16) [ 1132.920906][ T9677] loop4: detected capacity change from 0 to 262160 [ 1132.941313][ T26] audit: type=1800 audit(1647400922.040:261): pid=9677 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048671 res=0 errno=0 03:22:02 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x16) 03:22:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[], 0x16) 03:22:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 03:22:02 executing program 2: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[], 0x16) 03:22:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[], 0x16) [ 1133.349277][ T9688] loop4: detected capacity change from 0 to 262160 [ 1133.351496][ T9686] loop2: detected capacity change from 0 to 262160 [ 1133.365050][ T9689] loop3: detected capacity change from 0 to 262160 [ 1133.365850][ T9690] loop1: detected capacity change from 0 to 262160 03:22:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) lseek(0xffffffffffffffff, 0x0, 0x0) [ 1133.392386][ T26] audit: type=1800 audit(1647400922.490:262): pid=9688 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048673 res=0 errno=0 03:22:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000180)=ANY=[], 0x16) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) lseek(0xffffffffffffffff, 0x0, 0x0) 03:22:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000180)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000000a) 03:22:02 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}, 0x1, 0xffffff7f00000000}, 0x0) [ 1133.642273][ T26] audit: type=1800 audit(1647400922.490:263): pid=9689 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048674 res=0 errno=0 [ 1133.700828][ T9696] loop3: detected capacity change from 0 to 262160 [ 1133.861973][ T9701] loop4: detected capacity change from 0 to 262160 [ 1133.930986][ T26] audit: type=1800 audit(1647400922.520:264): pid=9690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048676 res=0 errno=0 [ 1133.952996][ T26] audit: type=1800 audit(1647400922.690:265): pid=9694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1176 res=0 errno=0 03:22:03 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100027716b7108c0d0e008fb60102430109021b000100000000090400000103000000090584"], 0x0) [ 1134.075787][ T26] audit: type=1800 audit(1647400922.850:266): pid=9696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048679 res=0 errno=0 03:22:03 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100027716b7108c0d0e008fb60102430109021b0001000000000904000001030000000905"], 0x0) [ 1134.376167][T12325] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1134.464520][ T26] audit: type=1800 audit(1647400922.990:267): pid=9701 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048681 res=0 errno=0 03:22:03 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:03 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}, 0x1, 0x9400}, 0x0) 03:22:03 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}, 0x1, 0x5}, 0x0) [ 1134.687510][T12325] usb 3-1: Using ep0 maxpacket: 16 03:22:03 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x9}}}, 0xa8}}, 0x0) 03:22:03 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x74}}}, 0xa8}}, 0x0) [ 1134.816252][T12325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1134.836007][T11470] usb 2-1: new high-speed USB device number 11 using dummy_hcd 03:22:04 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x2, 0x2, 0x28}) r4 = openat2(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0xa002, 0x1, 0x14}, 0x18) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000300)={0xff, 0x6, 0xffffff86, 0x2f, &(0x7f0000000200)=""/47, 0x42, &(0x7f0000000240)=""/66, 0x33, &(0x7f00000002c0)=""/51}) 03:22:04 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x9000000}}, 0xa8}}, 0x0) 03:22:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000180)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000000a) 03:22:04 executing program 3: ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@hyper}, @local, 0xd, 0x100, 0x6, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x8abe, 0x413}) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000240)={&(0x7f0000ffc000/0x2000)=nil, 0x9, 0x3, 0x4f}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@any, 0x8}, @any, 0x0, 0x6, 0x6, 0x5, 0xfffffffffffffffa, 0x8, 0x20}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000200)={{@any, 0x101}, 0xffffffffffffffff, 0x8, 0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)) [ 1135.106406][T12325] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1135.131851][T12325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1135.155957][T11470] usb 2-1: Using ep0 maxpacket: 16 [ 1135.204549][ T9725] loop4: detected capacity change from 0 to 262160 [ 1135.225174][T12325] usb 3-1: Product: syz [ 1135.236597][ T26] audit: type=1800 audit(1647400924.340:268): pid=9725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048683 res=0 errno=0 [ 1135.276158][T11470] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1135.294932][T12325] usb 3-1: Manufacturer: syz [ 1135.334274][T12325] usb 3-1: SerialNumber: syz [ 1135.457616][T12325] usb 3-1: config 0 descriptor?? [ 1135.476148][T11470] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1135.499566][T11470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1135.554964][T11470] usb 2-1: Product: syz [ 1135.561603][T12325] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1135.597114][T11470] usb 2-1: Manufacturer: syz [ 1135.601985][T11470] usb 2-1: SerialNumber: syz [ 1135.697949][T11470] usb 2-1: config 0 descriptor?? [ 1135.739050][T11470] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1135.800173][ T5471] usb 3-1: USB disconnect, device number 45 [ 1135.953990][T11470] usb 2-1: USB disconnect, device number 11 03:22:05 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100027716b7108c0d0e008fb60102430109021b000100000000090400000103000000090584"], 0x0) 03:22:05 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100027716b7108c0d0e008fb60102430109021b0001000000000904000001030000000905"], 0x0) 03:22:05 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x900}}, 0xa8}}, 0x0) 03:22:05 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0xc000000}}, 0xa8}}, 0x0) 03:22:05 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000180)=ANY=[], 0x16) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000000a) [ 1136.522532][ T9738] loop4: detected capacity change from 0 to 262160 03:22:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x3f, 0xab1, 0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x4, 0x0, 0x3, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000240)={r7}) r8 = landlock_create_ruleset(&(0x7f0000000140)={0xa00}, 0x8, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x38a07931f0b1ec25, 0x0) fcntl$setstatus(r8, 0x4, 0x0) [ 1136.558138][ T26] audit: type=1800 audit(1647400925.660:269): pid=9738 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048685 res=0 errno=0 [ 1136.606799][T11470] usb 3-1: new high-speed USB device number 46 using dummy_hcd 03:22:05 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0xc00}}, 0xa8}}, 0x0) 03:22:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x8001], [0x0, 0x0, 0x2, 0x8], [0x0, 0x2], [0x2, 0xfffffffffffffffd]}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = semget(0x0, 0x3, 0x264) semctl$IPC_RMID(r3, 0x0, 0x0) semtimedop(r3, &(0x7f0000000180)=[{0x0, 0x1000, 0x1800}, {0x0, 0x0, 0x800}], 0x2, &(0x7f00000001c0)) r4 = geteuid() r5 = getegid() setresgid(0xffffffffffffffff, r5, 0xee00) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0xee00, 0xee00, r4, r5, 0x10a, 0x1}, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1f}) r6 = getegid() setresgid(0xffffffffffffffff, r6, 0xee00) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000580)={{0x2, 0x0, r2, r4, r6, 0xb0, 0x2}, 0x0, 0x0, 0x4, 0x9, 0x6, 0x4, 0x48000000000, 0x5, 0x7f, 0x6}) fchown(r0, r1, r2) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000580)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x2}, 0x0, 0x0, 0x4, 0x9, 0x6, 0x4, 0x48000000000, 0x5, 0x7f, 0x6}) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r7, r8, r7, 0x0) keyctl$get_persistent(0x16, 0x0, r8) [ 1136.876215][T11470] usb 3-1: Using ep0 maxpacket: 16 03:22:06 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10, 0x1, 0x19000000}}, 0xa8}}, 0x0) [ 1136.916168][T10561] usb 2-1: new high-speed USB device number 12 using dummy_hcd 03:22:06 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/206, 0x0}) syz_emit_ethernet(0x26, &(0x7f0000000440)={@broadcast, @broadcast, @val, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "4b467670ff9385c4"}}}}, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 1136.997728][T11470] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 03:22:06 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/206, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) syz_emit_ethernet(0x85, 0x0, 0x0) [ 1137.181814][T11470] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1137.191713][T11470] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1137.206164][T10561] usb 2-1: Using ep0 maxpacket: 16 [ 1137.217252][T11470] usb 3-1: Product: syz [ 1137.222851][T11470] usb 3-1: Manufacturer: syz [ 1137.227851][T11470] usb 3-1: SerialNumber: syz [ 1137.254838][T11470] usb 3-1: config 0 descriptor?? [ 1137.299398][T11470] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1137.366443][T10561] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1137.520268][T11470] usb 3-1: USB disconnect, device number 46 [ 1137.586313][T10561] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1137.595442][T10561] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1137.604727][T10561] usb 2-1: Product: syz [ 1137.609473][T10561] usb 2-1: Manufacturer: syz [ 1137.614789][T10561] usb 2-1: SerialNumber: syz [ 1137.623948][T10561] usb 2-1: config 0 descriptor?? [ 1137.679212][T10561] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1137.891644][T10542] usb 2-1: USB disconnect, device number 12 03:22:07 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/206, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) syz_emit_ethernet(0x85, &(0x7f0000000740)=ANY=[], 0x0) 03:22:07 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100027716b7108c0d0e008fb60102430109021b0001000000000904000001030000000905"], 0x0) 03:22:07 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10, 0x1, 0x9000000}}, 0xa8}}, 0x0) 03:22:07 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/206, 0x0}) syz_emit_ethernet(0x26, &(0x7f0000000440)={@broadcast, @broadcast, @val, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "4b467670ff9385c4"}}}}, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:07 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:07 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:07 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/206, 0x0}) syz_emit_ethernet(0x26, &(0x7f0000000440)={@broadcast, @broadcast, @val, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "4b467670ff9385c4"}}}}, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:07 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:07 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) syz_emit_ethernet(0x85, &(0x7f0000000740)=ANY=[], 0x0) 03:22:07 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:07 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/206, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:07 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @alu={0x7, 0x1, 0xc, 0x4, 0xb, 0xffffffffffffffc0}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7ff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x2c4b}], &(0x7f0000000240)='syzkaller\x00', 0x1, 0x47, &(0x7f00000002c0)=""/71, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xd, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1, 0x1]}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}}]}, 0x78}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000000)) syz_io_uring_setup(0x14f4, &(0x7f0000000180), &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x8}, 0x0) syz_io_uring_setup(0x14f4, &(0x7f0000000180), &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x8}, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000640)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd=r2, 0x2, 0x0, 0x0, 0x3, 0x1, {0x1}}, 0x101) [ 1138.816087][T10542] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1139.086020][T10542] usb 2-1: Using ep0 maxpacket: 16 [ 1139.242774][T10542] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1139.426346][T10542] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 1139.435449][T10542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1139.443662][T10542] usb 2-1: Product: syz [ 1139.447936][T10542] usb 2-1: Manufacturer: syz [ 1139.452528][T10542] usb 2-1: SerialNumber: syz [ 1139.460635][T10542] usb 2-1: config 0 descriptor?? [ 1139.499016][T10542] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1139.709057][T11470] usb 2-1: USB disconnect, device number 13 03:22:09 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10, 0x1, 0xb00}}, 0xa8}}, 0x0) 03:22:09 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:09 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:09 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/206, 0x0}) syz_emit_ethernet(0x26, &(0x7f0000000440)={@broadcast, @broadcast, @val, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "4b467670ff9385c4"}}}}, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:09 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10, 0x1, 0x300}}, 0xa8}}, 0x0) 03:22:09 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10, 0x1, 0x6000}}, 0xa8}}, 0x0) 03:22:09 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10, 0x1, 0x935}}, 0xa8}}, 0x0) 03:22:09 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/206, 0x0}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) syz_emit_ethernet(0x85, &(0x7f0000000740)=ANY=[], 0x0) 03:22:09 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/206, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) syz_emit_ethernet(0x85, &(0x7f0000000740)=ANY=[], 0x0) 03:22:09 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:09 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/206, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) syz_emit_ethernet(0x85, &(0x7f0000000740)=ANY=[], 0x0) 03:22:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0x9]}) syz_open_dev$dri(&(0x7f0000000240), 0x80, 0x115000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x1, 0x1, 0x4, 0x0, 0x5}) 03:22:09 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/206, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:09 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x3}}, 0xa8}}, 0x0) 03:22:09 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0xfffffffe]}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[r3, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x2, 0x2, 0x6, 0x1f4b9578, 0xc3, 0x6], 0x4}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000080)={0x2, 0x4d1, 0x3, 0x3ff, 0x34, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:09 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x3}}, 0xa8}}, 0x0) 03:22:09 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:09 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x5c}}, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x80, 0x3}, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000200)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000007fb5010401020000000000000000020600000a000200000000ff0000000008000540000008b308000540000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000013) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="e2f68a52a6fbe916f83c7b0535ee58e64f402b5bd0b79fed4fced99ebeffdba3c78b013926c604e9225c44c2cc5f314d4e579c92549e3f8849fdeea75370d0eaa96c4450c52f513d20380d8bf7cf06f18beb3347e2bb55880528d665282f3904353d53496baf5e23cb63bd3dd5346dc3ddea8805624c9a396f50906274601179dbdc031c98240633644ce86c060529cd63af0de7a82ee32d2ec377483f88c1ceddd9f8225616a82989b5284f8e0b9df3748f5b88004c36aebf", 0xb9, 0x8000, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x0, [0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x4, 0x0, 0x1]}) 03:22:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0xfffffffe]}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[r3, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x2, 0x2, 0x6, 0x1f4b9578, 0xc3, 0x6], 0x4}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000080)={0x2, 0x4d1, 0x3, 0x3ff, 0x34, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:10 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:10 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0xb, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:10 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x48002) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000200)={0x0, 0x9}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x5], [], [0x3], [0x1000]}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/cgroup', 0x40, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00020000000000002e2f66696c653000"]) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000001c0)=0x3, 0x4) close(r0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) 03:22:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0xfffffffe]}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[r3, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x2, 0x2, 0x6, 0x1f4b9578, 0xc3, 0x6], 0x4}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000080)={0x2, 0x4d1, 0x3, 0x3ff, 0x34, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) [ 1141.010909][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:22:10 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:10 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 03:22:10 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0xa, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:10 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x402) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4}, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000000)={0x0, 0x400000, 0x0, 0x0, 0x0, [0x0, 0x0, 0x6], [0x0, 0x0, 0xfffffffd, 0x300], [0x100, 0x0, 0x0, 0x6], [0x7ff, 0x0, 0x20]}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x12a, 0x8}}, 0x20) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000440)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000004c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000400), r5, r0}}, 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x200, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff9}, r2}}, 0x30) 03:22:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0xfffffffe]}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[r3, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x2, 0x2, 0x6, 0x1f4b9578, 0xc3, 0x6], 0x4}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:10 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb000000}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 1141.450655][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 03:22:10 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 03:22:10 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xffffff}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:10 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1200}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0xfffffffe]}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:10 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x500}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:10 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1400}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:11 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:11 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 03:22:11 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf0}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0xfffffffe]}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:11 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_open_dev$audion(&(0x7f0000000040), 0x7, 0x40) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x10000, 0x1000000}) 03:22:11 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x10}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0xfffffffe]}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:11 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x6}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:11 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 1141.968212][ T9892] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 03:22:11 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x5}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0xfffffffe]}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:11 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:11 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:11 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000025c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) dup3(r6, 0xffffffffffffffff, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="a37a500000", @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000004680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, r8, {0x7, 0x24, 0x5, 0x400, 0x1f, 0xa5, 0x1f, 0x20}}, 0x50) dup3(r4, r5, 0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, r1, {{0x8001, 0x10001, 0x1, r3}}}, 0x28) write$FUSE_STATFS(r4, &(0x7f00000002c0)={0x60, 0x0, r1, {{0x6, 0x4, 0x8001, 0x6, 0x4, 0x6, 0x1, 0xcd}}}, 0x60) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x200001, 0x0) syz_clone3(&(0x7f0000000240)={0x4000400, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x31}, &(0x7f0000000100)=""/37, 0x25, &(0x7f0000000140), &(0x7f00000001c0)=[r0, r2, r3], 0x3, {r9}}, 0x58) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r11 = ioctl$UDMABUF_CREATE_LIST(r10, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r11, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') [ 1142.089227][ T9905] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1142.113607][ T9906] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:22:11 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x3, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0xfffffffe]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:11 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:11 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:11 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) 03:22:11 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) [ 1142.288301][ T9922] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1142.309562][ T9924] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 03:22:11 executing program 1: ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:11 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:11 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x4, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:11 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) 03:22:11 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0xa002, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r2 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r5, 0x1, 0x2000, 0x1000}) 03:22:11 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0xa, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:11 executing program 1: ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:11 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x7, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:11 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000240)='/dev/udmabuf\x00') r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}, {0x20, 'meta\x00'}, {0x20, 'syz0\x00'}, {0x20, 'syz0\x00'}, {0x20, '[/'}, {}, {0x20, 'syz1\x00'}], 0xa, "0096a73d9529d8a7cd175760da7c417dea3de46292e9f1cd98e340c6515988daa5560d4a6087b42e40cb5411368f7f2620c5b400d88154ffe9fc42d2c73cb4fe2af2e9425d72728e0e63d3ca2c7c10f2eb291c315d6f3cfdfcf0db0b"}, 0x8a) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000a0000000000000000000a20000000000a03000000000005000000010000000900010073797a300000000060000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005480000002124001180090001006d65746100000000140002800800014000000700000000000000001c140000001000010000000000000000000000000a"], 0xa8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r8, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfff}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008040}, 0x8850) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1104}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x6085) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {r2}, {r3, 0x200}, {r4, 0x80}, {r5}, {r1, 0x10000}, {r6, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100)={r9, r10+60000000}, &(0x7f0000000140), 0x8) 03:22:11 executing program 2: io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) io_uring_enter(r0, 0x3c6f, 0xd0a0, 0x1, &(0x7f00000000c0)={[0x6]}, 0x8) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x4cb00, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000700), 0xc001, 0x0) close(r2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x100, 0x3, 0x9, 0x7fff, 0x15, "ad53df3c989a90cde667d2fdb327d33ba1ad1e"}) 03:22:11 executing program 1: ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:11 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) 03:22:11 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x12000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:12 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:12 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:12 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:12 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000240)='/dev/udmabuf\x00') r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}, {0x20, 'meta\x00'}, {0x20, 'syz0\x00'}, {0x20, 'syz0\x00'}, {0x20, '[/'}, {}, {0x20, 'syz1\x00'}], 0xa, "0096a73d9529d8a7cd175760da7c417dea3de46292e9f1cd98e340c6515988daa5560d4a6087b42e40cb5411368f7f2620c5b400d88154ffe9fc42d2c73cb4fe2af2e9425d72728e0e63d3ca2c7c10f2eb291c315d6f3cfdfcf0db0b"}, 0x8a) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000a0000000000000000000a20000000000a03000000000005000000010000000900010073797a300000000060000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005480000002124001180090001006d65746100000000140002800800014000000700000000000000001c140000001000010000000000000000000000000a"], 0xa8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r8, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfff}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008040}, 0x8850) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1104}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x6085) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {r2}, {r3, 0x200}, {r4, 0x80}, {r5}, {r1, 0x10000}, {r6, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100)={r9, r10+60000000}, &(0x7f0000000140), 0x8) 03:22:12 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x9000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:12 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x5c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000340)='\x00') r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40046201, &(0x7f0000000300)='\xff\xff') ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40046201, &(0x7f00000002c0)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:12 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:12 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x5c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000340)='\x00') r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40046201, &(0x7f0000000300)='\xff\xff') ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40046201, &(0x7f00000002c0)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:12 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:12 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:12 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x5c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000340)='\x00') r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40046201, &(0x7f0000000300)='\xff\xff') ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40046201, &(0x7f00000002c0)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:13 executing program 5: r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:13 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:13 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000240)='/dev/udmabuf\x00') r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}, {0x20, 'meta\x00'}, {0x20, 'syz0\x00'}, {0x20, 'syz0\x00'}, {0x20, '[/'}, {}, {0x20, 'syz1\x00'}], 0xa, "0096a73d9529d8a7cd175760da7c417dea3de46292e9f1cd98e340c6515988daa5560d4a6087b42e40cb5411368f7f2620c5b400d88154ffe9fc42d2c73cb4fe2af2e9425d72728e0e63d3ca2c7c10f2eb291c315d6f3cfdfcf0db0b"}, 0x8a) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000a0000000000000000000a20000000000a03000000000005000000010000000900010073797a300000000060000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005480000002124001180090001006d65746100000000140002800800014000000700000000000000001c140000001000010000000000000000000000000a"], 0xa8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r8, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfff}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008040}, 0x8850) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1104}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x6085) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {r2}, {r3, 0x200}, {r4, 0x80}, {r5}, {r1, 0x10000}, {r6, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100)={r9, r10+60000000}, &(0x7f0000000140), 0x8) 03:22:13 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:13 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x5c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000340)='\x00') r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40046201, &(0x7f0000000300)='\xff\xff') ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:13 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x5c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000340)='\x00') r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40046201, &(0x7f0000000300)='\xff\xff') ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:13 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:13 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:13 executing program 1: syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000001c0)={0x80000001, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:13 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x5c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000340)='\x00') r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, 0x0) 03:22:14 executing program 5: r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:14 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:14 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000240)='/dev/udmabuf\x00') r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}, {0x20, 'meta\x00'}, {0x20, 'syz0\x00'}, {0x20, 'syz0\x00'}, {0x20, '[/'}, {}, {0x20, 'syz1\x00'}], 0xa, "0096a73d9529d8a7cd175760da7c417dea3de46292e9f1cd98e340c6515988daa5560d4a6087b42e40cb5411368f7f2620c5b400d88154ffe9fc42d2c73cb4fe2af2e9425d72728e0e63d3ca2c7c10f2eb291c315d6f3cfdfcf0db0b"}, 0x8a) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000a0000000000000000000a20000000000a03000000000005000000010000000900010073797a300000000060000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005480000002124001180090001006d65746100000000140002800800014000000700000000000000001c140000001000010000000000000000000000000a"], 0xa8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r8, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfff}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008040}, 0x8850) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1104}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x6085) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {r2}, {r3, 0x200}, {r4, 0x80}, {r5}, {r1, 0x10000}, {r6, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, 0x0) 03:22:14 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x5c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000340)='\x00') openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, 0x0) 03:22:14 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x5c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000340)='\x00') openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:14 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:14 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000240)='/dev/udmabuf\x00') r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}, {0x20, 'meta\x00'}, {0x20, 'syz0\x00'}, {0x20, 'syz0\x00'}, {0x20, '[/'}, {}, {0x20, 'syz1\x00'}], 0xa, "0096a73d9529d8a7cd175760da7c417dea3de46292e9f1cd98e340c6515988daa5560d4a6087b42e40cb5411368f7f2620c5b400d88154ffe9fc42d2c73cb4fe2af2e9425d72728e0e63d3ca2c7c10f2eb291c315d6f3cfdfcf0db0b"}, 0x8a) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000a0000000000000000000a20000000000a03000000000005000000010000000900010073797a300000000060000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005480000002124001180090001006d65746100000000140002800800014000000700000000000000001c140000001000010000000000000000000000000a"], 0xa8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r8, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfff}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008040}, 0x8850) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1104}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x6085) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {r2}, {r3, 0x200}, {r4, 0x80}, {r5}, {r1, 0x10000}, {r6, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:14 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x5c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x0, 0x2, &(0x7f00000000c0)=[0xe0b0, 0x1000], &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:14 executing program 5: r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:14 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:14 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x5c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000100)=[0x1, 0x1f], &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:14 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000240)='/dev/udmabuf\x00') r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}, {0x20, 'meta\x00'}, {0x20, 'syz0\x00'}, {0x20, 'syz0\x00'}, {0x20, '[/'}, {}, {0x20, 'syz1\x00'}], 0xa, "0096a73d9529d8a7cd175760da7c417dea3de46292e9f1cd98e340c6515988daa5560d4a6087b42e40cb5411368f7f2620c5b400d88154ffe9fc42d2c73cb4fe2af2e9425d72728e0e63d3ca2c7c10f2eb291c315d6f3cfdfcf0db0b"}, 0x8a) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000a0000000000000000000a20000000000a03000000000005000000010000000900010073797a300000000060000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005480000002124001180090001006d65746100000000140002800800014000000700000000000000001c140000001000010000000000000000000000000a"], 0xa8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r8, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfff}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008040}, 0x8850) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {r2}, {r3, 0x200}, {r4, 0x80}, {r5}, {r1, 0x10000}, {r6, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:15 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x101, 0x0, 0x9, 0xffff, 0x34]}) 03:22:15 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:15 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x5c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:15 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000240)='/dev/udmabuf\x00') r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}, {0x20, 'meta\x00'}, {0x20, 'syz0\x00'}, {0x20, 'syz0\x00'}, {0x20, '[/'}, {}, {0x20, 'syz1\x00'}], 0xa, "0096a73d9529d8a7cd175760da7c417dea3de46292e9f1cd98e340c6515988daa5560d4a6087b42e40cb5411368f7f2620c5b400d88154ffe9fc42d2c73cb4fe2af2e9425d72728e0e63d3ca2c7c10f2eb291c315d6f3cfdfcf0db0b"}, 0x8a) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000a0000000000000000000a20000000000a03000000000005000000010000000900010073797a300000000060000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005480000002124001180090001006d65746100000000140002800800014000000700000000000000001c140000001000010000000000000000000000000a"], 0xa8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {r2}, {r3, 0x200}, {r4, 0x80}, {r5}, {r1, 0x10000}, {r6, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 03:22:15 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x5c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:15 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:15 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:15 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000240)='/dev/udmabuf\x00') r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}, {0x20, 'meta\x00'}, {0x20, 'syz0\x00'}, {0x20, 'syz0\x00'}, {0x20, '[/'}, {}, {0x20, 'syz1\x00'}], 0xa, "0096a73d9529d8a7cd175760da7c417dea3de46292e9f1cd98e340c6515988daa5560d4a6087b42e40cb5411368f7f2620c5b400d88154ffe9fc42d2c73cb4fe2af2e9425d72728e0e63d3ca2c7c10f2eb291c315d6f3cfdfcf0db0b"}, 0x8a) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000a0000000000000000000a20000000000a03000000000005000000010000000900010073797a300000000060000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005480000002124001180090001006d65746100000000140002800800014000000700000000000000001c140000001000010000000000000000000000000a"], 0xa8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {r2}, {r3, 0x200}, {r4, 0x80}, {r5}, {r1, 0x10000}, {r6, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:15 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x5c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:15 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x94}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:15 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x74}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:15 executing program 1: r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:15 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000240)='/dev/udmabuf\x00') r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}, {0x20, 'meta\x00'}, {0x20, 'syz0\x00'}, {0x20, 'syz0\x00'}, {0x20, '[/'}, {}, {0x20, 'syz1\x00'}], 0xa, "0096a73d9529d8a7cd175760da7c417dea3de46292e9f1cd98e340c6515988daa5560d4a6087b42e40cb5411368f7f2620c5b400d88154ffe9fc42d2c73cb4fe2af2e9425d72728e0e63d3ca2c7c10f2eb291c315d6f3cfdfcf0db0b"}, 0x8a) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000a0000000000000000000a20000000000a03000000000005000000010000000900010073797a300000000060000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005480000002124001180090001006d65746100000000140002800800014000000700000000000000001c140000001000010000000000000000000000000a"], 0xa8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {r2}, {r3, 0x200}, {r4, 0x80}, {r5}, {r1, 0x10000}, {r6, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:15 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:15 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x5c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:15 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x5c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:16 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:16 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:16 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000240)='/dev/udmabuf\x00') r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}, {0x20, 'meta\x00'}, {0x20, 'syz0\x00'}, {0x20, 'syz0\x00'}, {0x20, '[/'}, {}, {0x20, 'syz1\x00'}], 0xa, "0096a73d9529d8a7cd175760da7c417dea3de46292e9f1cd98e340c6515988daa5560d4a6087b42e40cb5411368f7f2620c5b400d88154ffe9fc42d2c73cb4fe2af2e9425d72728e0e63d3ca2c7c10f2eb291c315d6f3cfdfcf0db0b"}, 0x8a) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000a0000000000000000000a20000000000a03000000000005000000010000000900010073797a300000000060000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005480000002124001180090001006d65746100000000140002800800014000000700000000000000001c140000001000010000000000000000000000000a"], 0xa8}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {r2}, {r3, 0x200}, {r4, 0x80}, {r5}, {r1, 0x10000}, {r6, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:16 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x8) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x9, 0x0, 0x6, 0xffff, 0x6, "bdfdd9c41d3071a3"}) close(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r2, r3}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff9f, 0x0, 0x0, 0x0, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xff}, @generic={0x6, 0xc, 0xa, 0x7, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000240)='syzkaller\x00', 0x200, 0x31, &(0x7f0000000280)=""/49, 0x40f00, 0xb, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x2, 0x41, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0x8000000000003) sendmsg$rds(r4, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) write(r4, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xa0040, 0x0) 03:22:16 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x5c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r2 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:16 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:16 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x5c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r2 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:16 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:16 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:16 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000240)='/dev/udmabuf\x00') r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}, {0x20, 'meta\x00'}, {0x20, 'syz0\x00'}, {0x20, 'syz0\x00'}, {0x20, '[/'}, {}, {0x20, 'syz1\x00'}], 0xa, "0096a73d9529d8a7cd175760da7c417dea3de46292e9f1cd98e340c6515988daa5560d4a6087b42e40cb5411368f7f2620c5b400d88154ffe9fc42d2c73cb4fe2af2e9425d72728e0e63d3ca2c7c10f2eb291c315d6f3cfdfcf0db0b"}, 0x8a) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000a0000000000000000000a20000000000a03000000000005000000010000000900010073797a300000000060000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005480000002124001180090001006d65746100000000140002800800014000000700000000000000001c140000001000010000000000000000000000000a"], 0xa8}}, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {r2}, {r3, 0x200}, {r4, 0x80}, {r5}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:16 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getaddr={0x5c, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r2 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:16 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x300]}) 03:22:17 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:17 executing program 2: signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xffffd323, 0x38, @local, @loopback, 0x40, 0x1, 0x7f, 0x40}}) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:17 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000240)=ANY=[@ANYBLOB="00000400e5fffffffceffb2e9354879dffd1762e6053ebc6b299cc7f0de930cff2f17ddf9f87a91c40ee1ca304065111b662b1d9c02c0b524b841f0d3c39688df572f798e47c0ac9f57518ad5d2f05b51fb3dfa3c00ac843a3dcfdbf6ebe1ee0ad328fc3f526d9141c26b4f6dd01000ab17086f825a6a7cd4bfd338e060aa2b587c47855007d0f758716d3f18bd29e6bab8b55e6b0f5bce18d260fcc6803face10f2f5db8ce2155bf545f5"]) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r8 = fsmount(r3, 0x0, 0x71) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) r11 = syz_open_dev$audion(&(0x7f0000000080), 0x1, 0x40) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) dup(r12) r13 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x321100, 0x0) ioctl$UDMABUF_CREATE_LIST(r7, 0x40087543, &(0x7f0000000180)={0x0, 0x4, [{r8, 0x0, 0xfffff000, 0xfffff000}, {r6, 0x0, 0x10000, 0xfffffffffffff000}, {r11, 0x0, 0xfffffffff0000000, 0x1000000}, {r13, 0x0, 0x1000, 0x1000000}]}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40046201, &(0x7f0000000040)='/d\x86\xe1\x1acdma\b\x00f\x00') 03:22:17 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000240)='/dev/udmabuf\x00') r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}, {0x20, 'meta\x00'}, {0x20, 'syz0\x00'}, {0x20, 'syz0\x00'}, {0x20, '[/'}, {}, {0x20, 'syz1\x00'}], 0xa, "0096a73d9529d8a7cd175760da7c417dea3de46292e9f1cd98e340c6515988daa5560d4a6087b42e40cb5411368f7f2620c5b400d88154ffe9fc42d2c73cb4fe2af2e9425d72728e0e63d3ca2c7c10f2eb291c315d6f3cfdfcf0db0b"}, 0x8a) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {r2}, {r3, 0x200}, {r4, 0x80}, {r5}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:17 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:17 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:17 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:17 executing program 2: signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:17 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000240)='/dev/udmabuf\x00') r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}, {0x20, 'meta\x00'}, {0x20, 'syz0\x00'}, {0x20, 'syz0\x00'}, {0x20, '[/'}, {}, {0x20, 'syz1\x00'}], 0xa, "0096a73d9529d8a7cd175760da7c417dea3de46292e9f1cd98e340c6515988daa5560d4a6087b42e40cb5411368f7f2620c5b400d88154ffe9fc42d2c73cb4fe2af2e9425d72728e0e63d3ca2c7c10f2eb291c315d6f3cfdfcf0db0b"}, 0x8a) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {r2}, {r3, 0x200}, {r4, 0x80}, {}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:17 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x7]}) 03:22:17 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:17 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:17 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000240)='/dev/udmabuf\x00') r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}, {0x20, 'meta\x00'}, {0x20, 'syz0\x00'}, {0x20, 'syz0\x00'}, {0x20, '[/'}, {}, {0x20, 'syz1\x00'}], 0xa, "0096a73d9529d8a7cd175760da7c417dea3de46292e9f1cd98e340c6515988daa5560d4a6087b42e40cb5411368f7f2620c5b400d88154ffe9fc42d2c73cb4fe2af2e9425d72728e0e63d3ca2c7c10f2eb291c315d6f3cfdfcf0db0b"}, 0x8a) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {r2}, {r3, 0x200}, {r4, 0x80}, {}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:17 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:17 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xc00}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x3000000]}) 03:22:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:17 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000240)='/dev/udmabuf\x00') r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {r2}, {r3, 0x200}, {r4, 0x80}, {}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:17 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:17 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)=ANY=[@ANYRES64=r4, @ANYRES32=r2, @ANYBLOB="00000000000000000100000000f0ffff00000000", @ANYRES32, @ANYBLOB="00000000000000000100000000f0ffff00000000"]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:18 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:18 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000240)='/dev/udmabuf\x00') r3 = socket$inet_icmp(0x2, 0x2, 0x1) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {r2}, {r3, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:18 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:18 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:18 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:18 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) r7 = openat(r6, &(0x7f0000000040)='./file0\x00', 0x240000, 0xe0) fcntl$dupfd(r3, 0x0, r1) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) ioctl$NBD_SET_SOCK(r7, 0xab00, r9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r11, 0x0) ioctl$DMA_BUF_SET_NAME_A(r8, 0x40046201, &(0x7f0000000080)='/dev/udmabuf\x00') 03:22:18 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000240)='/dev/udmabuf\x00') ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {r2}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:18 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {r2}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:18 executing program 2: openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:18 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:18 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:18 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:19 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:19 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:19 executing program 2: openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:19 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:19 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {0xffffffffffffffff, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:19 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {0xffffffffffffffff, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:19 executing program 2: openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:19 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 03:22:19 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {0xffffffffffffffff, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:19 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:19 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:19 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000700), 0x28c0, 0x0) close(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) write$binfmt_aout(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/2319], 0x90f) 03:22:20 executing program 4: r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r0, 0x8001}, {0xffffffffffffffff, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r0, 0x10000}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:20 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:20 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:20 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 03:22:20 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffff762}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3353}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x102c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x1004, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}]}, @NFT_MSG_DELFLOWTABLE={0x1d8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}]}], {0x14}}, 0x13f8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000001e40)=0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], 0x0, 0x8, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x1, &(0x7f0000000480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000500)='GPL\x00', 0x208, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x5, r4, 0x8, &(0x7f0000000580)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x7, 0x2, 0xff}, 0x10, r6, r7}, 0x80) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:20 executing program 4: r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r0, 0x8001}, {0xffffffffffffffff, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r0, 0x10000}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:20 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xffff], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0xcd40089991add99e, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x46d0, 0x9}}, './file0\x00'}) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x0, 0x6, [{0xffffffffffffffff, 0x0, 0x8000, 0x1000}, {r2, 0x0, 0x0, 0x1000000}, {r0, 0x0, 0xfffff000, 0xfffffffff0000000}, {r3, 0x0, 0x1000000000000, 0x100000000}, {r4, 0x0, 0xfffff000, 0x10000}, {r5, 0x0, 0x8000, 0xfffffffff0000000}]}) r6 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:20 executing program 4: r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r0, 0x8001}, {0xffffffffffffffff, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r0, 0x10000}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:20 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:20 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0xc}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:20 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 03:22:20 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:20 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:20 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffff762}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3353}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x102c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x1004, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}]}, @NFT_MSG_DELFLOWTABLE={0x1d8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}]}], {0x14}}, 0x13f8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000001e40)=0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], 0x0, 0x8, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x1, &(0x7f0000000480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000500)='GPL\x00', 0x208, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x5, r4, 0x8, &(0x7f0000000580)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x7, 0x2, 0xff}, 0x10, r6, r7}, 0x80) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:20 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:20 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 03:22:20 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:20 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x80000000, 0x8}) dup3(r0, r1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x5}, 0x2) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r3, 0x5451) 03:22:20 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:20 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:20 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:20 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x80000000, 0x8}) dup3(r0, r1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x5}, 0x2) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r3, 0x5451) 03:22:20 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffff762}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3353}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x102c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x1004, 0x7, 0x1, 0x0, "ec25e0826bc97f6f97f05d757de0ccefb5a1100f3e3f9b8996be4b7baef7c41ee5db75af41356dcdd6d74df69d6a6239ad944b77e092fc140b65a60468577b724a54785dafd7dde4458ca57139059f904e078b05863e494a6cdf1f1da7db93347f7085cfe8eb8a512050448fcd38d877254a10e274503d2ab14f4c93f0e0f5c02c3941ae9ae63a1d5e81b3dd6e6338c57786213d0bda742034785e5cadc508964ec1d6c08fec7097361a8eca009720ab87a8841bf36b3dab68df145ed2805d744a176392afa9e99ca170304dab50fa164bb09688b122df8f7fced3061fe15c75dbb3173e67a89b0eb997e16801b6f45870028ee303470e660cf8ea504632a6ec39e67ed2b20252b6872536a404098f7e8b6b568fdc083cd0fbadf0f0ea56fe5260875ea0d6715419b80ddc279df1db3f203bb2d4b7ce5a4ef3cf2d56138219ce5fa41cc89304f287f28fbf713d3d725acfe4962618fed22578cb5995ec3635b77bb893cb89007fca73c66bc0404325d8b8cd8ff05f59d830b1447598191a3d259cbce25a45cb6d293e15a6ea33aecbaad35f70028d250e3740a95b93dcac1a33ee67f659c68ba0806589a734de58a9281bd5d20fa3f7680ac99935a1b54a4c7b7d196140fd71f4074f92a76f4e9af360fa4da99dac5236e5885d2bf8717e363e529a2bdddf3cc3dc116f18badc5c12e68201a8bb1208a0d7b3bd94818f44167b99efff1aa766fbd0326faafcff27d5b80d712ab72894a4560aa0985d2024e8d11acecf207fb57c63fedef2e5081f88c9372fc655f32fcf9585f0bc1e5d1241d88d8157ddde2548877e69a00606639a4e43139a9548db5e86d86c25614217a15e7faf6701ef976e6a16d641d675b826ea588cc8d20a248a1689bf411ab805610ab42d7dd026cc27af08ff3a13037c53eab9e833c3ed42df798ee41a0f42ae2016fe4cbc1fda6b0a53c3e61a94987b3c683a7a6c7c9810d60c5f84a74e10728c2998a0a4bafa2d49895a0d2903d98dc272c58efbd6903b9ba5569b25984f435b1f993cfc4383e66f95663b3b995ba944adc473d836b7535cf8546fccc680e4f361a858c238a7829fd7f141889418b0f09e241d0bf385e51264b046ce7c7d5c9b1fd07104da61113146c73aed44ae1b3a3481b15780435f44fc32d1e412c66595637c4e6e2efd8e3d882c6659bdd4526ab2db1c655a24ed8b557f68b9e638ad50d434c1e54c979b91e5ab0e112a6bd1952ccad53f440a2c68691706c72b2c740b8772b62c9e435e3e422465e7de0c944481466602349f811b1b7e35554e951c4ab38ed6b0c6c8dfc9d2084d56574db408effa9572d41ead91831f1d7b07cbce33b721ce45f57d18da4ad3cb45e792354a45f627910414d35dfbcdd0a5431d17b25f2ea8e941a1fe64dabafd8658461bed2e7e0a3f8a69911daf3ec1ce174576dd3314bbcd9ec258d3c182fba4ab1e290c0e367a676530108c687127e33dde652b6db8865d086579ec61f657b61c1770bd966d7a0eb02c97f7b9a4f2335fc3e4598ccfac8e36bd073b556c4a8cc16ed94b1865240981369e65f046c0e7e802ebcd04a1da360dc11fbebec52a65b80e0e665e465f790de13cf19c86446c314e54a2affb99f6bef9869066470aebd04bb43d43b6380c20cd12f3c333e18345f04d6dd2039d44e05ae80899841f3b5cb2306a8ec6296cf9a22665a23f2daf996fef13879f6297626c8c17a75960f4f1c0f1b88b44eaa1501a072e630a15e6fdecf440fe7373f8b7d03b8265fb08e3a8bf70026c47616bd6848177f3bfd40dc8076631ec7b3b2919f573e5e1955956679381de18ad803865ae98653346294ab41dab52a5aedb3462927999e7759a2bbdcba1d7f1fcb35cee44011e43fd1bef0560728f57d369bd92979b2d5ef5df8b8f0907921e00a7e2458a1aff8fc538100ca5613af471285db103d6755732cf550098f28af121accebcf2d3836e0594a7e215a92e36cf4a39da1f1282b8d674891a4d88882460531a391d3e83c2382c1cb236e118ba91256709ae0b9b202a8c9f58975b0048ee68f868cee63e87023e05740a02049f4fac750394330c11b050571b6a041cdd5ddea6a18fd4f52ead218b2165cc782b427188e4ae584a53c8f1f3f3913176866575a89838ec57019a515679c40a249143f82833b54e538041152c5a7d10562c82ee1047c686f604fe11612135c63900e6f376b57d89e238ff8c11ddea67f049cd3fdf4936f07467b71bdd48d57d000599e5f5fdeca9dbd941847435204ea10e6112f32724b44b6c1fc4f7d105e63aa6d9cd46a59e5ddb818b6ae32f36b26f716ed98d8dc2903fe67f160d3365c46042777fb53336df347ac5bbb1be52d2409bb1ddfb657216cc27ab0ad34cffa71558d0ee89d7405994ef0cc4ed8a8c81f97ede9ba69da714fce2e11275a144655fa2232575b9888ca403b268f6138370604bfec9ba573f86cf92551d82a66f0db41876549da0281f3a3d3899f1d7d6a30f2f644e9156f7a21c7e354c37e441fe047924aa5502814186db20d6ad09a92f98eabaaff1cb5a1af093aef0ae9b4a9098f58e19507cd3de2e5064f2022112ee527eea874390bdaceced4de589fed12a6664bcc5f7b085b85570709bc39cb9d7e9476704bb7a7f649c9aae4e4d7c9b523b1c498a2ce99a0996e1c5762c8a53e3fee8271132f43d039122abd61f00da89571e4ca33b20065c78b581aad3d8d53cb55cf6d46dfa3455223295b5c11130e22913056e7092019f75c2063699dc5491c615ffb33413f140e859281dd193ebc7766ba63b4daa741c6c2fb136120e94ce57814ff1e1688d0cfaaa98594a0cbdb1a72f9537a3d96ac23fa606df37cf2ff832156b908dbbdeace1726a554c27b8ef5da054cb58406293c2460bd4a5ce404147f2e21c1324e8bfc98819264ab80baecee89630b285fe662ba1e3060b19a0666ef5d335bbdf50c90ddb72f01368ed8a1a94ef736cf2e908ffb5de41d81b3047b1ccd9645e309cdcb9efc1c71488a7dd682c40903870c8d3e4ddb0daa9ca8cf27ebd0a5ad1f26f910d94f2279862508ce4e5db9dc7af7d203c90aebdb30968cbd2245e2cec71107bc42fd05ef3a855d5424f41ebd25aa30f2e63b60aeae260d1f08a26f89694474d0b9587fe089ec28f389fe34559d271cdc274c40b4d08455b38e44434c8103bb303ec45bf6a77d2f410cf0105241747c287bf6549179ddefe4d580d919d16f036e9eab0d92b377744500304f568ce14729bee3758dfd8a9b26d3c3cfb69ff555e75a4588076ea349fe36a1858d69bb08dc37bf01039cd286bf9ccb15187f20ccdf881be65ac7b27547ee54971d5e4ff8b07457563c7e90cfcba7ee380ca64940586350215261a1a34c1d5762f66df7122b8dac56ed0beb73fc823db315b928bb96693ce5f76f35b24e70dd75bd6a5d19de27286f548aa50a20ace6c1f2e855b6a0d897638bb8434cf2f8fea55dc722a65eb34ca94fbac803f1da954fd6651be40aadcb2038686349bee3a1452e1309ddd2ed10bb3885b82c1775fb1153a96d603ef6d4ae30c27919d7984887f54cf6cb369849719973fb4885106a36fff586c6af41d75265b487f071253c77d249fb565f9f02149b680c83d5a50b638085a0efdccc30b09ebcba0201d14788aa6dd1cc28d27da6a8e0ab98b21325cf9c063a8aa375bd43b1cf77fd09a8f03552af1b44b74ff60f635dc73596aea76d72cb490e0fe729bc18b7fd86a9d0f493bc12cf7574c9109a8e4665b6127a3f189534f9f3aabd1001026db6c86275f538eb75af9b75a4999da79165ac91abb42923b276fde7954629a5e36356b37fa42d911188d5b1feccb4f53ebcce59b08f34886794ee455acfcdf1ca38ae96b5d3a8c6d2f24a31e5bb75cce1378b258f995e64551c2ab7221f8a315d9e766a653fd79c5b8b712949e2bfeed74f364c1d7b074f1654b30e339e38ac2ed15f6d893f275c9a3689bceaa275f08bb1a7092384b5d116cecc1fa80ee29e8790f00dd3d960f0b7a27d17190cf58113127d8046148419ae2911faed3e645e261ffc95a2237801108252f6a9ca5ecd8fbf5cd29a721a16b1b289e3524d98c2dad20c45c6edfdea640262bce35ca7a9a353146a6da0ab23b168a6dfba512809218063fcc3ffbc72503dc62b69ce23ade4f476652d9b0db81c327f23919af4655a16bd9af642c18773ab37624efb82a846b33efe91b7a0c3da51e14912201f1696e208dbb12385a28f89b06be1b1bcc9dd4e2520c478e951ff9e88a36ecba2d50293760bf2f546b8c16efa41df917414e667cf23513722bfe2122c59c0bd6e683224422f3ac2d8de71ccb3765aecddf37422d32a02c9059c788e3137880aeaee63d5609aba78a2d8eae4a1a92063377846a3a87608f53d0a6e27d173fbc74db80a3cfa05d8ce19d100695faa445ec7e8496e951d0fe9137d97e72194cdfc3003458030720f12545402081218e566e8f0cf5ea7b1413a6e838b53ef2efda3eb6463a554f5b1e64b18f57d81894d610a08b4ba428712839bc2aceae14be8ad7ff315d20e2f5562edbcd350f9bf1990fe422c9fbd5c3253b58cc071ab1e8bfb044a95dd5d0fe32573b3834fd6aa59acae658c5d04731ac9b8ba9c73347d8bf2b42a8095a0ab25fd646ef18b043d3cfc73443aaf3511b02c29093fbf469f98093757784d1b4ec78ec84448c7c42b1675a2ad24f08df2be7f5b306350020e4618dea82c12c988fdab9fe88eb2b016e2fdc7cc15eefaf02408dcf7f515abc3b8ba949506cd1e1da5d0918895ef411b56aba6150730791770e01d3035c37793488d0af6c998dc2e4c3745bda421a40c4743fccbb4fc895406c4e36b12ce17ba27c7f56081cf6c8b8ab23b2626086af83bf3250e86d135ab0a45fff93217687eb7b1bf2028a15ff4aa9a94bc450fd18b16476b0fa262b498a16f799f6f5d444c0cb263c92438e5843a303e299f333e9e7b3394b79dba37bab09e49252c3a1f80fb81a5dfe5e049d872c74c18f862ae9e3baf90992ef6face3623b570a170ae95c83161dd5af84a2b6481a39ca46721858b1aa18e0aa73bacf67842a2a62a00d64b359c498f2ddc3f264411daba23cbf3bff2e2abe651438e01e70d8f7717661ee295d2ca6f9bfafdf57ac19e56ff677b553ccf8b0cd5f06f44d890739ab23901c8b503d839496fb3da59be8efce939c27026707f299cc2dee751c3be3bd5592c1732325091258733dca9adde5fb477482d6f404c143a356570b7cca94e077c56cf79bb3f3b70d71e692417006291b1bcdd7faa089ecdce6fddce083c936694af87464ab08fd2e4c3aaf5c38ba7717629b2e5b33327cbea36bea8b3c97d7e623c326698086cf2afe9a0fbb74e92bdb36cf1f59a5a9a28776c5c0e99f8f3d9ae973bbba2a67b2d26502123d088d19b3fc836c6838e7d08447c8f2a1e741e5f85bd709f55375b57b72ed27a3bd5f27cc46a82f99b18a683a0e708defebe5dee9147e6742d633186fc698b76460f1a8b54a31b55ea1d7994bdab1a1e73f15dad8eff749c8447c82814c7ee1d1cd94b6eed4f777b5238d8c74c2e23258a21eefee77fdb4eceac91e325b07a773a5260ebfc4c29eefe584f9c15bb4ca9a1a2e3fb883002b20457092247eb36024052889f22d2f2659eb27fb48857fe86545cd3da250a39d87663a16aec0a97137bbc5e4772ebf374120fbd1936eb989e50d649cf3badf1a85644f2944774e8f9dee9d1d876ae2f67652ed9a2adba2f90e4e9560b2c6b1ea125b30bea1d11f6f"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}]}, @NFT_MSG_DELFLOWTABLE={0x1d8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}]}], {0x14}}, 0x13f8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000001e40)=0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], 0x0, 0x8, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x1, &(0x7f0000000480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000500)='GPL\x00', 0x208, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x5, r4, 0x8, &(0x7f0000000580)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x7, 0x2, 0xff}, 0x10, r6, r7}, 0x80) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:20 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 03:22:20 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:20 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:20 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:20 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x80000000, 0x8}) dup3(r0, r1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x5}, 0x2) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r3, 0x5451) 03:22:20 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 03:22:20 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:20 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:20 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffff762}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3353}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x102c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x1004, 0x7, 0x1, 0x0, "ec25e0826bc97f6f97f05d757de0ccefb5a1100f3e3f9b8996be4b7baef7c41ee5db75af41356dcdd6d74df69d6a6239ad944b77e092fc140b65a60468577b724a54785dafd7dde4458ca57139059f904e078b05863e494a6cdf1f1da7db93347f7085cfe8eb8a512050448fcd38d877254a10e274503d2ab14f4c93f0e0f5c02c3941ae9ae63a1d5e81b3dd6e6338c57786213d0bda742034785e5cadc508964ec1d6c08fec7097361a8eca009720ab87a8841bf36b3dab68df145ed2805d744a176392afa9e99ca170304dab50fa164bb09688b122df8f7fced3061fe15c75dbb3173e67a89b0eb997e16801b6f45870028ee303470e660cf8ea504632a6ec39e67ed2b20252b6872536a404098f7e8b6b568fdc083cd0fbadf0f0ea56fe5260875ea0d6715419b80ddc279df1db3f203bb2d4b7ce5a4ef3cf2d56138219ce5fa41cc89304f287f28fbf713d3d725acfe4962618fed22578cb5995ec3635b77bb893cb89007fca73c66bc0404325d8b8cd8ff05f59d830b1447598191a3d259cbce25a45cb6d293e15a6ea33aecbaad35f70028d250e3740a95b93dcac1a33ee67f659c68ba0806589a734de58a9281bd5d20fa3f7680ac99935a1b54a4c7b7d196140fd71f4074f92a76f4e9af360fa4da99dac5236e5885d2bf8717e363e529a2bdddf3cc3dc116f18badc5c12e68201a8bb1208a0d7b3bd94818f44167b99efff1aa766fbd0326faafcff27d5b80d712ab72894a4560aa0985d2024e8d11acecf207fb57c63fedef2e5081f88c9372fc655f32fcf9585f0bc1e5d1241d88d8157ddde2548877e69a00606639a4e43139a9548db5e86d86c25614217a15e7faf6701ef976e6a16d641d675b826ea588cc8d20a248a1689bf411ab805610ab42d7dd026cc27af08ff3a13037c53eab9e833c3ed42df798ee41a0f42ae2016fe4cbc1fda6b0a53c3e61a94987b3c683a7a6c7c9810d60c5f84a74e10728c2998a0a4bafa2d49895a0d2903d98dc272c58efbd6903b9ba5569b25984f435b1f993cfc4383e66f95663b3b995ba944adc473d836b7535cf8546fccc680e4f361a858c238a7829fd7f141889418b0f09e241d0bf385e51264b046ce7c7d5c9b1fd07104da61113146c73aed44ae1b3a3481b15780435f44fc32d1e412c66595637c4e6e2efd8e3d882c6659bdd4526ab2db1c655a24ed8b557f68b9e638ad50d434c1e54c979b91e5ab0e112a6bd1952ccad53f440a2c68691706c72b2c740b8772b62c9e435e3e422465e7de0c944481466602349f811b1b7e35554e951c4ab38ed6b0c6c8dfc9d2084d56574db408effa9572d41ead91831f1d7b07cbce33b721ce45f57d18da4ad3cb45e792354a45f627910414d35dfbcdd0a5431d17b25f2ea8e941a1fe64dabafd8658461bed2e7e0a3f8a69911daf3ec1ce174576dd3314bbcd9ec258d3c182fba4ab1e290c0e367a676530108c687127e33dde652b6db8865d086579ec61f657b61c1770bd966d7a0eb02c97f7b9a4f2335fc3e4598ccfac8e36bd073b556c4a8cc16ed94b1865240981369e65f046c0e7e802ebcd04a1da360dc11fbebec52a65b80e0e665e465f790de13cf19c86446c314e54a2affb99f6bef9869066470aebd04bb43d43b6380c20cd12f3c333e18345f04d6dd2039d44e05ae80899841f3b5cb2306a8ec6296cf9a22665a23f2daf996fef13879f6297626c8c17a75960f4f1c0f1b88b44eaa1501a072e630a15e6fdecf440fe7373f8b7d03b8265fb08e3a8bf70026c47616bd6848177f3bfd40dc8076631ec7b3b2919f573e5e1955956679381de18ad803865ae98653346294ab41dab52a5aedb3462927999e7759a2bbdcba1d7f1fcb35cee44011e43fd1bef0560728f57d369bd92979b2d5ef5df8b8f0907921e00a7e2458a1aff8fc538100ca5613af471285db103d6755732cf550098f28af121accebcf2d3836e0594a7e215a92e36cf4a39da1f1282b8d674891a4d88882460531a391d3e83c2382c1cb236e118ba91256709ae0b9b202a8c9f58975b0048ee68f868cee63e87023e05740a02049f4fac750394330c11b050571b6a041cdd5ddea6a18fd4f52ead218b2165cc782b427188e4ae584a53c8f1f3f3913176866575a89838ec57019a515679c40a249143f82833b54e538041152c5a7d10562c82ee1047c686f604fe11612135c63900e6f376b57d89e238ff8c11ddea67f049cd3fdf4936f07467b71bdd48d57d000599e5f5fdeca9dbd941847435204ea10e6112f32724b44b6c1fc4f7d105e63aa6d9cd46a59e5ddb818b6ae32f36b26f716ed98d8dc2903fe67f160d3365c46042777fb53336df347ac5bbb1be52d2409bb1ddfb657216cc27ab0ad34cffa71558d0ee89d7405994ef0cc4ed8a8c81f97ede9ba69da714fce2e11275a144655fa2232575b9888ca403b268f6138370604bfec9ba573f86cf92551d82a66f0db41876549da0281f3a3d3899f1d7d6a30f2f644e9156f7a21c7e354c37e441fe047924aa5502814186db20d6ad09a92f98eabaaff1cb5a1af093aef0ae9b4a9098f58e19507cd3de2e5064f2022112ee527eea874390bdaceced4de589fed12a6664bcc5f7b085b85570709bc39cb9d7e9476704bb7a7f649c9aae4e4d7c9b523b1c498a2ce99a0996e1c5762c8a53e3fee8271132f43d039122abd61f00da89571e4ca33b20065c78b581aad3d8d53cb55cf6d46dfa3455223295b5c11130e22913056e7092019f75c2063699dc5491c615ffb33413f140e859281dd193ebc7766ba63b4daa741c6c2fb136120e94ce57814ff1e1688d0cfaaa98594a0cbdb1a72f9537a3d96ac23fa606df37cf2ff832156b908dbbdeace1726a554c27b8ef5da054cb58406293c2460bd4a5ce404147f2e21c1324e8bfc98819264ab80baecee89630b285fe662ba1e3060b19a0666ef5d335bbdf50c90ddb72f01368ed8a1a94ef736cf2e908ffb5de41d81b3047b1ccd9645e309cdcb9efc1c71488a7dd682c40903870c8d3e4ddb0daa9ca8cf27ebd0a5ad1f26f910d94f2279862508ce4e5db9dc7af7d203c90aebdb30968cbd2245e2cec71107bc42fd05ef3a855d5424f41ebd25aa30f2e63b60aeae260d1f08a26f89694474d0b9587fe089ec28f389fe34559d271cdc274c40b4d08455b38e44434c8103bb303ec45bf6a77d2f410cf0105241747c287bf6549179ddefe4d580d919d16f036e9eab0d92b377744500304f568ce14729bee3758dfd8a9b26d3c3cfb69ff555e75a4588076ea349fe36a1858d69bb08dc37bf01039cd286bf9ccb15187f20ccdf881be65ac7b27547ee54971d5e4ff8b07457563c7e90cfcba7ee380ca64940586350215261a1a34c1d5762f66df7122b8dac56ed0beb73fc823db315b928bb96693ce5f76f35b24e70dd75bd6a5d19de27286f548aa50a20ace6c1f2e855b6a0d897638bb8434cf2f8fea55dc722a65eb34ca94fbac803f1da954fd6651be40aadcb2038686349bee3a1452e1309ddd2ed10bb3885b82c1775fb1153a96d603ef6d4ae30c27919d7984887f54cf6cb369849719973fb4885106a36fff586c6af41d75265b487f071253c77d249fb565f9f02149b680c83d5a50b638085a0efdccc30b09ebcba0201d14788aa6dd1cc28d27da6a8e0ab98b21325cf9c063a8aa375bd43b1cf77fd09a8f03552af1b44b74ff60f635dc73596aea76d72cb490e0fe729bc18b7fd86a9d0f493bc12cf7574c9109a8e4665b6127a3f189534f9f3aabd1001026db6c86275f538eb75af9b75a4999da79165ac91abb42923b276fde7954629a5e36356b37fa42d911188d5b1feccb4f53ebcce59b08f34886794ee455acfcdf1ca38ae96b5d3a8c6d2f24a31e5bb75cce1378b258f995e64551c2ab7221f8a315d9e766a653fd79c5b8b712949e2bfeed74f364c1d7b074f1654b30e339e38ac2ed15f6d893f275c9a3689bceaa275f08bb1a7092384b5d116cecc1fa80ee29e8790f00dd3d960f0b7a27d17190cf58113127d8046148419ae2911faed3e645e261ffc95a2237801108252f6a9ca5ecd8fbf5cd29a721a16b1b289e3524d98c2dad20c45c6edfdea640262bce35ca7a9a353146a6da0ab23b168a6dfba512809218063fcc3ffbc72503dc62b69ce23ade4f476652d9b0db81c327f23919af4655a16bd9af642c18773ab37624efb82a846b33efe91b7a0c3da51e14912201f1696e208dbb12385a28f89b06be1b1bcc9dd4e2520c478e951ff9e88a36ecba2d50293760bf2f546b8c16efa41df917414e667cf23513722bfe2122c59c0bd6e683224422f3ac2d8de71ccb3765aecddf37422d32a02c9059c788e3137880aeaee63d5609aba78a2d8eae4a1a92063377846a3a87608f53d0a6e27d173fbc74db80a3cfa05d8ce19d100695faa445ec7e8496e951d0fe9137d97e72194cdfc3003458030720f12545402081218e566e8f0cf5ea7b1413a6e838b53ef2efda3eb6463a554f5b1e64b18f57d81894d610a08b4ba428712839bc2aceae14be8ad7ff315d20e2f5562edbcd350f9bf1990fe422c9fbd5c3253b58cc071ab1e8bfb044a95dd5d0fe32573b3834fd6aa59acae658c5d04731ac9b8ba9c73347d8bf2b42a8095a0ab25fd646ef18b043d3cfc73443aaf3511b02c29093fbf469f98093757784d1b4ec78ec84448c7c42b1675a2ad24f08df2be7f5b306350020e4618dea82c12c988fdab9fe88eb2b016e2fdc7cc15eefaf02408dcf7f515abc3b8ba949506cd1e1da5d0918895ef411b56aba6150730791770e01d3035c37793488d0af6c998dc2e4c3745bda421a40c4743fccbb4fc895406c4e36b12ce17ba27c7f56081cf6c8b8ab23b2626086af83bf3250e86d135ab0a45fff93217687eb7b1bf2028a15ff4aa9a94bc450fd18b16476b0fa262b498a16f799f6f5d444c0cb263c92438e5843a303e299f333e9e7b3394b79dba37bab09e49252c3a1f80fb81a5dfe5e049d872c74c18f862ae9e3baf90992ef6face3623b570a170ae95c83161dd5af84a2b6481a39ca46721858b1aa18e0aa73bacf67842a2a62a00d64b359c498f2ddc3f264411daba23cbf3bff2e2abe651438e01e70d8f7717661ee295d2ca6f9bfafdf57ac19e56ff677b553ccf8b0cd5f06f44d890739ab23901c8b503d839496fb3da59be8efce939c27026707f299cc2dee751c3be3bd5592c1732325091258733dca9adde5fb477482d6f404c143a356570b7cca94e077c56cf79bb3f3b70d71e692417006291b1bcdd7faa089ecdce6fddce083c936694af87464ab08fd2e4c3aaf5c38ba7717629b2e5b33327cbea36bea8b3c97d7e623c326698086cf2afe9a0fbb74e92bdb36cf1f59a5a9a28776c5c0e99f8f3d9ae973bbba2a67b2d26502123d088d19b3fc836c6838e7d08447c8f2a1e741e5f85bd709f55375b57b72ed27a3bd5f27cc46a82f99b18a683a0e708defebe5dee9147e6742d633186fc698b76460f1a8b54a31b55ea1d7994bdab1a1e73f15dad8eff749c8447c82814c7ee1d1cd94b6eed4f777b5238d8c74c2e23258a21eefee77fdb4eceac91e325b07a773a5260ebfc4c29eefe584f9c15bb4ca9a1a2e3fb883002b20457092247eb36024052889f22d2f2659eb27fb48857fe86545cd3da250a39d87663a16aec0a97137bbc5e4772ebf374120fbd1936eb989e50d649cf3badf1a85644f2944774e8f9dee9d1d876ae2f67652ed9a2adba2f90e4e9560b2c6b1ea125b30bea1d11f6f"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}]}, @NFT_MSG_DELFLOWTABLE={0x1d8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}]}], {0x14}}, 0x13f8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000001e40)=0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], 0x0, 0x8, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r7, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:20 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:20 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x80000000, 0x8}) dup3(r0, r1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x5}, 0x2) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$FIOCLEX(r3, 0x5451) 03:22:20 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:20 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000027cd08b9a75a574c6f78ce7325db4707bdc5a6a496c52c3ac8986b0e200e31f70f204ce2bd03288166a43c4b09915f"]) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r3, 0x1, 0xfffffffffffff000}) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:20 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:20 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:20 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x80000000, 0x8}) dup3(r0, r1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x5}, 0x2) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$FIOCLEX(r3, 0x5451) 03:22:20 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffff762}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3353}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x102c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x1004, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}]}, @NFT_MSG_DELFLOWTABLE={0x1d8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}]}], {0x14}}, 0x13f8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000001e40)=0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], 0x0, 0x8, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:20 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:21 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:21 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:21 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, 0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:21 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x80000000, 0x8}) dup3(r0, r1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x5}, 0x2) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$FIOCLEX(r3, 0x5451) 03:22:21 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:21 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:21 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000027cd08b9a75a574c6f78ce7325db4707bdc5a6a496c52c3ac8986b0e200e31f70f204ce2bd03288166a43c4b09915f"]) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r3, 0x1, 0xfffffffffffff000}) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:21 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffff762}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3353}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x102c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x1004, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}]}, @NFT_MSG_DELFLOWTABLE={0x1d8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}]}], {0x14}}, 0x13f8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000001e40)=0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], 0x0, 0x8, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:21 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x80000000, 0x8}) dup3(r0, r1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x5}, 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) 03:22:21 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:21 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, 0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:21 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}, {r0, 0x1}], 0x9, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:21 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x80000000, 0x8}) dup3(r0, r1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x5}, 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) 03:22:21 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x8}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:21 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:21 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:21 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, 0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:21 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffff762}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3353}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x102c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x1004, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}]}, @NFT_MSG_DELFLOWTABLE={0x1d8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}]}], {0x14}}, 0x13f8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000001e40)=0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0], 0x0, 0x8, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:21 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x9000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:21 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x80000000, 0x8}) dup3(r0, r1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x5}, 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) 03:22:21 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, 0x0) 03:22:21 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, 0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:21 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x80000000, 0x8}) dup3(r0, r1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x5}, 0x2) r2 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r2, 0x5451) 03:22:21 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:21 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffff762}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3353}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x102c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x1004, 0x7, 0x1, 0x0, "ec25e0826bc97f6f97f05d757de0ccefb5a1100f3e3f9b8996be4b7baef7c41ee5db75af41356dcdd6d74df69d6a6239ad944b77e092fc140b65a60468577b724a54785dafd7dde4458ca57139059f904e078b05863e494a6cdf1f1da7db93347f7085cfe8eb8a512050448fcd38d877254a10e274503d2ab14f4c93f0e0f5c02c3941ae9ae63a1d5e81b3dd6e6338c57786213d0bda742034785e5cadc508964ec1d6c08fec7097361a8eca009720ab87a8841bf36b3dab68df145ed2805d744a176392afa9e99ca170304dab50fa164bb09688b122df8f7fced3061fe15c75dbb3173e67a89b0eb997e16801b6f45870028ee303470e660cf8ea504632a6ec39e67ed2b20252b6872536a404098f7e8b6b568fdc083cd0fbadf0f0ea56fe5260875ea0d6715419b80ddc279df1db3f203bb2d4b7ce5a4ef3cf2d56138219ce5fa41cc89304f287f28fbf713d3d725acfe4962618fed22578cb5995ec3635b77bb893cb89007fca73c66bc0404325d8b8cd8ff05f59d830b1447598191a3d259cbce25a45cb6d293e15a6ea33aecbaad35f70028d250e3740a95b93dcac1a33ee67f659c68ba0806589a734de58a9281bd5d20fa3f7680ac99935a1b54a4c7b7d196140fd71f4074f92a76f4e9af360fa4da99dac5236e5885d2bf8717e363e529a2bdddf3cc3dc116f18badc5c12e68201a8bb1208a0d7b3bd94818f44167b99efff1aa766fbd0326faafcff27d5b80d712ab72894a4560aa0985d2024e8d11acecf207fb57c63fedef2e5081f88c9372fc655f32fcf9585f0bc1e5d1241d88d8157ddde2548877e69a00606639a4e43139a9548db5e86d86c25614217a15e7faf6701ef976e6a16d641d675b826ea588cc8d20a248a1689bf411ab805610ab42d7dd026cc27af08ff3a13037c53eab9e833c3ed42df798ee41a0f42ae2016fe4cbc1fda6b0a53c3e61a94987b3c683a7a6c7c9810d60c5f84a74e10728c2998a0a4bafa2d49895a0d2903d98dc272c58efbd6903b9ba5569b25984f435b1f993cfc4383e66f95663b3b995ba944adc473d836b7535cf8546fccc680e4f361a858c238a7829fd7f141889418b0f09e241d0bf385e51264b046ce7c7d5c9b1fd07104da61113146c73aed44ae1b3a3481b15780435f44fc32d1e412c66595637c4e6e2efd8e3d882c6659bdd4526ab2db1c655a24ed8b557f68b9e638ad50d434c1e54c979b91e5ab0e112a6bd1952ccad53f440a2c68691706c72b2c740b8772b62c9e435e3e422465e7de0c944481466602349f811b1b7e35554e951c4ab38ed6b0c6c8dfc9d2084d56574db408effa9572d41ead91831f1d7b07cbce33b721ce45f57d18da4ad3cb45e792354a45f627910414d35dfbcdd0a5431d17b25f2ea8e941a1fe64dabafd8658461bed2e7e0a3f8a69911daf3ec1ce174576dd3314bbcd9ec258d3c182fba4ab1e290c0e367a676530108c687127e33dde652b6db8865d086579ec61f657b61c1770bd966d7a0eb02c97f7b9a4f2335fc3e4598ccfac8e36bd073b556c4a8cc16ed94b1865240981369e65f046c0e7e802ebcd04a1da360dc11fbebec52a65b80e0e665e465f790de13cf19c86446c314e54a2affb99f6bef9869066470aebd04bb43d43b6380c20cd12f3c333e18345f04d6dd2039d44e05ae80899841f3b5cb2306a8ec6296cf9a22665a23f2daf996fef13879f6297626c8c17a75960f4f1c0f1b88b44eaa1501a072e630a15e6fdecf440fe7373f8b7d03b8265fb08e3a8bf70026c47616bd6848177f3bfd40dc8076631ec7b3b2919f573e5e1955956679381de18ad803865ae98653346294ab41dab52a5aedb3462927999e7759a2bbdcba1d7f1fcb35cee44011e43fd1bef0560728f57d369bd92979b2d5ef5df8b8f0907921e00a7e2458a1aff8fc538100ca5613af471285db103d6755732cf550098f28af121accebcf2d3836e0594a7e215a92e36cf4a39da1f1282b8d674891a4d88882460531a391d3e83c2382c1cb236e118ba91256709ae0b9b202a8c9f58975b0048ee68f868cee63e87023e05740a02049f4fac750394330c11b050571b6a041cdd5ddea6a18fd4f52ead218b2165cc782b427188e4ae584a53c8f1f3f3913176866575a89838ec57019a515679c40a249143f82833b54e538041152c5a7d10562c82ee1047c686f604fe11612135c63900e6f376b57d89e238ff8c11ddea67f049cd3fdf4936f07467b71bdd48d57d000599e5f5fdeca9dbd941847435204ea10e6112f32724b44b6c1fc4f7d105e63aa6d9cd46a59e5ddb818b6ae32f36b26f716ed98d8dc2903fe67f160d3365c46042777fb53336df347ac5bbb1be52d2409bb1ddfb657216cc27ab0ad34cffa71558d0ee89d7405994ef0cc4ed8a8c81f97ede9ba69da714fce2e11275a144655fa2232575b9888ca403b268f6138370604bfec9ba573f86cf92551d82a66f0db41876549da0281f3a3d3899f1d7d6a30f2f644e9156f7a21c7e354c37e441fe047924aa5502814186db20d6ad09a92f98eabaaff1cb5a1af093aef0ae9b4a9098f58e19507cd3de2e5064f2022112ee527eea874390bdaceced4de589fed12a6664bcc5f7b085b85570709bc39cb9d7e9476704bb7a7f649c9aae4e4d7c9b523b1c498a2ce99a0996e1c5762c8a53e3fee8271132f43d039122abd61f00da89571e4ca33b20065c78b581aad3d8d53cb55cf6d46dfa3455223295b5c11130e22913056e7092019f75c2063699dc5491c615ffb33413f140e859281dd193ebc7766ba63b4daa741c6c2fb136120e94ce57814ff1e1688d0cfaaa98594a0cbdb1a72f9537a3d96ac23fa606df37cf2ff832156b908dbbdeace1726a554c27b8ef5da054cb58406293c2460bd4a5ce404147f2e21c1324e8bfc98819264ab80baecee89630b285fe662ba1e3060b19a0666ef5d335bbdf50c90ddb72f01368ed8a1a94ef736cf2e908ffb5de41d81b3047b1ccd9645e309cdcb9efc1c71488a7dd682c40903870c8d3e4ddb0daa9ca8cf27ebd0a5ad1f26f910d94f2279862508ce4e5db9dc7af7d203c90aebdb30968cbd2245e2cec71107bc42fd05ef3a855d5424f41ebd25aa30f2e63b60aeae260d1f08a26f89694474d0b9587fe089ec28f389fe34559d271cdc274c40b4d08455b38e44434c8103bb303ec45bf6a77d2f410cf0105241747c287bf6549179ddefe4d580d919d16f036e9eab0d92b377744500304f568ce14729bee3758dfd8a9b26d3c3cfb69ff555e75a4588076ea349fe36a1858d69bb08dc37bf01039cd286bf9ccb15187f20ccdf881be65ac7b27547ee54971d5e4ff8b07457563c7e90cfcba7ee380ca64940586350215261a1a34c1d5762f66df7122b8dac56ed0beb73fc823db315b928bb96693ce5f76f35b24e70dd75bd6a5d19de27286f548aa50a20ace6c1f2e855b6a0d897638bb8434cf2f8fea55dc722a65eb34ca94fbac803f1da954fd6651be40aadcb2038686349bee3a1452e1309ddd2ed10bb3885b82c1775fb1153a96d603ef6d4ae30c27919d7984887f54cf6cb369849719973fb4885106a36fff586c6af41d75265b487f071253c77d249fb565f9f02149b680c83d5a50b638085a0efdccc30b09ebcba0201d14788aa6dd1cc28d27da6a8e0ab98b21325cf9c063a8aa375bd43b1cf77fd09a8f03552af1b44b74ff60f635dc73596aea76d72cb490e0fe729bc18b7fd86a9d0f493bc12cf7574c9109a8e4665b6127a3f189534f9f3aabd1001026db6c86275f538eb75af9b75a4999da79165ac91abb42923b276fde7954629a5e36356b37fa42d911188d5b1feccb4f53ebcce59b08f34886794ee455acfcdf1ca38ae96b5d3a8c6d2f24a31e5bb75cce1378b258f995e64551c2ab7221f8a315d9e766a653fd79c5b8b712949e2bfeed74f364c1d7b074f1654b30e339e38ac2ed15f6d893f275c9a3689bceaa275f08bb1a7092384b5d116cecc1fa80ee29e8790f00dd3d960f0b7a27d17190cf58113127d8046148419ae2911faed3e645e261ffc95a2237801108252f6a9ca5ecd8fbf5cd29a721a16b1b289e3524d98c2dad20c45c6edfdea640262bce35ca7a9a353146a6da0ab23b168a6dfba512809218063fcc3ffbc72503dc62b69ce23ade4f476652d9b0db81c327f23919af4655a16bd9af642c18773ab37624efb82a846b33efe91b7a0c3da51e14912201f1696e208dbb12385a28f89b06be1b1bcc9dd4e2520c478e951ff9e88a36ecba2d50293760bf2f546b8c16efa41df917414e667cf23513722bfe2122c59c0bd6e683224422f3ac2d8de71ccb3765aecddf37422d32a02c9059c788e3137880aeaee63d5609aba78a2d8eae4a1a92063377846a3a87608f53d0a6e27d173fbc74db80a3cfa05d8ce19d100695faa445ec7e8496e951d0fe9137d97e72194cdfc3003458030720f12545402081218e566e8f0cf5ea7b1413a6e838b53ef2efda3eb6463a554f5b1e64b18f57d81894d610a08b4ba428712839bc2aceae14be8ad7ff315d20e2f5562edbcd350f9bf1990fe422c9fbd5c3253b58cc071ab1e8bfb044a95dd5d0fe32573b3834fd6aa59acae658c5d04731ac9b8ba9c73347d8bf2b42a8095a0ab25fd646ef18b043d3cfc73443aaf3511b02c29093fbf469f98093757784d1b4ec78ec84448c7c42b1675a2ad24f08df2be7f5b306350020e4618dea82c12c988fdab9fe88eb2b016e2fdc7cc15eefaf02408dcf7f515abc3b8ba949506cd1e1da5d0918895ef411b56aba6150730791770e01d3035c37793488d0af6c998dc2e4c3745bda421a40c4743fccbb4fc895406c4e36b12ce17ba27c7f56081cf6c8b8ab23b2626086af83bf3250e86d135ab0a45fff93217687eb7b1bf2028a15ff4aa9a94bc450fd18b16476b0fa262b498a16f799f6f5d444c0cb263c92438e5843a303e299f333e9e7b3394b79dba37bab09e49252c3a1f80fb81a5dfe5e049d872c74c18f862ae9e3baf90992ef6face3623b570a170ae95c83161dd5af84a2b6481a39ca46721858b1aa18e0aa73bacf67842a2a62a00d64b359c498f2ddc3f264411daba23cbf3bff2e2abe651438e01e70d8f7717661ee295d2ca6f9bfafdf57ac19e56ff677b553ccf8b0cd5f06f44d890739ab23901c8b503d839496fb3da59be8efce939c27026707f299cc2dee751c3be3bd5592c1732325091258733dca9adde5fb477482d6f404c143a356570b7cca94e077c56cf79bb3f3b70d71e692417006291b1bcdd7faa089ecdce6fddce083c936694af87464ab08fd2e4c3aaf5c38ba7717629b2e5b33327cbea36bea8b3c97d7e623c326698086cf2afe9a0fbb74e92bdb36cf1f59a5a9a28776c5c0e99f8f3d9ae973bbba2a67b2d26502123d088d19b3fc836c6838e7d08447c8f2a1e741e5f85bd709f55375b57b72ed27a3bd5f27cc46a82f99b18a683a0e708defebe5dee9147e6742d633186fc698b76460f1a8b54a31b55ea1d7994bdab1a1e73f15dad8eff749c8447c82814c7ee1d1cd94b6eed4f777b5238d8c74c2e23258a21eefee77fdb4eceac91e325b07a773a5260ebfc4c29eefe584f9c15bb4ca9a1a2e3fb883002b20457092247eb36024052889f22d2f2659eb27fb48857fe86545cd3da250a39d87663a16aec0a97137bbc5e4772ebf374120fbd1936eb989e50d649cf3badf1a85644f2944774e8f9dee9d1d876ae2f67652ed9a2adba2f90e4e9560b2c6b1ea125b30bea1d11f6f"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}]}, @NFT_MSG_DELFLOWTABLE={0x1d8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}]}], {0x14}}, 0x13f8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000001e40)=0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2000000]}) 03:22:21 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, 0x0) 03:22:21 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, 0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:21 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:21 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0xc00, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:21 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x80000000, 0x8}) dup3(r0, r1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x5}, 0x2) r2 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r2, 0x5451) 03:22:21 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x80000000, 0x8}) dup3(r0, r1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x5}, 0x2) r2 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r2, 0x5451) 03:22:21 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, 0x0) 03:22:21 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, 0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:21 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r1, 0x10000}, {0xffffffffffffffff, 0x4000}], 0x8, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:21 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffff762}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3353}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x102c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x1004, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}]}, @NFT_MSG_DELFLOWTABLE={0x1d8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}]}], {0x14}}, 0x13f8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000001e40)=0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:21 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x1800, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:21 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x80000000, 0x8}) dup3(r0, r1, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r3, 0x5451) 03:22:21 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}, {r1, 0x10000}], 0x7, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [0x700]}) 03:22:21 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:21 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x300, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 03:22:21 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (fail_nth: 1) 03:22:21 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}, {}], 0x6, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:21 executing program 3: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x80000000, 0x8}) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) 03:22:21 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffff762}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3353}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x102c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x1004, 0x7, 0x1, 0x0, "ec25e0826bc97f6f97f05d757de0ccefb5a1100f3e3f9b8996be4b7baef7c41ee5db75af41356dcdd6d74df69d6a6239ad944b77e092fc140b65a60468577b724a54785dafd7dde4458ca57139059f904e078b05863e494a6cdf1f1da7db93347f7085cfe8eb8a512050448fcd38d877254a10e274503d2ab14f4c93f0e0f5c02c3941ae9ae63a1d5e81b3dd6e6338c57786213d0bda742034785e5cadc508964ec1d6c08fec7097361a8eca009720ab87a8841bf36b3dab68df145ed2805d744a176392afa9e99ca170304dab50fa164bb09688b122df8f7fced3061fe15c75dbb3173e67a89b0eb997e16801b6f45870028ee303470e660cf8ea504632a6ec39e67ed2b20252b6872536a404098f7e8b6b568fdc083cd0fbadf0f0ea56fe5260875ea0d6715419b80ddc279df1db3f203bb2d4b7ce5a4ef3cf2d56138219ce5fa41cc89304f287f28fbf713d3d725acfe4962618fed22578cb5995ec3635b77bb893cb89007fca73c66bc0404325d8b8cd8ff05f59d830b1447598191a3d259cbce25a45cb6d293e15a6ea33aecbaad35f70028d250e3740a95b93dcac1a33ee67f659c68ba0806589a734de58a9281bd5d20fa3f7680ac99935a1b54a4c7b7d196140fd71f4074f92a76f4e9af360fa4da99dac5236e5885d2bf8717e363e529a2bdddf3cc3dc116f18badc5c12e68201a8bb1208a0d7b3bd94818f44167b99efff1aa766fbd0326faafcff27d5b80d712ab72894a4560aa0985d2024e8d11acecf207fb57c63fedef2e5081f88c9372fc655f32fcf9585f0bc1e5d1241d88d8157ddde2548877e69a00606639a4e43139a9548db5e86d86c25614217a15e7faf6701ef976e6a16d641d675b826ea588cc8d20a248a1689bf411ab805610ab42d7dd026cc27af08ff3a13037c53eab9e833c3ed42df798ee41a0f42ae2016fe4cbc1fda6b0a53c3e61a94987b3c683a7a6c7c9810d60c5f84a74e10728c2998a0a4bafa2d49895a0d2903d98dc272c58efbd6903b9ba5569b25984f435b1f993cfc4383e66f95663b3b995ba944adc473d836b7535cf8546fccc680e4f361a858c238a7829fd7f141889418b0f09e241d0bf385e51264b046ce7c7d5c9b1fd07104da61113146c73aed44ae1b3a3481b15780435f44fc32d1e412c66595637c4e6e2efd8e3d882c6659bdd4526ab2db1c655a24ed8b557f68b9e638ad50d434c1e54c979b91e5ab0e112a6bd1952ccad53f440a2c68691706c72b2c740b8772b62c9e435e3e422465e7de0c944481466602349f811b1b7e35554e951c4ab38ed6b0c6c8dfc9d2084d56574db408effa9572d41ead91831f1d7b07cbce33b721ce45f57d18da4ad3cb45e792354a45f627910414d35dfbcdd0a5431d17b25f2ea8e941a1fe64dabafd8658461bed2e7e0a3f8a69911daf3ec1ce174576dd3314bbcd9ec258d3c182fba4ab1e290c0e367a676530108c687127e33dde652b6db8865d086579ec61f657b61c1770bd966d7a0eb02c97f7b9a4f2335fc3e4598ccfac8e36bd073b556c4a8cc16ed94b1865240981369e65f046c0e7e802ebcd04a1da360dc11fbebec52a65b80e0e665e465f790de13cf19c86446c314e54a2affb99f6bef9869066470aebd04bb43d43b6380c20cd12f3c333e18345f04d6dd2039d44e05ae80899841f3b5cb2306a8ec6296cf9a22665a23f2daf996fef13879f6297626c8c17a75960f4f1c0f1b88b44eaa1501a072e630a15e6fdecf440fe7373f8b7d03b8265fb08e3a8bf70026c47616bd6848177f3bfd40dc8076631ec7b3b2919f573e5e1955956679381de18ad803865ae98653346294ab41dab52a5aedb3462927999e7759a2bbdcba1d7f1fcb35cee44011e43fd1bef0560728f57d369bd92979b2d5ef5df8b8f0907921e00a7e2458a1aff8fc538100ca5613af471285db103d6755732cf550098f28af121accebcf2d3836e0594a7e215a92e36cf4a39da1f1282b8d674891a4d88882460531a391d3e83c2382c1cb236e118ba91256709ae0b9b202a8c9f58975b0048ee68f868cee63e87023e05740a02049f4fac750394330c11b050571b6a041cdd5ddea6a18fd4f52ead218b2165cc782b427188e4ae584a53c8f1f3f3913176866575a89838ec57019a515679c40a249143f82833b54e538041152c5a7d10562c82ee1047c686f604fe11612135c63900e6f376b57d89e238ff8c11ddea67f049cd3fdf4936f07467b71bdd48d57d000599e5f5fdeca9dbd941847435204ea10e6112f32724b44b6c1fc4f7d105e63aa6d9cd46a59e5ddb818b6ae32f36b26f716ed98d8dc2903fe67f160d3365c46042777fb53336df347ac5bbb1be52d2409bb1ddfb657216cc27ab0ad34cffa71558d0ee89d7405994ef0cc4ed8a8c81f97ede9ba69da714fce2e11275a144655fa2232575b9888ca403b268f6138370604bfec9ba573f86cf92551d82a66f0db41876549da0281f3a3d3899f1d7d6a30f2f644e9156f7a21c7e354c37e441fe047924aa5502814186db20d6ad09a92f98eabaaff1cb5a1af093aef0ae9b4a9098f58e19507cd3de2e5064f2022112ee527eea874390bdaceced4de589fed12a6664bcc5f7b085b85570709bc39cb9d7e9476704bb7a7f649c9aae4e4d7c9b523b1c498a2ce99a0996e1c5762c8a53e3fee8271132f43d039122abd61f00da89571e4ca33b20065c78b581aad3d8d53cb55cf6d46dfa3455223295b5c11130e22913056e7092019f75c2063699dc5491c615ffb33413f140e859281dd193ebc7766ba63b4daa741c6c2fb136120e94ce57814ff1e1688d0cfaaa98594a0cbdb1a72f9537a3d96ac23fa606df37cf2ff832156b908dbbdeace1726a554c27b8ef5da054cb58406293c2460bd4a5ce404147f2e21c1324e8bfc98819264ab80baecee89630b285fe662ba1e3060b19a0666ef5d335bbdf50c90ddb72f01368ed8a1a94ef736cf2e908ffb5de41d81b3047b1ccd9645e309cdcb9efc1c71488a7dd682c40903870c8d3e4ddb0daa9ca8cf27ebd0a5ad1f26f910d94f2279862508ce4e5db9dc7af7d203c90aebdb30968cbd2245e2cec71107bc42fd05ef3a855d5424f41ebd25aa30f2e63b60aeae260d1f08a26f89694474d0b9587fe089ec28f389fe34559d271cdc274c40b4d08455b38e44434c8103bb303ec45bf6a77d2f410cf0105241747c287bf6549179ddefe4d580d919d16f036e9eab0d92b377744500304f568ce14729bee3758dfd8a9b26d3c3cfb69ff555e75a4588076ea349fe36a1858d69bb08dc37bf01039cd286bf9ccb15187f20ccdf881be65ac7b27547ee54971d5e4ff8b07457563c7e90cfcba7ee380ca64940586350215261a1a34c1d5762f66df7122b8dac56ed0beb73fc823db315b928bb96693ce5f76f35b24e70dd75bd6a5d19de27286f548aa50a20ace6c1f2e855b6a0d897638bb8434cf2f8fea55dc722a65eb34ca94fbac803f1da954fd6651be40aadcb2038686349bee3a1452e1309ddd2ed10bb3885b82c1775fb1153a96d603ef6d4ae30c27919d7984887f54cf6cb369849719973fb4885106a36fff586c6af41d75265b487f071253c77d249fb565f9f02149b680c83d5a50b638085a0efdccc30b09ebcba0201d14788aa6dd1cc28d27da6a8e0ab98b21325cf9c063a8aa375bd43b1cf77fd09a8f03552af1b44b74ff60f635dc73596aea76d72cb490e0fe729bc18b7fd86a9d0f493bc12cf7574c9109a8e4665b6127a3f189534f9f3aabd1001026db6c86275f538eb75af9b75a4999da79165ac91abb42923b276fde7954629a5e36356b37fa42d911188d5b1feccb4f53ebcce59b08f34886794ee455acfcdf1ca38ae96b5d3a8c6d2f24a31e5bb75cce1378b258f995e64551c2ab7221f8a315d9e766a653fd79c5b8b712949e2bfeed74f364c1d7b074f1654b30e339e38ac2ed15f6d893f275c9a3689bceaa275f08bb1a7092384b5d116cecc1fa80ee29e8790f00dd3d960f0b7a27d17190cf58113127d8046148419ae2911faed3e645e261ffc95a2237801108252f6a9ca5ecd8fbf5cd29a721a16b1b289e3524d98c2dad20c45c6edfdea640262bce35ca7a9a353146a6da0ab23b168a6dfba512809218063fcc3ffbc72503dc62b69ce23ade4f476652d9b0db81c327f23919af4655a16bd9af642c18773ab37624efb82a846b33efe91b7a0c3da51e14912201f1696e208dbb12385a28f89b06be1b1bcc9dd4e2520c478e951ff9e88a36ecba2d50293760bf2f546b8c16efa41df917414e667cf23513722bfe2122c59c0bd6e683224422f3ac2d8de71ccb3765aecddf37422d32a02c9059c788e3137880aeaee63d5609aba78a2d8eae4a1a92063377846a3a87608f53d0a6e27d173fbc74db80a3cfa05d8ce19d100695faa445ec7e8496e951d0fe9137d97e72194cdfc3003458030720f12545402081218e566e8f0cf5ea7b1413a6e838b53ef2efda3eb6463a554f5b1e64b18f57d81894d610a08b4ba428712839bc2aceae14be8ad7ff315d20e2f5562edbcd350f9bf1990fe422c9fbd5c3253b58cc071ab1e8bfb044a95dd5d0fe32573b3834fd6aa59acae658c5d04731ac9b8ba9c73347d8bf2b42a8095a0ab25fd646ef18b043d3cfc73443aaf3511b02c29093fbf469f98093757784d1b4ec78ec84448c7c42b1675a2ad24f08df2be7f5b306350020e4618dea82c12c988fdab9fe88eb2b016e2fdc7cc15eefaf02408dcf7f515abc3b8ba949506cd1e1da5d0918895ef411b56aba6150730791770e01d3035c37793488d0af6c998dc2e4c3745bda421a40c4743fccbb4fc895406c4e36b12ce17ba27c7f56081cf6c8b8ab23b2626086af83bf3250e86d135ab0a45fff93217687eb7b1bf2028a15ff4aa9a94bc450fd18b16476b0fa262b498a16f799f6f5d444c0cb263c92438e5843a303e299f333e9e7b3394b79dba37bab09e49252c3a1f80fb81a5dfe5e049d872c74c18f862ae9e3baf90992ef6face3623b570a170ae95c83161dd5af84a2b6481a39ca46721858b1aa18e0aa73bacf67842a2a62a00d64b359c498f2ddc3f264411daba23cbf3bff2e2abe651438e01e70d8f7717661ee295d2ca6f9bfafdf57ac19e56ff677b553ccf8b0cd5f06f44d890739ab23901c8b503d839496fb3da59be8efce939c27026707f299cc2dee751c3be3bd5592c1732325091258733dca9adde5fb477482d6f404c143a356570b7cca94e077c56cf79bb3f3b70d71e692417006291b1bcdd7faa089ecdce6fddce083c936694af87464ab08fd2e4c3aaf5c38ba7717629b2e5b33327cbea36bea8b3c97d7e623c326698086cf2afe9a0fbb74e92bdb36cf1f59a5a9a28776c5c0e99f8f3d9ae973bbba2a67b2d26502123d088d19b3fc836c6838e7d08447c8f2a1e741e5f85bd709f55375b57b72ed27a3bd5f27cc46a82f99b18a683a0e708defebe5dee9147e6742d633186fc698b76460f1a8b54a31b55ea1d7994bdab1a1e73f15dad8eff749c8447c82814c7ee1d1cd94b6eed4f777b5238d8c74c2e23258a21eefee77fdb4eceac91e325b07a773a5260ebfc4c29eefe584f9c15bb4ca9a1a2e3fb883002b20457092247eb36024052889f22d2f2659eb27fb48857fe86545cd3da250a39d87663a16aec0a97137bbc5e4772ebf374120fbd1936eb989e50d649cf3badf1a85644f2944774e8f9dee9d1d876ae2f67652ed9a2adba2f90e4e9560b2c6b1ea125b30bea1d11f6f"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}]}, @NFT_MSG_DELFLOWTABLE={0x1d8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}]}], {0x14}}, 0x13f8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000001e40)=0x9) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:21 executing program 3: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) [ 1152.803835][T10409] FAULT_INJECTION: forcing a failure. [ 1152.803835][T10409] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.844977][T10409] CPU: 0 PID: 10409 Comm: syz-executor.2 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1152.855503][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1152.865564][T10409] Call Trace: [ 1152.868842][T10409] [ 1152.871771][T10409] dump_stack_lvl+0xcd/0x134 [ 1152.876549][T10409] should_fail.cold+0x5/0xa [ 1152.881061][T10409] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1152.886772][T10409] should_failslab+0x5/0x10 [ 1152.891464][T10409] __kmalloc+0x72/0x450 [ 1152.895618][T10409] tomoyo_realpath_from_path+0xc3/0x620 [ 1152.901153][T10409] ? tomoyo_profile+0x42/0x50 [ 1152.905826][T10409] tomoyo_path_number_perm+0x1d5/0x590 [ 1152.911272][T10409] ? tomoyo_path_number_perm+0x18d/0x590 [ 1152.916895][T10409] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1152.922694][T10409] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1152.928692][T10409] ? __context_tracking_exit+0xb8/0xe0 [ 1152.934148][T10409] ? __fget_files+0x28c/0x470 [ 1152.938823][T10409] security_file_ioctl+0x50/0xb0 [ 1152.943757][T10409] __x64_sys_ioctl+0xb3/0x200 [ 1152.948433][T10409] do_syscall_64+0x35/0xb0 [ 1152.952842][T10409] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1152.958989][T10409] RIP: 0033:0x7fd08b493049 [ 1152.963397][T10409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1152.983011][T10409] RSP: 002b:00007fd089e08168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:22:22 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x80}], 0x5, &(0x7f0000000100), &(0x7f0000000140), 0x8) [ 1152.991418][T10409] RAX: ffffffffffffffda RBX: 00007fd08b5a5f60 RCX: 00007fd08b493049 [ 1152.999380][T10409] RDX: 0000000020000000 RSI: 0000000040046201 RDI: 0000000000000004 [ 1153.007337][T10409] RBP: 00007fd089e081d0 R08: 0000000000000000 R09: 0000000000000000 [ 1153.015296][T10409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.023501][T10409] R13: 00007ffccb43955f R14: 00007fd089e08300 R15: 0000000000022000 [ 1153.031490][T10409] 03:22:22 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) (fail_nth: 1) 03:22:22 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {}, {0xffffffffffffffff, 0x200}], 0x4, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:22 executing program 3: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) [ 1153.112355][T10420] FAULT_INJECTION: forcing a failure. [ 1153.112355][T10420] name failslab, interval 1, probability 0, space 0, times 0 03:22:22 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffff762}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3353}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x102c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x1004, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}]}, @NFT_MSG_DELFLOWTABLE={0x1d8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}]}], {0x14}}, 0x13f8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') [ 1153.210278][T10420] CPU: 1 PID: 10420 Comm: syz-executor.0 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1153.220855][T10420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1153.230937][T10420] Call Trace: [ 1153.234227][T10420] [ 1153.237163][T10420] dump_stack_lvl+0xcd/0x134 [ 1153.241774][T10420] should_fail.cold+0x5/0xa [ 1153.246298][T10420] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1153.252046][T10420] should_failslab+0x5/0x10 [ 1153.256570][T10420] __kmalloc+0x72/0x450 [ 1153.260753][T10420] tomoyo_realpath_from_path+0xc3/0x620 [ 1153.266322][T10420] ? tomoyo_profile+0x42/0x50 [ 1153.271028][T10420] tomoyo_path_number_perm+0x1d5/0x590 [ 1153.276506][T10420] ? tomoyo_path_number_perm+0x18d/0x590 [ 1153.282163][T10420] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1153.287994][T10420] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1153.294031][T10420] ? __context_tracking_exit+0xb8/0xe0 [ 1153.299522][T10420] ? __fget_files+0x28c/0x470 [ 1153.304231][T10420] security_file_ioctl+0x50/0xb0 [ 1153.309201][T10420] __x64_sys_ioctl+0xb3/0x200 [ 1153.313912][T10420] do_syscall_64+0x35/0xb0 [ 1153.318360][T10420] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1153.324281][T10420] RIP: 0033:0x7f640c785049 [ 1153.328713][T10420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1153.348446][T10420] RSP: 002b:00007f640b0fa168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1153.356889][T10420] RAX: ffffffffffffffda RBX: 00007f640c897f60 RCX: 00007f640c785049 [ 1153.364986][T10420] RDX: 0000000020f1dff8 RSI: 000000004008af30 RDI: 0000000000000003 [ 1153.372988][T10420] RBP: 00007f640b0fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1153.380989][T10420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.389096][T10420] R13: 00007ffeca0622df R14: 00007f640b0fa300 R15: 0000000000022000 [ 1153.397115][T10420] [ 1153.423132][T10420] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1153.456271][T10409] ERROR: Out of memory at tomoyo_realpath_from_path. 03:22:22 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:22 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}, {}], 0x3, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:22 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) 03:22:22 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) (fail_nth: 2) 03:22:22 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (fail_nth: 2) 03:22:22 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffff762}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3353}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x102c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x1004, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}]}, @NFT_MSG_DELFLOWTABLE={0x1d8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}]}], {0x14}}, 0x13f8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:22 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}, {r0, 0x4000}], 0x2, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:22 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) [ 1153.798332][T10439] FAULT_INJECTION: forcing a failure. [ 1153.798332][T10439] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.813168][T10435] FAULT_INJECTION: forcing a failure. [ 1153.813168][T10435] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.879107][T10439] CPU: 1 PID: 10439 Comm: syz-executor.2 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1153.889676][T10439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1153.899744][T10439] Call Trace: [ 1153.903024][T10439] [ 1153.905950][T10439] dump_stack_lvl+0xcd/0x134 [ 1153.910555][T10439] should_fail.cold+0x5/0xa [ 1153.915100][T10439] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1153.920483][T10439] should_failslab+0x5/0x10 [ 1153.924996][T10439] __kmalloc+0x72/0x450 [ 1153.929202][T10439] ? dma_buf_fs_init_context+0x70/0x70 [ 1153.934703][T10439] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1153.939917][T10439] tomoyo_encode+0x28/0x50 [ 1153.944336][T10439] tomoyo_realpath_from_path+0x186/0x620 [ 1153.950002][T10439] ? tomoyo_profile+0x42/0x50 [ 1153.954718][T10439] tomoyo_path_number_perm+0x1d5/0x590 [ 1153.960285][T10439] ? tomoyo_path_number_perm+0x18d/0x590 [ 1153.965955][T10439] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1153.971947][T10439] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1153.977981][T10439] ? __context_tracking_exit+0xb8/0xe0 [ 1153.983459][T10439] ? __fget_files+0x28c/0x470 [ 1153.988236][T10439] security_file_ioctl+0x50/0xb0 [ 1153.993191][T10439] __x64_sys_ioctl+0xb3/0x200 [ 1153.997883][T10439] do_syscall_64+0x35/0xb0 [ 1154.002307][T10439] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1154.008208][T10439] RIP: 0033:0x7fd08b493049 [ 1154.012619][T10439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1154.032247][T10439] RSP: 002b:00007fd089e08168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1154.040690][T10439] RAX: ffffffffffffffda RBX: 00007fd08b5a5f60 RCX: 00007fd08b493049 [ 1154.048944][T10439] RDX: 0000000020000000 RSI: 0000000040046201 RDI: 0000000000000004 [ 1154.056940][T10439] RBP: 00007fd089e081d0 R08: 0000000000000000 R09: 0000000000000000 [ 1154.064936][T10439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 03:22:23 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffff762}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3353}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x102c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x1004, 0x7, 0x1, 0x0, "ec25e0826bc97f6f97f05d757de0ccefb5a1100f3e3f9b8996be4b7baef7c41ee5db75af41356dcdd6d74df69d6a6239ad944b77e092fc140b65a60468577b724a54785dafd7dde4458ca57139059f904e078b05863e494a6cdf1f1da7db93347f7085cfe8eb8a512050448fcd38d877254a10e274503d2ab14f4c93f0e0f5c02c3941ae9ae63a1d5e81b3dd6e6338c57786213d0bda742034785e5cadc508964ec1d6c08fec7097361a8eca009720ab87a8841bf36b3dab68df145ed2805d744a176392afa9e99ca170304dab50fa164bb09688b122df8f7fced3061fe15c75dbb3173e67a89b0eb997e16801b6f45870028ee303470e660cf8ea504632a6ec39e67ed2b20252b6872536a404098f7e8b6b568fdc083cd0fbadf0f0ea56fe5260875ea0d6715419b80ddc279df1db3f203bb2d4b7ce5a4ef3cf2d56138219ce5fa41cc89304f287f28fbf713d3d725acfe4962618fed22578cb5995ec3635b77bb893cb89007fca73c66bc0404325d8b8cd8ff05f59d830b1447598191a3d259cbce25a45cb6d293e15a6ea33aecbaad35f70028d250e3740a95b93dcac1a33ee67f659c68ba0806589a734de58a9281bd5d20fa3f7680ac99935a1b54a4c7b7d196140fd71f4074f92a76f4e9af360fa4da99dac5236e5885d2bf8717e363e529a2bdddf3cc3dc116f18badc5c12e68201a8bb1208a0d7b3bd94818f44167b99efff1aa766fbd0326faafcff27d5b80d712ab72894a4560aa0985d2024e8d11acecf207fb57c63fedef2e5081f88c9372fc655f32fcf9585f0bc1e5d1241d88d8157ddde2548877e69a00606639a4e43139a9548db5e86d86c25614217a15e7faf6701ef976e6a16d641d675b826ea588cc8d20a248a1689bf411ab805610ab42d7dd026cc27af08ff3a13037c53eab9e833c3ed42df798ee41a0f42ae2016fe4cbc1fda6b0a53c3e61a94987b3c683a7a6c7c9810d60c5f84a74e10728c2998a0a4bafa2d49895a0d2903d98dc272c58efbd6903b9ba5569b25984f435b1f993cfc4383e66f95663b3b995ba944adc473d836b7535cf8546fccc680e4f361a858c238a7829fd7f141889418b0f09e241d0bf385e51264b046ce7c7d5c9b1fd07104da61113146c73aed44ae1b3a3481b15780435f44fc32d1e412c66595637c4e6e2efd8e3d882c6659bdd4526ab2db1c655a24ed8b557f68b9e638ad50d434c1e54c979b91e5ab0e112a6bd1952ccad53f440a2c68691706c72b2c740b8772b62c9e435e3e422465e7de0c944481466602349f811b1b7e35554e951c4ab38ed6b0c6c8dfc9d2084d56574db408effa9572d41ead91831f1d7b07cbce33b721ce45f57d18da4ad3cb45e792354a45f627910414d35dfbcdd0a5431d17b25f2ea8e941a1fe64dabafd8658461bed2e7e0a3f8a69911daf3ec1ce174576dd3314bbcd9ec258d3c182fba4ab1e290c0e367a676530108c687127e33dde652b6db8865d086579ec61f657b61c1770bd966d7a0eb02c97f7b9a4f2335fc3e4598ccfac8e36bd073b556c4a8cc16ed94b1865240981369e65f046c0e7e802ebcd04a1da360dc11fbebec52a65b80e0e665e465f790de13cf19c86446c314e54a2affb99f6bef9869066470aebd04bb43d43b6380c20cd12f3c333e18345f04d6dd2039d44e05ae80899841f3b5cb2306a8ec6296cf9a22665a23f2daf996fef13879f6297626c8c17a75960f4f1c0f1b88b44eaa1501a072e630a15e6fdecf440fe7373f8b7d03b8265fb08e3a8bf70026c47616bd6848177f3bfd40dc8076631ec7b3b2919f573e5e1955956679381de18ad803865ae98653346294ab41dab52a5aedb3462927999e7759a2bbdcba1d7f1fcb35cee44011e43fd1bef0560728f57d369bd92979b2d5ef5df8b8f0907921e00a7e2458a1aff8fc538100ca5613af471285db103d6755732cf550098f28af121accebcf2d3836e0594a7e215a92e36cf4a39da1f1282b8d674891a4d88882460531a391d3e83c2382c1cb236e118ba91256709ae0b9b202a8c9f58975b0048ee68f868cee63e87023e05740a02049f4fac750394330c11b050571b6a041cdd5ddea6a18fd4f52ead218b2165cc782b427188e4ae584a53c8f1f3f3913176866575a89838ec57019a515679c40a249143f82833b54e538041152c5a7d10562c82ee1047c686f604fe11612135c63900e6f376b57d89e238ff8c11ddea67f049cd3fdf4936f07467b71bdd48d57d000599e5f5fdeca9dbd941847435204ea10e6112f32724b44b6c1fc4f7d105e63aa6d9cd46a59e5ddb818b6ae32f36b26f716ed98d8dc2903fe67f160d3365c46042777fb53336df347ac5bbb1be52d2409bb1ddfb657216cc27ab0ad34cffa71558d0ee89d7405994ef0cc4ed8a8c81f97ede9ba69da714fce2e11275a144655fa2232575b9888ca403b268f6138370604bfec9ba573f86cf92551d82a66f0db41876549da0281f3a3d3899f1d7d6a30f2f644e9156f7a21c7e354c37e441fe047924aa5502814186db20d6ad09a92f98eabaaff1cb5a1af093aef0ae9b4a9098f58e19507cd3de2e5064f2022112ee527eea874390bdaceced4de589fed12a6664bcc5f7b085b85570709bc39cb9d7e9476704bb7a7f649c9aae4e4d7c9b523b1c498a2ce99a0996e1c5762c8a53e3fee8271132f43d039122abd61f00da89571e4ca33b20065c78b581aad3d8d53cb55cf6d46dfa3455223295b5c11130e22913056e7092019f75c2063699dc5491c615ffb33413f140e859281dd193ebc7766ba63b4daa741c6c2fb136120e94ce57814ff1e1688d0cfaaa98594a0cbdb1a72f9537a3d96ac23fa606df37cf2ff832156b908dbbdeace1726a554c27b8ef5da054cb58406293c2460bd4a5ce404147f2e21c1324e8bfc98819264ab80baecee89630b285fe662ba1e3060b19a0666ef5d335bbdf50c90ddb72f01368ed8a1a94ef736cf2e908ffb5de41d81b3047b1ccd9645e309cdcb9efc1c71488a7dd682c40903870c8d3e4ddb0daa9ca8cf27ebd0a5ad1f26f910d94f2279862508ce4e5db9dc7af7d203c90aebdb30968cbd2245e2cec71107bc42fd05ef3a855d5424f41ebd25aa30f2e63b60aeae260d1f08a26f89694474d0b9587fe089ec28f389fe34559d271cdc274c40b4d08455b38e44434c8103bb303ec45bf6a77d2f410cf0105241747c287bf6549179ddefe4d580d919d16f036e9eab0d92b377744500304f568ce14729bee3758dfd8a9b26d3c3cfb69ff555e75a4588076ea349fe36a1858d69bb08dc37bf01039cd286bf9ccb15187f20ccdf881be65ac7b27547ee54971d5e4ff8b07457563c7e90cfcba7ee380ca64940586350215261a1a34c1d5762f66df7122b8dac56ed0beb73fc823db315b928bb96693ce5f76f35b24e70dd75bd6a5d19de27286f548aa50a20ace6c1f2e855b6a0d897638bb8434cf2f8fea55dc722a65eb34ca94fbac803f1da954fd6651be40aadcb2038686349bee3a1452e1309ddd2ed10bb3885b82c1775fb1153a96d603ef6d4ae30c27919d7984887f54cf6cb369849719973fb4885106a36fff586c6af41d75265b487f071253c77d249fb565f9f02149b680c83d5a50b638085a0efdccc30b09ebcba0201d14788aa6dd1cc28d27da6a8e0ab98b21325cf9c063a8aa375bd43b1cf77fd09a8f03552af1b44b74ff60f635dc73596aea76d72cb490e0fe729bc18b7fd86a9d0f493bc12cf7574c9109a8e4665b6127a3f189534f9f3aabd1001026db6c86275f538eb75af9b75a4999da79165ac91abb42923b276fde7954629a5e36356b37fa42d911188d5b1feccb4f53ebcce59b08f34886794ee455acfcdf1ca38ae96b5d3a8c6d2f24a31e5bb75cce1378b258f995e64551c2ab7221f8a315d9e766a653fd79c5b8b712949e2bfeed74f364c1d7b074f1654b30e339e38ac2ed15f6d893f275c9a3689bceaa275f08bb1a7092384b5d116cecc1fa80ee29e8790f00dd3d960f0b7a27d17190cf58113127d8046148419ae2911faed3e645e261ffc95a2237801108252f6a9ca5ecd8fbf5cd29a721a16b1b289e3524d98c2dad20c45c6edfdea640262bce35ca7a9a353146a6da0ab23b168a6dfba512809218063fcc3ffbc72503dc62b69ce23ade4f476652d9b0db81c327f23919af4655a16bd9af642c18773ab37624efb82a846b33efe91b7a0c3da51e14912201f1696e208dbb12385a28f89b06be1b1bcc9dd4e2520c478e951ff9e88a36ecba2d50293760bf2f546b8c16efa41df917414e667cf23513722bfe2122c59c0bd6e683224422f3ac2d8de71ccb3765aecddf37422d32a02c9059c788e3137880aeaee63d5609aba78a2d8eae4a1a92063377846a3a87608f53d0a6e27d173fbc74db80a3cfa05d8ce19d100695faa445ec7e8496e951d0fe9137d97e72194cdfc3003458030720f12545402081218e566e8f0cf5ea7b1413a6e838b53ef2efda3eb6463a554f5b1e64b18f57d81894d610a08b4ba428712839bc2aceae14be8ad7ff315d20e2f5562edbcd350f9bf1990fe422c9fbd5c3253b58cc071ab1e8bfb044a95dd5d0fe32573b3834fd6aa59acae658c5d04731ac9b8ba9c73347d8bf2b42a8095a0ab25fd646ef18b043d3cfc73443aaf3511b02c29093fbf469f98093757784d1b4ec78ec84448c7c42b1675a2ad24f08df2be7f5b306350020e4618dea82c12c988fdab9fe88eb2b016e2fdc7cc15eefaf02408dcf7f515abc3b8ba949506cd1e1da5d0918895ef411b56aba6150730791770e01d3035c37793488d0af6c998dc2e4c3745bda421a40c4743fccbb4fc895406c4e36b12ce17ba27c7f56081cf6c8b8ab23b2626086af83bf3250e86d135ab0a45fff93217687eb7b1bf2028a15ff4aa9a94bc450fd18b16476b0fa262b498a16f799f6f5d444c0cb263c92438e5843a303e299f333e9e7b3394b79dba37bab09e49252c3a1f80fb81a5dfe5e049d872c74c18f862ae9e3baf90992ef6face3623b570a170ae95c83161dd5af84a2b6481a39ca46721858b1aa18e0aa73bacf67842a2a62a00d64b359c498f2ddc3f264411daba23cbf3bff2e2abe651438e01e70d8f7717661ee295d2ca6f9bfafdf57ac19e56ff677b553ccf8b0cd5f06f44d890739ab23901c8b503d839496fb3da59be8efce939c27026707f299cc2dee751c3be3bd5592c1732325091258733dca9adde5fb477482d6f404c143a356570b7cca94e077c56cf79bb3f3b70d71e692417006291b1bcdd7faa089ecdce6fddce083c936694af87464ab08fd2e4c3aaf5c38ba7717629b2e5b33327cbea36bea8b3c97d7e623c326698086cf2afe9a0fbb74e92bdb36cf1f59a5a9a28776c5c0e99f8f3d9ae973bbba2a67b2d26502123d088d19b3fc836c6838e7d08447c8f2a1e741e5f85bd709f55375b57b72ed27a3bd5f27cc46a82f99b18a683a0e708defebe5dee9147e6742d633186fc698b76460f1a8b54a31b55ea1d7994bdab1a1e73f15dad8eff749c8447c82814c7ee1d1cd94b6eed4f777b5238d8c74c2e23258a21eefee77fdb4eceac91e325b07a773a5260ebfc4c29eefe584f9c15bb4ca9a1a2e3fb883002b20457092247eb36024052889f22d2f2659eb27fb48857fe86545cd3da250a39d87663a16aec0a97137bbc5e4772ebf374120fbd1936eb989e50d649cf3badf1a85644f2944774e8f9dee9d1d876ae2f67652ed9a2adba2f90e4e9560b2c6b1ea125b30bea1d11f6f"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}]}, @NFT_MSG_DELFLOWTABLE={0x1d8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}]}], {0x14}}, 0x13f8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') [ 1154.072921][T10439] R13: 00007ffccb43955f R14: 00007fd089e08300 R15: 0000000000022000 [ 1154.080930][T10439] [ 1154.091381][T10439] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1154.136231][T10435] CPU: 1 PID: 10435 Comm: syz-executor.0 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1154.146792][T10435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1154.156860][T10435] Call Trace: [ 1154.160141][T10435] [ 1154.163071][T10435] dump_stack_lvl+0xcd/0x134 [ 1154.167680][T10435] should_fail.cold+0x5/0xa [ 1154.172212][T10435] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1154.177605][T10435] should_failslab+0x5/0x10 [ 1154.182125][T10435] __kmalloc+0x72/0x450 [ 1154.186300][T10435] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1154.191518][T10435] tomoyo_encode+0x28/0x50 [ 1154.195944][T10435] tomoyo_realpath_from_path+0x186/0x620 [ 1154.201583][T10435] tomoyo_path_number_perm+0x1d5/0x590 [ 1154.207042][T10435] ? tomoyo_path_number_perm+0x18d/0x590 [ 1154.212666][T10435] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1154.218460][T10435] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1154.224462][T10435] ? __context_tracking_exit+0xb8/0xe0 [ 1154.229915][T10435] ? __fget_files+0x28c/0x470 [ 1154.234593][T10435] security_file_ioctl+0x50/0xb0 [ 1154.239528][T10435] __x64_sys_ioctl+0xb3/0x200 [ 1154.244197][T10435] do_syscall_64+0x35/0xb0 [ 1154.248603][T10435] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1154.254484][T10435] RIP: 0033:0x7f640c785049 [ 1154.258887][T10435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1154.278492][T10435] RSP: 002b:00007f640b0fa168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1154.286915][T10435] RAX: ffffffffffffffda RBX: 00007f640c897f60 RCX: 00007f640c785049 [ 1154.294883][T10435] RDX: 0000000020f1dff8 RSI: 000000004008af30 RDI: 0000000000000003 [ 1154.302860][T10435] RBP: 00007f640b0fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1154.310822][T10435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1154.318793][T10435] R13: 00007ffeca0622df R14: 00007f640b0fa300 R15: 0000000000022000 [ 1154.326769][T10435] 03:22:23 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:23 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) 03:22:23 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x8) [ 1154.471243][T10442] syz-executor.5: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1154.565589][T10442] CPU: 1 PID: 10442 Comm: syz-executor.5 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1154.576165][T10442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1154.586247][T10442] Call Trace: [ 1154.589534][T10442] [ 1154.592557][T10442] dump_stack_lvl+0xcd/0x134 [ 1154.597166][T10442] warn_alloc.cold+0x9b/0x189 [ 1154.601871][T10442] ? zone_watermark_ok_safe+0x290/0x290 [ 1154.607441][T10442] ? __kmalloc_node+0x62/0x4a0 [ 1154.612247][T10442] ? __vmalloc_node_range+0x7bf/0x1060 [ 1154.617738][T10442] __vmalloc_node_range+0xe18/0x1060 [ 1154.623081][T10442] ? vfree_atomic+0xe0/0xe0 [ 1154.627602][T10442] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1154.633167][T10442] ? create_io_thread+0xb6/0xf0 [ 1154.638167][T10442] copy_process+0x926/0x7250 [ 1154.642772][T10442] ? create_io_thread+0xb6/0xf0 [ 1154.647643][T10442] ? kasan_save_stack+0x2e/0x40 [ 1154.652512][T10442] ? __kasan_kmalloc+0xa9/0xd0 [ 1154.657734][T10442] ? create_io_worker+0x108/0x630 [ 1154.662770][T10442] ? task_work_run+0xdd/0x1a0 [ 1154.667467][T10442] ? __cleanup_sighand+0xb0/0xb0 [ 1154.672417][T10442] ? find_held_lock+0x2d/0x110 [ 1154.676166][T10435] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1154.677176][T10442] ? create_io_worker+0x1e3/0x630 [ 1154.677210][T10442] ? io_wqe_dec_running+0x220/0x220 [ 1154.694058][T10442] create_io_thread+0xb6/0xf0 [ 1154.698757][T10442] ? copy_init_mm+0x20/0x20 [ 1154.703272][T10442] ? io_wqe_dec_running+0x220/0x220 [ 1154.708471][T10442] ? lockdep_init_map_type+0x21a/0x7f0 [ 1154.713939][T10442] create_io_worker+0x25c/0x630 [ 1154.718803][T10442] create_worker_cb+0x202/0x270 [ 1154.723690][T10442] task_work_run+0xdd/0x1a0 [ 1154.728186][T10442] exit_to_user_mode_prepare+0x256/0x290 [ 1154.733823][T10442] syscall_exit_to_user_mode+0x19/0x60 [ 1154.739288][T10442] do_syscall_64+0x42/0xb0 [ 1154.743698][T10442] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1154.749583][T10442] RIP: 0033:0x7f7bfe356049 [ 1154.753988][T10442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1154.773593][T10442] RSP: 002b:00007f7bfcccb218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1154.782007][T10442] RAX: fffffffffffffe00 RBX: 00007f7bfe468f68 RCX: 00007f7bfe356049 [ 1154.789977][T10442] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7bfe468f68 [ 1154.797952][T10442] RBP: 00007f7bfe468f60 R08: 0000000000000000 R09: 0000000000000000 [ 1154.805960][T10442] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7bfe468f6c [ 1154.813944][T10442] R13: 00007fff27b5cc5f R14: 00007f7bfcccb300 R15: 0000000000022000 [ 1154.821955][T10442] [ 1154.834926][T10442] Mem-Info: [ 1154.838511][T10442] active_anon:978 inactive_anon:131042 isolated_anon:0 [ 1154.838511][T10442] active_file:6329 inactive_file:7410 isolated_file:0 [ 1154.838511][T10442] unevictable:768 dirty:34 writeback:0 [ 1154.838511][T10442] slab_reclaimable:20239 slab_unreclaimable:105916 [ 1154.838511][T10442] mapped:28501 shmem:2904 pagetables:1042 bounce:0 [ 1154.838511][T10442] kernel_misc_reclaimable:0 [ 1154.838511][T10442] free:1324923 free_pcp:11102 free_cma:0 [ 1154.881859][T10442] Node 0 active_anon:3904kB inactive_anon:523136kB active_file:25244kB inactive_file:29640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114004kB dirty:132kB writeback:0kB shmem:9140kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB kernel_stack:10840kB pagetables:4164kB all_unreclaimable? no [ 1154.913675][T10442] Node 1 active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 1154.947268][T10442] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1154.974930][T10442] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 1154.980831][T10442] Node 0 DMA32 free:1331052kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:3904kB inactive_anon:522936kB active_file:25244kB inactive_file:29640kB unevictable:1536kB writepending:132kB present:3129332kB managed:2716640kB mlocked:0kB bounce:0kB free_pcp:44216kB local_pcp:22240kB free_cma:0kB [ 1155.016226][T10442] lowmem_reserve[]: 0 0 0 0 0 [ 1155.021410][T10442] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1155.055595][T10442] lowmem_reserve[]: 0 0 0 0 0 [ 1155.061350][T10442] Node 1 Normal free:3953596kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1155.090858][T10442] lowmem_reserve[]: 0 0 0 0 0 [ 1155.095622][T10442] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1155.108546][T10442] Node 0 DMA32: 3378*4kB (UME) 1375*8kB (UME) 2229*16kB (UME) 738*32kB (UME) 358*64kB (UME) 188*128kB (UME) 105*256kB (UME) 43*512kB (ME) 8*1024kB (UME) 4*2048kB (ME) 277*4096kB (UM) = 1330640kB [ 1155.128610][T10442] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1155.140229][T10442] Node 1 Normal: 159*4kB (UME) 22*8kB (UE) 27*16kB (UE) 175*32kB (UE) 80*64kB (UME) 36*128kB (UME) 11*256kB (U) 0*512kB 0*1024kB 1*2048kB (U) 960*4096kB (ME) = 3953596kB [ 1155.159173][T10442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1155.169460][T10442] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1155.178990][T10442] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1155.188586][T10442] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1155.198139][T10442] 16631 total pagecache pages [ 1155.202812][T10442] 0 pages in swap cache [ 1155.207029][T10442] Swap cache stats: add 0, delete 0, find 0/0 [ 1155.213090][T10442] Free swap = 0kB 03:22:24 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:24 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffff762}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3353}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x102c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x1004, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}]}, @NFT_MSG_DELFLOWTABLE={0x1d8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}]}], {0x14}}, 0x13f8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:24 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:24 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (fail_nth: 3) 03:22:24 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) 03:22:24 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 1155.217032][T10442] Total swap = 0kB [ 1155.220742][T10442] 2097051 pages RAM [ 1155.224923][T10442] 0 pages HighMem/MovableOnly [ 1155.229711][T10442] 384546 pages reserved [ 1155.233851][T10442] 0 pages cma reserved 03:22:24 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:24 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r0, 0x5451) [ 1155.258568][T10464] FAULT_INJECTION: forcing a failure. [ 1155.258568][T10464] name failslab, interval 1, probability 0, space 0, times 0 03:22:24 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') [ 1155.346253][T10464] CPU: 0 PID: 10464 Comm: syz-executor.2 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1155.356826][T10464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1155.367003][T10464] Call Trace: [ 1155.370281][T10464] [ 1155.373210][T10464] dump_stack_lvl+0xcd/0x134 [ 1155.377812][T10464] should_fail.cold+0x5/0xa [ 1155.382329][T10464] should_failslab+0x5/0x10 [ 1155.386852][T10464] __kmalloc_track_caller+0x79/0x430 [ 1155.392494][T10464] ? strndup_user+0x70/0xe0 [ 1155.397022][T10464] memdup_user+0x22/0xd0 [ 1155.401274][T10464] strndup_user+0x70/0xe0 [ 1155.405603][T10464] dma_buf_ioctl+0x1c2/0x2b0 [ 1155.410273][T10464] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 1155.416080][T10464] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1155.422404][T10464] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 1155.428125][T10464] __x64_sys_ioctl+0x193/0x200 [ 1155.432903][T10464] do_syscall_64+0x35/0xb0 [ 1155.437325][T10464] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1155.443216][T10464] RIP: 0033:0x7fd08b493049 [ 1155.447625][T10464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1155.467240][T10464] RSP: 002b:00007fd089e08168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1155.475651][T10464] RAX: ffffffffffffffda RBX: 00007fd08b5a5f60 RCX: 00007fd08b493049 [ 1155.483616][T10464] RDX: 0000000020000000 RSI: 0000000040046201 RDI: 0000000000000004 03:22:24 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r0, 0x5451) 03:22:24 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x8001}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) [ 1155.491580][T10464] RBP: 00007fd089e081d0 R08: 0000000000000000 R09: 0000000000000000 [ 1155.499541][T10464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.507498][T10464] R13: 00007ffccb43955f R14: 00007fd089e08300 R15: 0000000000022000 [ 1155.515473][T10464] 03:22:24 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x2, &(0x7f0000f1dff8)={0x0, r1}) 03:22:24 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:24 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x8001}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:24 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:24 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (fail_nth: 4) 03:22:24 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r0, 0x5451) 03:22:24 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x10, &(0x7f0000f1dff8)={0x0, r1}) 03:22:24 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x541b, &(0x7f0000f1dff8)={0x0, r1}) 03:22:24 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') [ 1155.830853][T10497] FAULT_INJECTION: forcing a failure. [ 1155.830853][T10497] name fail_usercopy, interval 1, probability 0, space 0, times 0 03:22:25 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x8001}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:25 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) [ 1155.926155][T10497] CPU: 1 PID: 10497 Comm: syz-executor.2 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1155.936721][T10497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1155.946792][T10497] Call Trace: [ 1155.950075][T10497] [ 1155.953006][T10497] dump_stack_lvl+0xcd/0x134 [ 1155.957614][T10497] should_fail.cold+0x5/0xa [ 1155.962136][T10497] _copy_from_user+0x2c/0x180 [ 1155.966829][T10497] memdup_user+0x65/0xd0 [ 1155.971082][T10497] strndup_user+0x70/0xe0 [ 1155.975404][T10497] dma_buf_ioctl+0x1c2/0x2b0 [ 1155.979987][T10497] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 1155.985719][T10497] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1155.991978][T10497] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 1155.997723][T10497] __x64_sys_ioctl+0x193/0x200 [ 1156.002517][T10497] do_syscall_64+0x35/0xb0 [ 1156.006964][T10497] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1156.012878][T10497] RIP: 0033:0x7fd08b493049 [ 1156.017310][T10497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1156.037338][T10497] RSP: 002b:00007fd089e08168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1156.045772][T10497] RAX: ffffffffffffffda RBX: 00007fd08b5a5f60 RCX: 00007fd08b493049 [ 1156.053746][T10497] RDX: 0000000020000000 RSI: 0000000040046201 RDI: 0000000000000004 [ 1156.061714][T10497] RBP: 00007fd089e081d0 R08: 0000000000000000 R09: 0000000000000000 03:22:25 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) 03:22:25 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:25 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:25 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (fail_nth: 5) [ 1156.069686][T10497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.078095][T10497] R13: 00007ffccb43955f R14: 00007fd089e08300 R15: 0000000000022000 [ 1156.086108][T10497] 03:22:25 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:25 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x5421, &(0x7f0000f1dff8)={0x0, r1}) 03:22:25 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:25 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) 03:22:25 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) [ 1156.218107][T10522] FAULT_INJECTION: forcing a failure. [ 1156.218107][T10522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.257844][T10522] CPU: 1 PID: 10522 Comm: syz-executor.2 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1156.268528][T10522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1156.278601][T10522] Call Trace: [ 1156.281885][T10522] [ 1156.284818][T10522] dump_stack_lvl+0xcd/0x134 [ 1156.289430][T10522] should_fail.cold+0x5/0xa [ 1156.293954][T10522] _copy_from_user+0x2c/0x180 [ 1156.298653][T10522] memdup_user+0x65/0xd0 [ 1156.302913][T10522] strndup_user+0x70/0xe0 [ 1156.307359][T10522] dma_buf_ioctl+0x1c2/0x2b0 [ 1156.311964][T10522] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 1156.317707][T10522] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1156.323988][T10522] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 1156.329735][T10522] __x64_sys_ioctl+0x193/0x200 [ 1156.334524][T10522] do_syscall_64+0x35/0xb0 [ 1156.338968][T10522] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1156.344890][T10522] RIP: 0033:0x7fd08b493049 [ 1156.349672][T10522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1156.369300][T10522] RSP: 002b:00007fd089e08168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1156.377735][T10522] RAX: ffffffffffffffda RBX: 00007fd08b5a5f60 RCX: 00007fd08b493049 [ 1156.385725][T10522] RDX: 0000000020000000 RSI: 0000000040046201 RDI: 0000000000000004 [ 1156.393714][T10522] RBP: 00007fd089e081d0 R08: 0000000000000000 R09: 0000000000000000 [ 1156.401708][T10522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.409701][T10522] R13: 00007ffccb43955f R14: 00007fd089e08300 R15: 0000000000022000 03:22:25 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:25 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 03:22:25 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, &(0x7f0000000140), 0x8) [ 1156.417707][T10522] 03:22:25 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) 03:22:25 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:25 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:25 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (fail_nth: 6) 03:22:25 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x5450, &(0x7f0000f1dff8)={0x0, r1}) 03:22:25 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:25 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) 03:22:25 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:25 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:25 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) 03:22:25 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:25 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x5451, &(0x7f0000f1dff8)={0x0, r1}) 03:22:25 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') [ 1156.613249][T10554] FAULT_INJECTION: forcing a failure. [ 1156.613249][T10554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.681204][T10554] CPU: 1 PID: 10554 Comm: syz-executor.2 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1156.691779][T10554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1156.701856][T10554] Call Trace: [ 1156.705144][T10554] [ 1156.708077][T10554] dump_stack_lvl+0xcd/0x134 [ 1156.712687][T10554] should_fail.cold+0x5/0xa [ 1156.717216][T10554] _copy_from_user+0x2c/0x180 [ 1156.721919][T10554] kstrtouint_from_user+0xa8/0x190 [ 1156.727065][T10554] ? kstrtouint+0x120/0x120 [ 1156.731601][T10554] ? lock_release+0x720/0x720 [ 1156.736304][T10554] proc_fail_nth_write+0x79/0x220 [ 1156.741361][T10554] ? proc_task_getattr+0x1f0/0x1f0 [ 1156.746502][T10554] ? proc_task_getattr+0x1f0/0x1f0 [ 1156.751638][T10554] vfs_write+0x28e/0xae0 [ 1156.755903][T10554] ksys_write+0x12d/0x250 [ 1156.760253][T10554] ? __ia32_sys_read+0xb0/0xb0 [ 1156.765040][T10554] ? syscall_enter_from_user_mode+0x21/0x70 [ 1156.770973][T10554] do_syscall_64+0x35/0xb0 [ 1156.775416][T10554] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1156.781336][T10554] RIP: 0033:0x7fd08b445b5f [ 1156.785771][T10554] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1156.805405][T10554] RSP: 002b:00007fd089e08160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1156.813825][T10554] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd08b445b5f [ 1156.821796][T10554] RDX: 0000000000000001 RSI: 00007fd089e081e0 RDI: 0000000000000005 03:22:25 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) [ 1156.829768][T10554] RBP: 00007fd089e081d0 R08: 0000000000000000 R09: 0000000000000000 [ 1156.837753][T10554] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1156.845722][T10554] R13: 00007ffccb43955f R14: 00007fd089e08300 R15: 0000000000022000 [ 1156.853709][T10554] 03:22:26 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, 0x0) ioctl$FIOCLEX(r1, 0x5451) 03:22:26 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:26 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x5452, &(0x7f0000f1dff8)={0x0, r1}) 03:22:26 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:26 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x541b, &(0x7f0000f1dff8)={0x0, r1}) 03:22:26 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:26 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, 0x0) ioctl$FIOCLEX(r1, 0x5451) 03:22:26 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, 0x0) ioctl$FIOCLEX(r1, 0x5451) 03:22:26 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x5460, &(0x7f0000f1dff8)={0x0, r1}) 03:22:26 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:26 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:26 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x2, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:26 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001e00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_DELRULE={0x100, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffff762}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3353}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x102c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x1004, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, @NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}]}, @NFT_MSG_DELFLOWTABLE={0x1d8, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x150, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xbd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}]}]}], {0x14}}, 0x13f8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000001e40)=0x9) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:26 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8933, &(0x7f0000f1dff8)={0x0, r1}) 03:22:26 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) 03:22:26 executing program 1: r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:26 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:26 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x10, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:26 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) 03:22:26 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf01, &(0x7f0000f1dff8)={0x0, r1}) 03:22:26 executing program 1: r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:26 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:26 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 1) 03:22:26 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x541b, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:26 executing program 1: r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000440)='#*}\x00') [ 1157.324965][T10619] FAULT_INJECTION: forcing a failure. [ 1157.324965][T10619] name fail_usercopy, interval 1, probability 0, space 0, times 0 03:22:26 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) 03:22:26 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x5421, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:26 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') [ 1157.404265][T10619] CPU: 1 PID: 10619 Comm: syz-executor.4 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1157.414835][T10619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1157.424898][T10619] Call Trace: [ 1157.428184][T10619] [ 1157.431110][T10619] dump_stack_lvl+0xcd/0x134 [ 1157.435718][T10619] should_fail.cold+0x5/0xa [ 1157.440229][T10619] _copy_from_user+0x2c/0x180 [ 1157.444917][T10619] do_sys_poll+0x1f9/0xeb0 [ 1157.449358][T10619] ? lock_chain_count+0x20/0x20 03:22:26 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x5450, &(0x7f0000000000)='/dev/udmabuf\x00') [ 1157.454240][T10619] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1157.460503][T10619] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1157.466236][T10619] ? __set_page_owner+0x242/0x2d0 [ 1157.471273][T10619] ? compat_core_sys_select+0x820/0x820 [ 1157.476853][T10619] ? mark_lock.part.0+0xee/0x1910 [ 1157.481929][T10619] ? lock_chain_count+0x20/0x20 [ 1157.486811][T10619] ? __lock_acquire+0x1666/0x56c0 [ 1157.491872][T10619] ? mark_lock.part.0+0xee/0x1910 [ 1157.496934][T10619] ? mark_lock.part.0+0xee/0x1910 03:22:26 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:26 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x5451, &(0x7f0000000000)='/dev/udmabuf\x00') [ 1157.501976][T10619] ? lock_chain_count+0x20/0x20 [ 1157.506931][T10619] ? __lock_acquire+0xbc4/0x56c0 [ 1157.511972][T10619] ? lock_chain_count+0x20/0x20 [ 1157.516853][T10619] ? _parse_integer+0x30/0x30 [ 1157.521560][T10619] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1157.527561][T10619] ? lock_downgrade+0x6e0/0x6e0 [ 1157.532441][T10619] ? __lock_acquire+0x1666/0x56c0 [ 1157.537496][T10619] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1157.543576][T10619] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1157.549577][T10619] ? find_held_lock+0x2d/0x110 [ 1157.554357][T10619] ? set_user_sigmask+0x213/0x2a0 [ 1157.559402][T10619] ? __set_current_blocked+0x110/0x110 [ 1157.564874][T10619] ? lock_downgrade+0x6e0/0x6e0 [ 1157.569751][T10619] __x64_sys_ppoll+0x210/0x280 [ 1157.574647][T10619] ? __ia32_sys_poll+0x480/0x480 [ 1157.579602][T10619] ? syscall_enter_from_user_mode+0x21/0x70 [ 1157.585524][T10619] do_syscall_64+0x35/0xb0 [ 1157.589955][T10619] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1157.595941][T10619] RIP: 0033:0x7f8b0ba45049 [ 1157.600359][T10619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1157.620080][T10619] RSP: 002b:00007f8b0a3ba168 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1157.628518][T10619] RAX: ffffffffffffffda RBX: 00007f8b0bb57f60 RCX: 00007f8b0ba45049 [ 1157.636544][T10619] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000040 [ 1157.644525][T10619] RBP: 00007f8b0a3ba1d0 R08: 0000000000000000 R09: 0000000000000000 03:22:26 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, &(0x7f0000f1dff8)={0x0, r1}) 03:22:26 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:26 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x5452, &(0x7f0000000000)='/dev/udmabuf\x00') [ 1157.652508][T10619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.660588][T10619] R13: 00007fffce8587af R14: 00007f8b0a3ba300 R15: 0000000000022000 [ 1157.668640][T10619] 03:22:26 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 2) 03:22:26 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:26 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:26 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x5460, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:26 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x400448c9, &(0x7f0000f1dff8)={0x0, r1}) 03:22:26 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) (fail_nth: 1) 03:22:26 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:27 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:27 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x8933, &(0x7f0000000000)='/dev/udmabuf\x00') [ 1157.884721][T10657] FAULT_INJECTION: forcing a failure. [ 1157.884721][T10657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1157.931821][T10662] FAULT_INJECTION: forcing a failure. [ 1157.931821][T10662] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.944603][T10657] CPU: 0 PID: 10657 Comm: syz-executor.4 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1157.944637][T10657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1157.944650][T10657] Call Trace: [ 1157.944658][T10657] [ 1157.944666][T10657] dump_stack_lvl+0xcd/0x134 [ 1157.944700][T10657] should_fail.cold+0x5/0xa [ 1157.944728][T10657] _copy_to_user+0x2c/0x150 [ 1157.944756][T10657] simple_read_from_buffer+0xcc/0x160 [ 1157.990349][T10657] proc_fail_nth_read+0x187/0x220 [ 1157.995384][T10657] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 1158.001119][T10657] ? security_file_permission+0xab/0xd0 [ 1158.006669][T10657] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 1158.012666][T10657] vfs_read+0x1b5/0x600 [ 1158.016825][T10657] ksys_read+0x12d/0x250 [ 1158.021059][T10657] ? vfs_write+0xae0/0xae0 [ 1158.025470][T10657] ? syscall_enter_from_user_mode+0x21/0x70 [ 1158.031558][T10657] do_syscall_64+0x35/0xb0 [ 1158.035974][T10657] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1158.041861][T10657] RIP: 0033:0x7f8b0b9f7bfc [ 1158.046296][T10657] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1158.066160][T10657] RSP: 002b:00007f8b0a3ba160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1158.074600][T10657] RAX: ffffffffffffffda RBX: 00007f8b0bb57f60 RCX: 00007f8b0b9f7bfc [ 1158.082562][T10657] RDX: 000000000000000f RSI: 00007f8b0a3ba1e0 RDI: 0000000000000005 [ 1158.090523][T10657] RBP: 00007f8b0a3ba1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1158.098581][T10657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.106543][T10657] R13: 00007fffce8587af R14: 00007f8b0a3ba300 R15: 0000000000022000 [ 1158.114532][T10657] [ 1158.119882][T10662] CPU: 0 PID: 10662 Comm: syz-executor.3 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 03:22:27 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:27 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x400448dd, &(0x7f0000f1dff8)={0x0, r1}) [ 1158.130500][T10662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1158.140576][T10662] Call Trace: [ 1158.143860][T10662] [ 1158.146785][T10662] dump_stack_lvl+0xcd/0x134 [ 1158.151390][T10662] should_fail.cold+0x5/0xa [ 1158.155907][T10662] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1158.161634][T10662] should_failslab+0x5/0x10 [ 1158.166145][T10662] __kmalloc+0x72/0x450 [ 1158.170320][T10662] tomoyo_realpath_from_path+0xc3/0x620 [ 1158.175882][T10662] ? tomoyo_profile+0x42/0x50 [ 1158.180590][T10662] tomoyo_path_number_perm+0x1d5/0x590 [ 1158.186077][T10662] ? tomoyo_path_number_perm+0x18d/0x590 [ 1158.191725][T10662] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1158.197541][T10662] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1158.203568][T10662] ? __context_tracking_exit+0xb8/0xe0 [ 1158.209052][T10662] ? __fget_files+0x28c/0x470 [ 1158.213751][T10662] security_file_ioctl+0x50/0xb0 [ 1158.218710][T10662] __x64_sys_ioctl+0xb3/0x200 [ 1158.223403][T10662] do_syscall_64+0x35/0xb0 [ 1158.227840][T10662] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1158.233750][T10662] RIP: 0033:0x7f931cf31049 [ 1158.238178][T10662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1158.257809][T10662] RSP: 002b:00007f931b8a6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1158.266245][T10662] RAX: ffffffffffffffda RBX: 00007f931d043f60 RCX: 00007f931cf31049 [ 1158.274236][T10662] RDX: 0000000000000000 RSI: 0000000000005451 RDI: 0000000000000004 03:22:27 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:27 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:27 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x400448c9, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:27 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) [ 1158.282236][T10662] RBP: 00007f931b8a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1158.290238][T10662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.298233][T10662] R13: 00007fff75af026f R14: 00007f931b8a6300 R15: 0000000000022000 [ 1158.306242][T10662] [ 1158.318722][T10662] ERROR: Out of memory at tomoyo_realpath_from_path. 03:22:27 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:27 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x400448dd, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:27 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) (fail_nth: 2) 03:22:27 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x400454ca, &(0x7f0000f1dff8)={0x0, r1}) 03:22:27 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8007}], 0x1, 0x0, 0x0, 0x0) [ 1158.469017][T10683] FAULT_INJECTION: forcing a failure. [ 1158.469017][T10683] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.506158][T10683] CPU: 1 PID: 10683 Comm: syz-executor.3 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1158.516736][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1158.526811][T10683] Call Trace: [ 1158.530095][T10683] [ 1158.533027][T10683] dump_stack_lvl+0xcd/0x134 [ 1158.537651][T10683] should_fail.cold+0x5/0xa [ 1158.542178][T10683] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1158.547566][T10683] should_failslab+0x5/0x10 [ 1158.552074][T10683] __kmalloc+0x72/0x450 [ 1158.556228][T10683] ? dma_buf_fs_init_context+0x70/0x70 [ 1158.561685][T10683] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1158.566879][T10683] tomoyo_encode+0x28/0x50 [ 1158.571289][T10683] tomoyo_realpath_from_path+0x186/0x620 [ 1158.576911][T10683] ? tomoyo_profile+0x42/0x50 [ 1158.581582][T10683] tomoyo_path_number_perm+0x1d5/0x590 [ 1158.587031][T10683] ? tomoyo_path_number_perm+0x18d/0x590 [ 1158.592661][T10683] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1158.598459][T10683] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1158.604465][T10683] ? __context_tracking_exit+0xb8/0xe0 [ 1158.609928][T10683] ? __fget_files+0x28c/0x470 [ 1158.614611][T10683] security_file_ioctl+0x50/0xb0 [ 1158.619581][T10683] __x64_sys_ioctl+0xb3/0x200 [ 1158.624281][T10683] do_syscall_64+0x35/0xb0 [ 1158.628714][T10683] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1158.634602][T10683] RIP: 0033:0x7f931cf31049 [ 1158.639010][T10683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1158.658634][T10683] RSP: 002b:00007f931b8a6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:22:27 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x400454ca, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:27 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x40049409, &(0x7f0000f1dff8)={0x0, r1}) [ 1158.667055][T10683] RAX: ffffffffffffffda RBX: 00007f931d043f60 RCX: 00007f931cf31049 [ 1158.675036][T10683] RDX: 0000000000000000 RSI: 0000000000005451 RDI: 0000000000000004 [ 1158.683029][T10683] RBP: 00007f931b8a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1158.691009][T10683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.698980][T10683] R13: 00007fff75af026f R14: 00007f931b8a6300 R15: 0000000000022000 [ 1158.706976][T10683] 03:22:27 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:27 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046203, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:27 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:27 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x40086602, &(0x7f0000f1dff8)={0x0, r1}) 03:22:28 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:28 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:28 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046205, &(0x7f0000000000)='/dev/udmabuf\x00') [ 1158.905154][T10683] ERROR: Out of memory at tomoyo_realpath_from_path. 03:22:28 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) (fail_nth: 3) 03:22:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af00, &(0x7f0000f1dff8)={0x0, r1}) 03:22:28 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001, 0x8}], 0x1, 0x0, 0x0, 0x0) 03:22:28 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046207, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:28 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:28 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046208, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af25, &(0x7f0000f1dff8)={0x0, r1}) 03:22:28 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x7, 0x0, 0x0, 0x0) 03:22:28 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[]) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') [ 1159.086695][T10722] FAULT_INJECTION: forcing a failure. [ 1159.086695][T10722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1159.170102][T10722] CPU: 0 PID: 10722 Comm: syz-executor.3 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1159.181004][T10722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1159.191063][T10722] Call Trace: [ 1159.194340][T10722] [ 1159.197269][T10722] dump_stack_lvl+0xcd/0x134 [ 1159.201875][T10722] should_fail.cold+0x5/0xa [ 1159.206384][T10722] _copy_to_user+0x2c/0x150 [ 1159.210902][T10722] simple_read_from_buffer+0xcc/0x160 [ 1159.216291][T10722] proc_fail_nth_read+0x187/0x220 [ 1159.221325][T10722] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 1159.227057][T10722] ? security_file_permission+0xab/0xd0 [ 1159.232613][T10722] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 1159.238342][T10722] vfs_read+0x1b5/0x600 [ 1159.242507][T10722] ksys_read+0x12d/0x250 [ 1159.246754][T10722] ? vfs_write+0xae0/0xae0 [ 1159.251181][T10722] ? syscall_enter_from_user_mode+0x21/0x70 [ 1159.257077][T10722] do_syscall_64+0x35/0xb0 [ 1159.261510][T10722] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1159.267398][T10722] RIP: 0033:0x7f931cee3bfc [ 1159.271805][T10722] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1159.291422][T10722] RSP: 002b:00007f931b8a6160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1159.299838][T10722] RAX: ffffffffffffffda RBX: 00007f931d043f60 RCX: 00007f931cee3bfc [ 1159.307798][T10722] RDX: 000000000000000f RSI: 00007f931b8a61e0 RDI: 0000000000000005 03:22:28 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0xfffffdfe, 0x0, 0x0, 0x0) 03:22:28 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046239, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:28 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) [ 1159.315752][T10722] RBP: 00007f931b8a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.323709][T10722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1159.331684][T10722] R13: 00007fff75af026f R14: 00007f931b8a6300 R15: 0000000000022000 [ 1159.339660][T10722] 03:22:28 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) 03:22:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x40186366, &(0x7f0000f1dff8)={0x0, r1}) 03:22:28 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[]) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:28 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x8) 03:22:28 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40049409, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:28 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x8000000) 03:22:28 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[]) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:28 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40086200, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x401c5820, &(0x7f0000f1dff8)={0x0, r1}) 03:22:28 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x2) 03:22:28 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x800000000000000) 03:22:28 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:28 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40086201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:28 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:28 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x10) 03:22:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4020940d, &(0x7f0000f1dff8)={0x0, r1}) 03:22:28 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40086602, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:28 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)={0x0, 0x4, [{0xffffffffffffffff, 0x0, 0x1000}, {0xffffffffffffffff, 0x0, 0x2000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x1000001008000, 0xfffffffffffff000}]}) r2 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r2, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:28 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:28 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x541b) 03:22:29 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40186366, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:29 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:29 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)={0x0, 0x4, [{0xffffffffffffffff, 0x0, 0x1000}, {0xffffffffffffffff, 0x0, 0x2000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x1000001008000, 0xfffffffffffff000}]}) (async) r2 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r2, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:29 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:29 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x80086301, &(0x7f0000f1dff8)={0x0, r1}) 03:22:29 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5421) 03:22:29 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:29 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x401c5820, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:29 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)={0x0, 0x4, [{0xffffffffffffffff, 0x0, 0x1000}, {0xffffffffffffffff, 0x0, 0x2000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x1000001008000, 0xfffffffffffff000}]}) r2 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ppoll(&(0x7f0000000040)=[{r2, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:29 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5450) 03:22:29 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)={0x1}) r2 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="000018e100000000"]) ppoll(&(0x7f0000000040)=[{r2, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:29 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:29 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x4020940d, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:29 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x80086601, &(0x7f0000f1dff8)={0x0, r1}) 03:22:29 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5452) 03:22:29 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:29 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x80086301, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:29 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)={0x1}) (async) r2 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="000018e100000000"]) ppoll(&(0x7f0000000040)=[{r2, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:29 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:29 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5460) 03:22:29 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af00, &(0x7f0000f1dff8)={0x0, r1}) 03:22:29 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)={0x1}) (async, rerun: 64) r2 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="000018e100000000"]) (rerun: 64) ppoll(&(0x7f0000000040)=[{r2, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:29 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, 0x0) 03:22:29 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x80086601, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:29 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x8933) 03:22:29 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af26, &(0x7f0000f1dff8)={0x0, r1}) 03:22:29 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, 0x0) 03:22:29 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x801c581f, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:29 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x400448c9) 03:22:29 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x801c581f, &(0x7f0000f1dff8)={0x0, r1}) 03:22:29 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:29 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, 0x0) 03:22:30 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0xc0045878, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:30 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="8a3d09aa85e7b739e48848641c9aef4fc48f1ff182cc94795851ddc0ad258d4dfabd4e094110c4ce40b726100b5d1408183ef8e29c3f9e31dda55ef3817fb3521eaa590abd84fe5cb2000000000000"]) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:30 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x400448dd) 03:22:30 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0xc0045878, &(0x7f0000f1dff8)={0x0, r1}) 03:22:30 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0xc0045878, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:30 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:30 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x400454ca) 03:22:30 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0xc0189436, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:30 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0xc0045878, &(0x7f0000f1dff8)={0x0, r1}) 03:22:30 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x40049409) 03:22:30 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0xc0189436, &(0x7f0000f1dff8)={0x0, r1}) 03:22:30 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0xc020660b, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:30 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x40086602) 03:22:31 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="8a3d09aa85e7b739e48848641c9aef4fc48f1ff182cc94795851ddc0ad258d4dfabd4e094110c4ce40b726100b5d1408183ef8e29c3f9e31dda55ef3817fb3521eaa590abd84fe5cb2000000000000"]) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="8a3d09aa85e7b739e48848641c9aef4fc48f1ff182cc94795851ddc0ad258d4dfabd4e094110c4ce40b726100b5d1408183ef8e29c3f9e31dda55ef3817fb3521eaa590abd84fe5cb2000000000000"]) (async) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) (async) 03:22:31 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='%dev/udmabuf\x00') 03:22:31 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0xc020660b, &(0x7f0000f1dff8)={0x0, r1}) 03:22:31 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x40186366) 03:22:31 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:31 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:31 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:31 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x401c5820) 03:22:31 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='\\dev/udmabuf\x00') 03:22:31 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x4020940d) 03:22:31 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/\\ev/udmabuf\x00') 03:22:31 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2, r1}) 03:22:32 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="8a3d09aa85e7b739e48848641c9aef4fc48f1ff182cc94795851ddc0ad258d4dfabd4e094110c4ce40b726100b5d1408183ef8e29c3f9e31dda55ef3817fb3521eaa590abd84fe5cb2000000000000"]) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="8a3d09aa85e7b739e48848641c9aef4fc48f1ff182cc94795851ddc0ad258d4dfabd4e094110c4ce40b726100b5d1408183ef8e29c3f9e31dda55ef3817fb3521eaa590abd84fe5cb2000000000000"]) (async) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) (async) 03:22:32 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:32 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/d%v/udmabuf\x00') 03:22:32 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x80086301) 03:22:32 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x3, r1}) 03:22:32 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2, r1}) 03:22:32 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev%udmabuf\x00') 03:22:32 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x4, r1}) 03:22:32 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x2000) 03:22:32 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x80086601) 03:22:32 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2, r1}) 03:22:32 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev\\udmabuf\x00') 03:22:33 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)={0x1}) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:33 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x801c581f) 03:22:33 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x5, r1}) 03:22:33 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x2000) 03:22:33 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/\\dmabuf\x00') 03:22:33 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2, r1}) 03:22:33 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x6, r1}) 03:22:33 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0xc0045878) 03:22:33 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x2000) 03:22:33 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/u\\mabuf\x00') 03:22:33 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2, r1}) 03:22:33 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)={0x1}) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:33 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/ud\\abuf\x00') 03:22:33 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:33 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0xc0045878) 03:22:33 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x7, r1}) 03:22:33 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:33 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)={0x1}) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:33 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udm\\buf\x00') 03:22:33 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0xc0189436) 03:22:33 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x40049409) 03:22:33 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:33 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="00020000000061feb9a7d6d5647b4fff7db1846ae7a1cde662adb26705e65d37"]) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:33 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udma\\uf\x00') 03:22:33 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x10, r1}) 03:22:33 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:33 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0xc0189436, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:33 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmab\\f\x00') 03:22:33 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0xc020660b) 03:22:33 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:33 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x541b) 03:22:33 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabu%\x00') 03:22:33 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x21, r1}) 03:22:33 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = signalfd4(r0, &(0x7f0000000040)={[0x8000000000000000]}, 0x8, 0x800) sendfile(r2, r3, 0x0, 0x3ff) ioctl$FIOCLEX(r1, 0x5451) 03:22:34 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="00020000000061feb9a7d6d5647b4fff7db1846ae7a1cde662adb26705e65d37"]) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:34 executing program 1: ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:34 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabu\\\x00') 03:22:34 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, 0x0) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000440)='#*}\x00') 03:22:34 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x300, r1}) 03:22:34 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) (async) r3 = signalfd4(r0, &(0x7f0000000040)={[0x8000000000000000]}, 0x8, 0x800) sendfile(r2, r3, 0x0, 0x3ff) ioctl$FIOCLEX(r1, 0x5451) 03:22:34 executing program 1: ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:34 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x02') 03:22:34 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x500, r1}) 03:22:34 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r3 = signalfd4(r0, &(0x7f0000000040)={[0x8000000000000000]}, 0x8, 0x800) sendfile(r2, r3, 0x0, 0x3ff) ioctl$FIOCLEX(r1, 0x5451) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) (async) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) (async) signalfd4(r0, &(0x7f0000000040)={[0x8000000000000000]}, 0x8, 0x800) (async) sendfile(r2, r3, 0x0, 0x3ff) (async) ioctl$FIOCLEX(r1, 0x5451) (async) 03:22:34 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40086201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:34 executing program 1: ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:35 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x600, r1}) 03:22:35 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) r5 = memfd_create(&(0x7f0000000080)=':\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{r3, 0x0, 0x10000, 0x8000}, {r5, 0x0, 0x0, 0x1000000}]}) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) 03:22:35 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000000)=ANY=[@ANYBLOB="00020000000061feb9a7d6d5647b4fff7db1846ae7a1cde662adb26705e65d37"]) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:35 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:35 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x03') 03:22:35 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x40186366, &(0x7f0000f1dff8)={0x0, r1}) 03:22:35 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:35 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:35 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x700, r1}) 03:22:35 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) (async) r5 = memfd_create(&(0x7f0000000080)=':\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{r3, 0x0, 0x10000, 0x8000}, {r5, 0x0, 0x0, 0x1000000}]}) (async) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) ioctl$FIOCLEX(r1, 0x5451) 03:22:35 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x04') 03:22:35 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:35 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) (async) r5 = memfd_create(&(0x7f0000000080)=':\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{r3, 0x0, 0x10000, 0x8000}, {r5, 0x0, 0x0, 0x1000000}]}) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) 03:22:36 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r4, 0x1, 0x1000}) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:36 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x05') 03:22:36 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:36 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x1, 0x3, [{r3, 0x0, 0x10000, 0x1000}, {r2, 0x0, 0xfffffffff0000000, 0x1000000001000}, {r4, 0x0, 0x100000000}]}) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) 03:22:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x60ff, r1}) 03:22:36 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) (fail_nth: 1) 03:22:36 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:36 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x1, 0x3, [{r3, 0x0, 0x10000, 0x1000}, {r2, 0x0, 0xfffffffff0000000, 0x1000000001000}, {r4, 0x0, 0x100000000}]}) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) (async) pipe(&(0x7f0000000040)) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x1, 0x3, [{r3, 0x0, 0x10000, 0x1000}, {r2, 0x0, 0xfffffffff0000000, 0x1000000001000}, {r4, 0x0, 0x100000000}]}) (async) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) ioctl$FIOCLEX(r1, 0x5451) (async) 03:22:36 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x06') 03:22:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0xff00, r1}) [ 1167.256706][T11099] FAULT_INJECTION: forcing a failure. [ 1167.256706][T11099] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.328305][T11099] CPU: 0 PID: 11099 Comm: syz-executor.5 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1167.338886][T11099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1167.348966][T11099] Call Trace: [ 1167.352254][T11099] [ 1167.355187][T11099] dump_stack_lvl+0xcd/0x134 [ 1167.359791][T11099] should_fail.cold+0x5/0xa [ 1167.364311][T11099] should_failslab+0x5/0x10 [ 1167.368825][T11099] kmem_cache_alloc_bulk+0x4b/0x830 03:22:36 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\a') [ 1167.374045][T11099] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1167.379872][T11099] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1167.386140][T11099] io_submit_sqes.cold+0x20b/0x43d [ 1167.391306][T11099] ? __do_sys_io_uring_enter+0xfcf/0x1fc0 [ 1167.397049][T11099] ? find_held_lock+0x2d/0x110 [ 1167.401819][T11099] ? io_apoll_task_func+0x250/0x250 [ 1167.407021][T11099] ? __do_sys_io_uring_enter+0x361/0x1fc0 [ 1167.412740][T11099] ? lock_downgrade+0x6e0/0x6e0 [ 1167.417601][T11099] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1167.423313][T11099] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1167.428860][T11099] ? io_submit_sqes+0x9100/0x9100 [ 1167.433878][T11099] ? find_held_lock+0x2d/0x110 [ 1167.438636][T11099] ? __context_tracking_exit+0xb8/0xe0 [ 1167.444085][T11099] ? lock_downgrade+0x6e0/0x6e0 [ 1167.448930][T11099] ? lock_downgrade+0x6e0/0x6e0 [ 1167.453781][T11099] ? syscall_enter_from_user_mode+0x21/0x70 [ 1167.459674][T11099] do_syscall_64+0x35/0xb0 [ 1167.464086][T11099] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1167.469980][T11099] RIP: 0033:0x7f7bfe356049 [ 1167.474384][T11099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1167.494104][T11099] RSP: 002b:00007f7bfcccb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1167.502519][T11099] RAX: ffffffffffffffda RBX: 00007f7bfe468f60 RCX: 00007f7bfe356049 [ 1167.510482][T11099] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000003 [ 1167.518441][T11099] RBP: 00007f7bfcccb1d0 R08: 0000000000000000 R09: 0000000000002000 03:22:36 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r4, 0x1, 0x1000}) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) dup3(r2, r3, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) dup3(r4, r5, 0x0) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r4, 0x1, 0x1000}) (async) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) (async) [ 1167.526397][T11099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.534355][T11099] R13: 00007fff27b5cc5f R14: 00007f7bfcccb300 R15: 0000000000022000 [ 1167.542327][T11099] 03:22:36 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:36 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:36 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x1, 0x3, [{r3, 0x0, 0x10000, 0x1000}, {r2, 0x0, 0xfffffffff0000000, 0x1000000001000}, {r4, 0x0, 0x100000000}]}) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async, rerun: 64) ioctl$FIOCLEX(r1, 0x5451) (rerun: 64) 03:22:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0xf0ff1f, r1}) 03:22:36 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:37 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) (fail_nth: 2) 03:22:37 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:37 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r3, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r4, 0x1, 0x1000}) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) dup3(r2, r3, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) dup3(r4, r5, 0x0) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r4, 0x1, 0x1000}) (async) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) (async) 03:22:37 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000040)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) 03:22:37 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x1000000, r1}) 03:22:37 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:37 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000040)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) 03:22:37 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2000000, r1}) 03:22:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x10, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="000008102b000000"]) ppoll(&(0x7f0000000040)=[{r3, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:37 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') [ 1168.230473][T11170] FAULT_INJECTION: forcing a failure. [ 1168.230473][T11170] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.265774][T11170] CPU: 0 PID: 11170 Comm: syz-executor.5 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1168.276353][T11170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1168.286429][T11170] Call Trace: [ 1168.289715][T11170] [ 1168.292648][T11170] dump_stack_lvl+0xcd/0x134 [ 1168.297259][T11170] should_fail.cold+0x5/0xa [ 1168.301784][T11170] ? create_io_worker+0x108/0x630 [ 1168.306826][T11170] should_failslab+0x5/0x10 [ 1168.311350][T11170] kmem_cache_alloc_node_trace+0x59/0x420 [ 1168.317095][T11170] create_io_worker+0x108/0x630 [ 1168.321972][T11170] io_wqe_enqueue+0x692/0xbc0 [ 1168.326667][T11170] ? create_io_worker+0x630/0x630 [ 1168.331702][T11170] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1168.337969][T11170] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1168.343910][T11170] io_queue_async_work+0x28c/0x5d0 [ 1168.349062][T11170] io_queue_sqe_arm_apoll+0xe1/0x3c0 [ 1168.354373][T11170] io_submit_sqes+0x7b7b/0x9100 [ 1168.359253][T11170] ? find_held_lock+0x2d/0x110 [ 1168.364035][T11170] ? io_apoll_task_func+0x250/0x250 [ 1168.369268][T11170] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1168.375007][T11170] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1168.380593][T11170] ? io_submit_sqes+0x9100/0x9100 [ 1168.385643][T11170] ? find_held_lock+0x2d/0x110 [ 1168.390433][T11170] ? __context_tracking_exit+0xb8/0xe0 [ 1168.395897][T11170] ? lock_downgrade+0x6e0/0x6e0 [ 1168.400762][T11170] ? lock_downgrade+0x6e0/0x6e0 [ 1168.405656][T11170] ? syscall_enter_from_user_mode+0x21/0x70 [ 1168.411596][T11170] do_syscall_64+0x35/0xb0 [ 1168.416038][T11170] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1168.421961][T11170] RIP: 0033:0x7f7bfe356049 [ 1168.426409][T11170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1168.446052][T11170] RSP: 002b:00007f7bfcccb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1168.454492][T11170] RAX: ffffffffffffffda RBX: 00007f7bfe468f60 RCX: 00007f7bfe356049 [ 1168.462491][T11170] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000003 [ 1168.470486][T11170] RBP: 00007f7bfcccb1d0 R08: 0000000000000000 R09: 0000000000002000 [ 1168.478477][T11170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.486460][T11170] R13: 00007fff27b5cc5f R14: 00007f7bfcccb300 R15: 0000000000022000 [ 1168.494469][T11170] 03:22:37 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) (fail_nth: 3) 03:22:37 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000040)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) (async) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000040)='/dev/udmabuf\x00') (async) ioctl$FIOCLEX(r1, 0x5451) (async) 03:22:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x3000000, r1}) 03:22:37 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:37 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:37 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:37 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000080)='/dev/uqmabuf\x003\xa0\xb6\xc6\xa8\x86\x83\xcbr\x05D\x9eP\r\x90xup\x9b\x1bc>\xedk7\xd6U\xa2\x1e\xc5-+\xf1%\xaf\r\x99<\x99@\x0e\xb5t\x0fH\xad\xd0-n\xcc\xf3\x1bH\x1afn\x92\xfcf\xcd\xb3\xb6\x99\x97\xe6\xcc-\x0f\x85\x93\xbf\v\'\x7fV\xb7L|\xa4b\xcd\x17\xb9o\xde\xbd\x8f\xcdU\xd0Y\xd3\x1e\xf7\"$\xdc\xf6egl\x96\x1b\xec\fk\x01f\xb5)') ioctl$FIOCLEX(r1, 0x5451) 03:22:37 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\xff') 03:22:37 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:37 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x2}) [ 1168.865860][T11191] FAULT_INJECTION: forcing a failure. [ 1168.865860][T11191] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.928809][T11191] CPU: 1 PID: 11191 Comm: syz-executor.5 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1168.939367][T11191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1168.949435][T11191] Call Trace: [ 1168.952713][T11191] [ 1168.955741][T11191] dump_stack_lvl+0xcd/0x134 [ 1168.960357][T11191] should_fail.cold+0x5/0xa [ 1168.964879][T11191] ? create_io_worker+0x108/0x630 [ 1168.969893][T11191] should_failslab+0x5/0x10 [ 1168.974383][T11191] kmem_cache_alloc_node_trace+0x59/0x420 [ 1168.980105][T11191] create_io_worker+0x108/0x630 [ 1168.984980][T11191] io_wqe_enqueue+0x692/0xbc0 [ 1168.989685][T11191] ? create_io_worker+0x630/0x630 [ 1168.994725][T11191] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1169.000995][T11191] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1169.007077][T11191] io_queue_async_work+0x28c/0x5d0 [ 1169.012232][T11191] io_queue_sqe_arm_apoll+0xe1/0x3c0 [ 1169.017517][T11191] io_submit_sqes+0x7b7b/0x9100 [ 1169.022604][T11191] ? find_held_lock+0x2d/0x110 [ 1169.027365][T11191] ? io_apoll_task_func+0x250/0x250 [ 1169.032572][T11191] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1169.038297][T11191] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1169.043853][T11191] ? io_submit_sqes+0x9100/0x9100 [ 1169.048865][T11191] ? find_held_lock+0x2d/0x110 [ 1169.053624][T11191] ? __context_tracking_exit+0xb8/0xe0 [ 1169.059078][T11191] ? lock_downgrade+0x6e0/0x6e0 [ 1169.063942][T11191] ? lock_downgrade+0x6e0/0x6e0 [ 1169.068822][T11191] ? syscall_enter_from_user_mode+0x21/0x70 [ 1169.074708][T11191] do_syscall_64+0x35/0xb0 [ 1169.079116][T11191] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1169.084996][T11191] RIP: 0033:0x7f7bfe356049 [ 1169.089399][T11191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1169.109241][T11191] RSP: 002b:00007f7bfcccb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1169.117669][T11191] RAX: ffffffffffffffda RBX: 00007f7bfe468f60 RCX: 00007f7bfe356049 03:22:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x10, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="000008102b000000"]) ppoll(&(0x7f0000000040)=[{r3, 0x8001}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x10, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="000008102b000000"]) (async) ppoll(&(0x7f0000000040)=[{r3, 0x8001}], 0x1, 0x0, 0x0, 0x0) (async) 03:22:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x4000000, r1}) [ 1169.125652][T11191] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000003 [ 1169.133628][T11191] RBP: 00007f7bfcccb1d0 R08: 0000000000000000 R09: 0000000000002000 [ 1169.141945][T11191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.149936][T11191] R13: 00007fff27b5cc5f R14: 00007f7bfcccb300 R15: 0000000000022000 [ 1169.157949][T11191] 03:22:38 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) (fail_nth: 4) 03:22:38 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000080)='/dev/uqmabuf\x003\xa0\xb6\xc6\xa8\x86\x83\xcbr\x05D\x9eP\r\x90xup\x9b\x1bc>\xedk7\xd6U\xa2\x1e\xc5-+\xf1%\xaf\r\x99<\x99@\x0e\xb5t\x0fH\xad\xd0-n\xcc\xf3\x1bH\x1afn\x92\xfcf\xcd\xb3\xb6\x99\x97\xe6\xcc-\x0f\x85\x93\xbf\v\'\x7fV\xb7L|\xa4b\xcd\x17\xb9o\xde\xbd\x8f\xcdU\xd0Y\xd3\x1e\xf7\"$\xdc\xf6egl\x96\x1b\xec\fk\x01f\xb5)') ioctl$FIOCLEX(r1, 0x5451) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) (async) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000080)='/dev/uqmabuf\x003\xa0\xb6\xc6\xa8\x86\x83\xcbr\x05D\x9eP\r\x90xup\x9b\x1bc>\xedk7\xd6U\xa2\x1e\xc5-+\xf1%\xaf\r\x99<\x99@\x0e\xb5t\x0fH\xad\xd0-n\xcc\xf3\x1bH\x1afn\x92\xfcf\xcd\xb3\xb6\x99\x97\xe6\xcc-\x0f\x85\x93\xbf\v\'\x7fV\xb7L|\xa4b\xcd\x17\xb9o\xde\xbd\x8f\xcdU\xd0Y\xd3\x1e\xf7\"$\xdc\xf6egl\x96\x1b\xec\fk\x01f\xb5)') (async) ioctl$FIOCLEX(r1, 0x5451) (async) 03:22:38 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:38 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 03:22:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x5000000, r1}) 03:22:38 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:38 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 03:22:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x6000000, r1}) 03:22:38 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000080)='/dev/uqmabuf\x003\xa0\xb6\xc6\xa8\x86\x83\xcbr\x05D\x9eP\r\x90xup\x9b\x1bc>\xedk7\xd6U\xa2\x1e\xc5-+\xf1%\xaf\r\x99<\x99@\x0e\xb5t\x0fH\xad\xd0-n\xcc\xf3\x1bH\x1afn\x92\xfcf\xcd\xb3\xb6\x99\x97\xe6\xcc-\x0f\x85\x93\xbf\v\'\x7fV\xb7L|\xa4b\xcd\x17\xb9o\xde\xbd\x8f\xcdU\xd0Y\xd3\x1e\xf7\"$\xdc\xf6egl\x96\x1b\xec\fk\x01f\xb5)') (async) ioctl$FIOCLEX(r1, 0x5451) [ 1169.525537][T11229] FAULT_INJECTION: forcing a failure. [ 1169.525537][T11229] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.586161][T11229] CPU: 0 PID: 11229 Comm: syz-executor.5 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1169.596902][T11229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1169.606985][T11229] Call Trace: [ 1169.610271][T11229] [ 1169.613201][T11229] dump_stack_lvl+0xcd/0x134 [ 1169.617808][T11229] should_fail.cold+0x5/0xa [ 1169.622324][T11229] ? create_io_worker+0x108/0x630 [ 1169.627355][T11229] should_failslab+0x5/0x10 [ 1169.631862][T11229] kmem_cache_alloc_node_trace+0x59/0x420 [ 1169.637578][T11229] create_io_worker+0x108/0x630 [ 1169.642440][T11229] io_wqe_enqueue+0x692/0xbc0 [ 1169.647113][T11229] ? create_io_worker+0x630/0x630 [ 1169.652153][T11229] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1169.658430][T11229] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1169.664456][T11229] io_queue_async_work+0x28c/0x5d0 [ 1169.669599][T11229] io_queue_sqe_arm_apoll+0xe1/0x3c0 [ 1169.674899][T11229] io_submit_sqes+0x7b7b/0x9100 [ 1169.679776][T11229] ? find_held_lock+0x2d/0x110 [ 1169.684554][T11229] ? io_apoll_task_func+0x250/0x250 [ 1169.689777][T11229] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1169.695502][T11229] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1169.701094][T11229] ? io_submit_sqes+0x9100/0x9100 [ 1169.706128][T11229] ? find_held_lock+0x2d/0x110 [ 1169.710905][T11229] ? __context_tracking_exit+0xb8/0xe0 [ 1169.716369][T11229] ? lock_downgrade+0x6e0/0x6e0 [ 1169.721225][T11229] ? lock_downgrade+0x6e0/0x6e0 [ 1169.726078][T11229] ? syscall_enter_from_user_mode+0x21/0x70 [ 1169.731993][T11229] do_syscall_64+0x35/0xb0 [ 1169.736416][T11229] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1169.742315][T11229] RIP: 0033:0x7f7bfe356049 [ 1169.746729][T11229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1169.766345][T11229] RSP: 002b:00007f7bfcccb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1169.774760][T11229] RAX: ffffffffffffffda RBX: 00007f7bfe468f60 RCX: 00007f7bfe356049 03:22:38 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) [ 1169.782715][T11229] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000003 [ 1169.790683][T11229] RBP: 00007f7bfcccb1d0 R08: 0000000000000000 R09: 0000000000002000 [ 1169.798657][T11229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.806626][T11229] R13: 00007fff27b5cc5f R14: 00007f7bfcccb300 R15: 0000000000022000 [ 1169.814608][T11229] 03:22:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x10, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (async) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="000008102b000000"]) ppoll(&(0x7f0000000040)=[{r3, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:39 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:39 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) (fail_nth: 5) 03:22:39 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x7000000, r1}) 03:22:39 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r2, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x1ff}}, './file0\x00'}) r7 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x6, [{r1, 0x0, 0x0, 0x100000000}, {r1, 0x0, 0x0, 0x100000000}, {r5, 0x0, 0x1000000000000, 0x1000000}, {r2, 0x0, 0xfffff000, 0x8000}, {r5, 0x0, 0xfffff000, 0x1000}, {r6, 0x0, 0x100002000, 0x10000}]}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r7, 0x5451) 03:22:39 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 03:22:39 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:39 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:39 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async, rerun: 64) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r2, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x1ff}}, './file0\x00'}) r7 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x6, [{r1, 0x0, 0x0, 0x100000000}, {r1, 0x0, 0x0, 0x100000000}, {r5, 0x0, 0x1000000000000, 0x1000000}, {r2, 0x0, 0xfffff000, 0x8000}, {r5, 0x0, 0xfffff000, 0x1000}, {r6, 0x0, 0x100002000, 0x10000}]}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) ioctl$FIOCLEX(r7, 0x5451) 03:22:39 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 03:22:39 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x10000000, r1}) [ 1170.307226][T11261] FAULT_INJECTION: forcing a failure. [ 1170.307226][T11261] name failslab, interval 1, probability 0, space 0, times 0 03:22:39 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') [ 1170.358139][T11261] CPU: 1 PID: 11261 Comm: syz-executor.5 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1170.368723][T11261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1170.378804][T11261] Call Trace: [ 1170.382085][T11261] [ 1170.385032][T11261] dump_stack_lvl+0xcd/0x134 [ 1170.389773][T11261] should_fail.cold+0x5/0xa [ 1170.394308][T11261] ? create_io_worker+0x108/0x630 [ 1170.399693][T11261] should_failslab+0x5/0x10 [ 1170.404235][T11261] kmem_cache_alloc_node_trace+0x59/0x420 [ 1170.409972][T11261] create_io_worker+0x108/0x630 [ 1170.414847][T11261] io_wqe_enqueue+0x692/0xbc0 [ 1170.419528][T11261] ? create_io_worker+0x630/0x630 [ 1170.424565][T11261] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1170.430818][T11261] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1170.436741][T11261] io_queue_async_work+0x28c/0x5d0 [ 1170.441878][T11261] io_queue_sqe_arm_apoll+0xe1/0x3c0 [ 1170.447195][T11261] io_submit_sqes+0x7b7b/0x9100 [ 1170.452080][T11261] ? find_held_lock+0x2d/0x110 [ 1170.456852][T11261] ? io_apoll_task_func+0x250/0x250 [ 1170.462064][T11261] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1170.467777][T11261] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1170.473327][T11261] ? io_submit_sqes+0x9100/0x9100 [ 1170.478378][T11261] ? find_held_lock+0x2d/0x110 [ 1170.483134][T11261] ? __context_tracking_exit+0xb8/0xe0 [ 1170.488582][T11261] ? lock_downgrade+0x6e0/0x6e0 [ 1170.493442][T11261] ? lock_downgrade+0x6e0/0x6e0 [ 1170.498303][T11261] ? syscall_enter_from_user_mode+0x21/0x70 [ 1170.504205][T11261] do_syscall_64+0x35/0xb0 [ 1170.508639][T11261] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1170.514526][T11261] RIP: 0033:0x7f7bfe356049 [ 1170.518932][T11261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1170.538545][T11261] RSP: 002b:00007f7bfcccb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1170.546969][T11261] RAX: ffffffffffffffda RBX: 00007f7bfe468f60 RCX: 00007f7bfe356049 [ 1170.555032][T11261] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000003 [ 1170.562987][T11261] RBP: 00007f7bfcccb1d0 R08: 0000000000000000 R09: 0000000000002000 [ 1170.571021][T11261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.578989][T11261] R13: 00007fff27b5cc5f R14: 00007f7bfcccb300 R15: 0000000000022000 [ 1170.588324][T11261] 03:22:39 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0xa1) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="00001c0000000000"]) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:39 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r2, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x1ff}}, './file0\x00'}) r7 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x6, [{r1, 0x0, 0x0, 0x100000000}, {r1, 0x0, 0x0, 0x100000000}, {r5, 0x0, 0x1000000000000, 0x1000000}, {r2, 0x0, 0xfffff000, 0x8000}, {r5, 0x0, 0xfffff000, 0x1000}, {r6, 0x0, 0x100002000, 0x10000}]}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r7, 0x5451) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) dup3(r2, r4, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x1ff}}, './file0\x00'}) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x6, [{r1, 0x0, 0x0, 0x100000000}, {r1, 0x0, 0x0, 0x100000000}, {r5, 0x0, 0x1000000000000, 0x1000000}, {r2, 0x0, 0xfffff000, 0x8000}, {r5, 0x0, 0xfffff000, 0x1000}, {r6, 0x0, 0x100002000, 0x10000}]}) (async) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) ioctl$FIOCLEX(r7, 0x5451) (async) 03:22:40 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) (fail_nth: 6) 03:22:40 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\xff') 03:22:40 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 03:22:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x1ffff000, r1}) 03:22:40 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0xa1) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="00001c0000000000"]) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:40 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000f10000000018000000", @ANYRES32=r1, @ANYBLOB="01000000000000002e2f66696c653000"]) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x0, 0x4000}) 03:22:40 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x20000000, r1}) 03:22:40 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0xf0ff1f, r1}) [ 1170.973551][T11296] FAULT_INJECTION: forcing a failure. [ 1170.973551][T11296] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.026352][T11296] CPU: 0 PID: 11296 Comm: syz-executor.5 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1171.036912][T11296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1171.046969][T11296] Call Trace: [ 1171.050236][T11296] [ 1171.053150][T11296] dump_stack_lvl+0xcd/0x134 [ 1171.057738][T11296] should_fail.cold+0x5/0xa [ 1171.062229][T11296] ? create_io_worker+0x108/0x630 [ 1171.067275][T11296] should_failslab+0x5/0x10 [ 1171.071769][T11296] kmem_cache_alloc_node_trace+0x59/0x420 [ 1171.077487][T11296] create_io_worker+0x108/0x630 [ 1171.082333][T11296] io_wqe_enqueue+0x692/0xbc0 [ 1171.087003][T11296] ? create_io_worker+0x630/0x630 [ 1171.092019][T11296] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1171.098252][T11296] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1171.104149][T11296] io_queue_async_work+0x28c/0x5d0 [ 1171.109256][T11296] io_queue_sqe_arm_apoll+0xe1/0x3c0 [ 1171.114533][T11296] io_submit_sqes+0x7b7b/0x9100 [ 1171.119389][T11296] ? find_held_lock+0x2d/0x110 [ 1171.124145][T11296] ? io_apoll_task_func+0x250/0x250 [ 1171.129345][T11296] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1171.135053][T11296] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1171.140605][T11296] ? io_submit_sqes+0x9100/0x9100 [ 1171.145619][T11296] ? find_held_lock+0x2d/0x110 [ 1171.150375][T11296] ? __context_tracking_exit+0xb8/0xe0 [ 1171.155821][T11296] ? lock_downgrade+0x6e0/0x6e0 [ 1171.160662][T11296] ? lock_downgrade+0x6e0/0x6e0 [ 1171.165511][T11296] ? syscall_enter_from_user_mode+0x21/0x70 [ 1171.171403][T11296] do_syscall_64+0x35/0xb0 [ 1171.175815][T11296] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1171.181699][T11296] RIP: 0033:0x7f7bfe356049 [ 1171.186104][T11296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1171.205794][T11296] RSP: 002b:00007f7bfcccb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1171.214204][T11296] RAX: ffffffffffffffda RBX: 00007f7bfe468f60 RCX: 00007f7bfe356049 [ 1171.222165][T11296] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000003 [ 1171.230123][T11296] RBP: 00007f7bfcccb1d0 R08: 0000000000000000 R09: 0000000000002000 [ 1171.238082][T11296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.246040][T11296] R13: 00007fff27b5cc5f R14: 00007f7bfcccb300 R15: 0000000000022000 [ 1171.254018][T11296] 03:22:40 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x21000000, r1}) 03:22:40 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) ioctl$FIOCLEX(r1, 0x5451) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000f10000000018000000", @ANYRES32=r1, @ANYBLOB="01000000000000002e2f66696c653000"]) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x0, 0x4000}) 03:22:40 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) (fail_nth: 7) 03:22:40 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) (fail_nth: 1) 03:22:40 executing program 4: open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0xa1) (async) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="00001c0000000000"]) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:40 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\xfd') 03:22:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0xff000000, r1}) 03:22:40 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000f10000000018000000", @ANYRES32=r1, @ANYBLOB="01000000000000002e2f66696c653000"]) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x0, 0x4000}) 03:22:40 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:40 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000db8001"]) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r2, 0x1, 0x1000, 0x2000}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0xfffff000}) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180), 0x8001, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') creat(&(0x7f0000000200)='./file1\x00', 0x84) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x401c5820, &(0x7f0000000140)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:40 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x6, 0x6, 0xa5, 0x8000, 0x8aa, 0xfc00, 0x925, 0x46, 0x0, 0x43da, 0xb42, 0x0, 0x80, 0x4, 0x2, 0x47]}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac01}, @NL80211_ATTR_CONTROL_PORT={0x4}]]}, 0x44}, 0x1, 0x0, 0x0, 0x24040800}, 0x40000) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r2 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000040)='/dev/udmabuf\x00') ioctl$FIOCLEX(r2, 0x5451) 03:22:41 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0xff600000, r1}) [ 1171.836829][T11329] FAULT_INJECTION: forcing a failure. [ 1171.836829][T11329] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.869519][T11334] FAULT_INJECTION: forcing a failure. [ 1171.869519][T11334] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.922141][T11329] CPU: 0 PID: 11329 Comm: syz-executor.1 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1171.932726][T11329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1171.942807][T11329] Call Trace: [ 1171.946086][T11329] [ 1171.949009][T11329] dump_stack_lvl+0xcd/0x134 [ 1171.953602][T11329] should_fail.cold+0x5/0xa [ 1171.958104][T11329] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1171.963824][T11329] should_failslab+0x5/0x10 [ 1171.968582][T11329] __kmalloc+0x72/0x450 [ 1171.972737][T11329] tomoyo_realpath_from_path+0xc3/0x620 [ 1171.978280][T11329] ? tomoyo_profile+0x42/0x50 [ 1171.982962][T11329] tomoyo_path_number_perm+0x1d5/0x590 [ 1171.988411][T11329] ? tomoyo_path_number_perm+0x18d/0x590 [ 1171.994042][T11329] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1171.999848][T11329] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1172.005857][T11329] ? __context_tracking_exit+0xb8/0xe0 [ 1172.011314][T11329] ? __fget_files+0x28c/0x470 [ 1172.015998][T11329] security_file_ioctl+0x50/0xb0 [ 1172.020955][T11329] __x64_sys_ioctl+0xb3/0x200 [ 1172.025645][T11329] do_syscall_64+0x35/0xb0 [ 1172.030058][T11329] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1172.035954][T11329] RIP: 0033:0x7fecc154a049 [ 1172.040499][T11329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1172.060109][T11329] RSP: 002b:00007fecbfebf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1172.068523][T11329] RAX: ffffffffffffffda RBX: 00007fecc165cf60 RCX: 00007fecc154a049 [ 1172.076488][T11329] RDX: 0000000020f1dff8 RSI: 000000004008af30 RDI: 0000000000000003 [ 1172.084449][T11329] RBP: 00007fecbfebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1172.092411][T11329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1172.100374][T11329] R13: 00007ffd334cd45f R14: 00007fecbfebf300 R15: 0000000000022000 [ 1172.108348][T11329] [ 1172.128790][T11334] CPU: 0 PID: 11334 Comm: syz-executor.5 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1172.139359][T11334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1172.149429][T11334] Call Trace: [ 1172.152703][T11334] [ 1172.155625][T11334] dump_stack_lvl+0xcd/0x134 [ 1172.160219][T11334] should_fail.cold+0x5/0xa [ 1172.164716][T11334] ? create_io_worker+0x108/0x630 [ 1172.169734][T11334] should_failslab+0x5/0x10 [ 1172.174231][T11334] kmem_cache_alloc_node_trace+0x59/0x420 [ 1172.180060][T11334] create_io_worker+0x108/0x630 [ 1172.184911][T11334] io_wqe_enqueue+0x692/0xbc0 [ 1172.189598][T11334] ? create_io_worker+0x630/0x630 [ 1172.194703][T11334] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1172.200937][T11334] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1172.206841][T11334] io_queue_async_work+0x28c/0x5d0 [ 1172.211962][T11334] io_queue_sqe_arm_apoll+0xe1/0x3c0 [ 1172.217245][T11334] io_submit_sqes+0x7b7b/0x9100 [ 1172.222108][T11334] ? find_held_lock+0x2d/0x110 [ 1172.226869][T11334] ? io_apoll_task_func+0x250/0x250 [ 1172.232076][T11334] ? __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1172.237786][T11334] __do_sys_io_uring_enter+0xfdd/0x1fc0 [ 1172.243339][T11334] ? io_submit_sqes+0x9100/0x9100 [ 1172.248446][T11334] ? find_held_lock+0x2d/0x110 [ 1172.253208][T11334] ? __context_tracking_exit+0xb8/0xe0 [ 1172.258659][T11334] ? lock_downgrade+0x6e0/0x6e0 [ 1172.263503][T11334] ? lock_downgrade+0x6e0/0x6e0 [ 1172.268353][T11334] ? syscall_enter_from_user_mode+0x21/0x70 [ 1172.274245][T11334] do_syscall_64+0x35/0xb0 [ 1172.278675][T11334] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1172.284560][T11334] RIP: 0033:0x7f7bfe356049 [ 1172.288963][T11334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1172.308585][T11334] RSP: 002b:00007f7bfcccb168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1172.316997][T11334] RAX: ffffffffffffffda RBX: 00007f7bfe468f60 RCX: 00007f7bfe356049 03:22:41 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x6, 0x6, 0xa5, 0x8000, 0x8aa, 0xfc00, 0x925, 0x46, 0x0, 0x43da, 0xb42, 0x0, 0x80, 0x4, 0x2, 0x47]}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac01}, @NL80211_ATTR_CONTROL_PORT={0x4}]]}, 0x44}, 0x1, 0x0, 0x0, 0x24040800}, 0x40000) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r2 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000040)='/dev/udmabuf\x00') ioctl$FIOCLEX(r2, 0x5451) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x6, 0x6, 0xa5, 0x8000, 0x8aa, 0xfc00, 0x925, 0x46, 0x0, 0x43da, 0xb42, 0x0, 0x80, 0x4, 0x2, 0x47]}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac01}, @NL80211_ATTR_CONTROL_PORT={0x4}]]}, 0x44}, 0x1, 0x0, 0x0, 0x24040800}, 0x40000) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000540)) (async) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000040)='/dev/udmabuf\x00') (async) ioctl$FIOCLEX(r2, 0x5451) (async) 03:22:41 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') [ 1172.325048][T11334] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000003 [ 1172.333008][T11334] RBP: 00007f7bfcccb1d0 R08: 0000000000000000 R09: 0000000000002000 [ 1172.340972][T11334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1172.348933][T11334] R13: 00007fff27b5cc5f R14: 00007f7bfcccb300 R15: 0000000000022000 [ 1172.356913][T11334] [ 1172.363160][T11329] ERROR: Out of memory at tomoyo_realpath_from_path. 03:22:41 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:41 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0xffffffff, r1}) 03:22:41 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x6, 0x6, 0xa5, 0x8000, 0x8aa, 0xfc00, 0x925, 0x46, 0x0, 0x43da, 0xb42, 0x0, 0x80, 0x4, 0x2, 0x47]}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac01}, @NL80211_ATTR_CONTROL_PORT={0x4}]]}, 0x44}, 0x1, 0x0, 0x0, 0x24040800}, 0x40000) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r2 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000040)='/dev/udmabuf\x00') (async) ioctl$FIOCLEX(r2, 0x5451) 03:22:41 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:41 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) (fail_nth: 2) 03:22:41 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000db8001"]) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r2, 0x1, 0x1000, 0x2000}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0xfffff000}) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180), 0x8001, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') creat(&(0x7f0000000200)='./file1\x00', 0x84) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x401c5820, &(0x7f0000000140)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000db8001"]) (async) creat(&(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r2, 0x1, 0x1000, 0x2000}) (async) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0xfffff000}) (async) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180), 0x8001, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) (async) chdir(&(0x7f0000000540)='./bus\x00') (async) creat(&(0x7f0000000200)='./file1\x00', 0x84) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x401c5820, &(0x7f0000000140)) (async) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) (async) 03:22:41 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:41 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = signalfd(r1, &(0x7f0000000080)={[0xffffffff]}, 0x8) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x0) r7 = dup3(r1, r0, 0x80000) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x48040, 0xa0) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000100)={0x1, 0x5, [{r3, 0x0, 0xfffffffff0000000, 0xfffff000}, {r5, 0x0, 0x5000, 0x2000}, {r7, 0x0, 0x1000000000000, 0xfffffffffffff000}, {r8, 0x0, 0xfffffffffffff000, 0x2000}, {0xffffffffffffffff, 0x0, 0x10000, 0x1000}]}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x4000}) ioctl$FIOCLEX(r1, 0x5451) 03:22:42 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[@ANYBLOB="88facf4dc2aff3d1ba00fe50df2751007d64"]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) write$vhost_msg(r2, &(0x7f00000000c0)={0x1, {&(0x7f0000000040)=""/16, 0x10, &(0x7f0000000080)=""/3, 0x3, 0x4}}, 0x48) [ 1172.869640][T11364] FAULT_INJECTION: forcing a failure. [ 1172.869640][T11364] name failslab, interval 1, probability 0, space 0, times 0 03:22:42 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') r2 = signalfd(r1, &(0x7f0000000080)={[0xffffffff]}, 0x8) (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x0) (async, rerun: 64) r7 = dup3(r1, r0, 0x80000) (async, rerun: 64) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x48040, 0xa0) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000100)={0x1, 0x5, [{r3, 0x0, 0xfffffffff0000000, 0xfffff000}, {r5, 0x0, 0x5000, 0x2000}, {r7, 0x0, 0x1000000000000, 0xfffffffffffff000}, {r8, 0x0, 0xfffffffffffff000, 0x2000}, {0xffffffffffffffff, 0x0, 0x10000, 0x1000}]}) (async, rerun: 32) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x4000}) (async, rerun: 32) ioctl$FIOCLEX(r1, 0x5451) [ 1172.930859][T11364] CPU: 0 PID: 11364 Comm: syz-executor.1 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1172.941574][T11364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1172.951653][T11364] Call Trace: [ 1172.954939][T11364] [ 1172.957879][T11364] dump_stack_lvl+0xcd/0x134 [ 1172.962499][T11364] should_fail.cold+0x5/0xa [ 1172.967038][T11364] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1172.972448][T11364] should_failslab+0x5/0x10 [ 1172.976963][T11364] __kmalloc+0x72/0x450 03:22:42 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') [ 1172.981206][T11364] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1172.986432][T11364] tomoyo_encode+0x28/0x50 [ 1172.990861][T11364] tomoyo_realpath_from_path+0x186/0x620 [ 1172.996515][T11364] tomoyo_path_number_perm+0x1d5/0x590 [ 1173.001971][T11364] ? tomoyo_path_number_perm+0x18d/0x590 [ 1173.007620][T11364] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1173.013440][T11364] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1173.019461][T11364] ? __context_tracking_exit+0xb8/0xe0 [ 1173.024949][T11364] ? __fget_files+0x28c/0x470 [ 1173.029660][T11364] security_file_ioctl+0x50/0xb0 [ 1173.034632][T11364] __x64_sys_ioctl+0xb3/0x200 [ 1173.039333][T11364] do_syscall_64+0x35/0xb0 [ 1173.043759][T11364] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1173.049660][T11364] RIP: 0033:0x7fecc154a049 [ 1173.054124][T11364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1173.073874][T11364] RSP: 002b:00007fecbfebf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1173.082304][T11364] RAX: ffffffffffffffda RBX: 00007fecc165cf60 RCX: 00007fecc154a049 [ 1173.090280][T11364] RDX: 0000000020f1dff8 RSI: 000000004008af30 RDI: 0000000000000003 [ 1173.098256][T11364] RBP: 00007fecbfebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1173.106313][T11364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.114280][T11364] R13: 00007ffd334cd45f R14: 00007fecbfebf300 R15: 0000000000022000 [ 1173.122411][T11364] 03:22:42 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[@ANYBLOB="88facf4dc2aff3d1ba00fe50df2751007d64"]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) write$vhost_msg(r2, &(0x7f00000000c0)={0x1, {&(0x7f0000000040)=""/16, 0x10, &(0x7f0000000080)=""/3, 0x3, 0x4}}, 0x48) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[@ANYBLOB="88facf4dc2aff3d1ba00fe50df2751007d64"]) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) (async) pidfd_getfd(0xffffffffffffffff, r1, 0x0) (async) write$vhost_msg(r2, &(0x7f00000000c0)={0x1, {&(0x7f0000000040)=""/16, 0x10, &(0x7f0000000080)=""/3, 0x3, 0x4}}, 0x48) (async) [ 1173.336517][T11364] ERROR: Out of memory at tomoyo_realpath_from_path. 03:22:42 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 03:22:42 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000db8001"]) (async) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r2, 0x1, 0x1000, 0x2000}) (async) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0xfffff000}) (async) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180), 0x8001, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) (async) chdir(&(0x7f0000000540)='./bus\x00') (async) creat(&(0x7f0000000200)='./file1\x00', 0x84) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x401c5820, &(0x7f0000000140)) (async) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:42 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:42 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) (fail_nth: 3) 03:22:42 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[@ANYBLOB="88facf4dc2aff3d1ba00fe50df2751007d64"]) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) write$vhost_msg(r2, &(0x7f00000000c0)={0x1, {&(0x7f0000000040)=""/16, 0x10, &(0x7f0000000080)=""/3, 0x3, 0x4}}, 0x48) 03:22:42 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) r2 = signalfd(r1, &(0x7f0000000080)={[0xffffffff]}, 0x8) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) dup3(r5, r6, 0x0) (async) r7 = dup3(r1, r0, 0x80000) (async) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x48040, 0xa0) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000100)={0x1, 0x5, [{r3, 0x0, 0xfffffffff0000000, 0xfffff000}, {r5, 0x0, 0x5000, 0x2000}, {r7, 0x0, 0x1000000000000, 0xfffffffffffff000}, {r8, 0x0, 0xfffffffffffff000, 0x2000}, {0xffffffffffffffff, 0x0, 0x10000, 0x1000}]}) (async) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x4000}) (async) ioctl$FIOCLEX(r1, 0x5451) 03:22:42 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') [ 1173.671307][T11408] FAULT_INJECTION: forcing a failure. [ 1173.671307][T11408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1173.685469][ T26] audit: type=1804 audit(1647400962.790:270): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4182679858/syzkaller.0U0kQM/3086/file0" dev="sda1" ino=1185 res=1 errno=0 [ 1173.720719][T11408] CPU: 1 PID: 11408 Comm: syz-executor.1 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1173.731480][T11408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1173.741583][T11408] Call Trace: [ 1173.744901][T11408] [ 1173.747853][T11408] dump_stack_lvl+0xcd/0x134 [ 1173.752464][T11408] should_fail.cold+0x5/0xa [ 1173.756984][T11408] _copy_from_user+0x2c/0x180 [ 1173.761682][T11408] vhost_net_ioctl+0x454/0x1740 [ 1173.766551][T11408] ? __context_tracking_exit+0xb8/0xe0 [ 1173.772020][T11408] ? handle_tx_zerocopy+0xd80/0xd80 [ 1173.777208][T11408] ? __fget_files+0x28c/0x470 [ 1173.781898][T11408] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1173.788146][T11408] ? handle_tx_zerocopy+0xd80/0xd80 [ 1173.793337][T11408] __x64_sys_ioctl+0x193/0x200 [ 1173.798129][T11408] do_syscall_64+0x35/0xb0 [ 1173.802568][T11408] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1173.808520][T11408] RIP: 0033:0x7fecc154a049 [ 1173.812976][T11408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1173.832597][T11408] RSP: 002b:00007fecbfebf168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1173.841029][T11408] RAX: ffffffffffffffda RBX: 00007fecc165cf60 RCX: 00007fecc154a049 [ 1173.849048][T11408] RDX: 0000000020f1dff8 RSI: 000000004008af30 RDI: 0000000000000003 [ 1173.857209][T11408] RBP: 00007fecbfebf1d0 R08: 0000000000000000 R09: 0000000000000000 03:22:43 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000008000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x13c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) 03:22:43 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:43 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = io_uring_setup(0x3554, &(0x7f0000000000)={0x0, 0xb689, 0x20, 0x1, 0x143}) close(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 1173.865197][T11408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.873171][T11408] R13: 00007ffd334cd45f R14: 00007fecbfebf300 R15: 0000000000022000 [ 1173.881198][T11408] 03:22:43 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) (fail_nth: 4) [ 1173.966546][T11433] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:22:43 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = io_uring_setup(0x3554, &(0x7f0000000000)={0x0, 0xb689, 0x20, 0x1, 0x143}) close(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:43 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) (async) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000008000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) (async) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x13c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) [ 1174.033762][T11439] FAULT_INJECTION: forcing a failure. [ 1174.033762][T11439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.128321][T11439] CPU: 1 PID: 11439 Comm: syz-executor.1 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1174.130943][T11446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1174.140423][T11439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1174.140446][T11439] Call Trace: [ 1174.140456][T11439] [ 1174.140467][T11439] dump_stack_lvl+0xcd/0x134 [ 1174.140512][T11439] should_fail.cold+0x5/0xa [ 1174.140552][T11439] _copy_to_user+0x2c/0x150 [ 1174.140592][T11439] simple_read_from_buffer+0xcc/0x160 [ 1174.140634][T11439] proc_fail_nth_read+0x187/0x220 [ 1174.140674][T11439] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 1174.140710][T11439] ? security_file_permission+0xab/0xd0 [ 1174.140751][T11439] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 1174.140791][T11439] vfs_read+0x1b5/0x600 [ 1174.140837][T11439] ksys_read+0x12d/0x250 [ 1174.140874][T11439] ? vfs_write+0xae0/0xae0 [ 1174.140915][T11439] ? syscall_enter_from_user_mode+0x21/0x70 [ 1174.140976][T11439] do_syscall_64+0x35/0xb0 [ 1174.230850][T11439] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1174.236772][T11439] RIP: 0033:0x7fecc14fcbfc [ 1174.241199][T11439] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1174.260824][T11439] RSP: 002b:00007fecbfebf160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1174.269257][T11439] RAX: ffffffffffffffda RBX: 00007fecc165cf60 RCX: 00007fecc14fcbfc [ 1174.277237][T11439] RDX: 000000000000000f RSI: 00007fecbfebf1e0 RDI: 0000000000000004 [ 1174.285214][T11439] RBP: 00007fecbfebf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1174.294106][T11439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.302082][T11439] R13: 00007ffd334cd45f R14: 00007fecbfebf300 R15: 0000000000022000 [ 1174.310087][T11439] 03:22:43 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x2, 0x0, 0x0, 0x2000) 03:22:43 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = io_uring_setup(0x3554, &(0x7f0000000000)={0x0, 0xb689, 0x20, 0x1, 0x143}) close(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) io_uring_setup(0x3554, &(0x7f0000000000)={0x0, 0xb689, 0x20, 0x1, 0x143}) (async) close(r2) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) (async) 03:22:43 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:43 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 03:22:43 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000ecb4e7fa847e379105d973b589d54b91a1ae61d9ce926d92c4e2986360a9eef976046ad79dc131f87572a0999ca03a0cbb6d75b620e85f5049620b6fa9c8c1b1d11601696768f2f821d0a185c8"]) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3ff, 0x80000) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = openat$cgroup_freezer_state(r3, &(0x7f0000000240), 0x2, 0x0) sendfile(r7, r8, &(0x7f0000000280)=0x1, 0x26) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40505331, &(0x7f00000001c0)={{0x8, 0x8}, {0x0, 0x5b}, 0x0, 0x4, 0x6c}) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000140)={0x1, 0x5, [{r2, 0x0, 0x100000000, 0xfffffffffffff000}, {r3, 0x0, 0x100000000, 0xfffffffff0000000}, {r5, 0x0, 0x0, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x4000, 0xfffff000}, {r9, 0x0, 0xfffffffffffff000}]}) 03:22:43 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) ioctl$FIOCLEX(r1, 0x5451) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000008000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x13c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) 03:22:43 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:43 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1502c0, 0x0) ioctl$int_in(r1, 0x5421, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, '.\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000008000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x10}, {0xfff6, 0xa}, {0x9, 0xb}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048810) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000008000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x5, r7, 0x1, 0x9, 0x6, @multicast}, 0x14) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) [ 1174.556525][T11464] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:22:43 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x2, &(0x7f0000f1dff8)={0x2}) 03:22:43 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000ecb4e7fa847e379105d973b589d54b91a1ae61d9ce926d92c4e2986360a9eef976046ad79dc131f87572a0999ca03a0cbb6d75b620e85f5049620b6fa9c8c1b1d11601696768f2f821d0a185c8"]) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3ff, 0x80000) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = openat$cgroup_freezer_state(r3, &(0x7f0000000240), 0x2, 0x0) sendfile(r7, r8, &(0x7f0000000280)=0x1, 0x26) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40505331, &(0x7f00000001c0)={{0x8, 0x8}, {0x0, 0x5b}, 0x0, 0x4, 0x6c}) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000140)={0x1, 0x5, [{r2, 0x0, 0x100000000, 0xfffffffffffff000}, {r3, 0x0, 0x100000000, 0xfffffffff0000000}, {r5, 0x0, 0x0, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x4000, 0xfffff000}, {r9, 0x0, 0xfffffffffffff000}]}) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000ecb4e7fa847e379105d973b589d54b91a1ae61d9ce926d92c4e2986360a9eef976046ad79dc131f87572a0999ca03a0cbb6d75b620e85f5049620b6fa9c8c1b1d11601696768f2f821d0a185c8"]) (async) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x3ff, 0x80000) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) dup3(r3, r4, 0x0) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) dup3(r5, r6, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) openat$cgroup_freezer_state(r3, &(0x7f0000000240), 0x2, 0x0) (async) sendfile(r7, r8, &(0x7f0000000280)=0x1, 0x26) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40505331, &(0x7f00000001c0)={{0x8, 0x8}, {0x0, 0x5b}, 0x0, 0x4, 0x6c}) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000140)={0x1, 0x5, [{r2, 0x0, 0x100000000, 0xfffffffffffff000}, {r3, 0x0, 0x100000000, 0xfffffffff0000000}, {r5, 0x0, 0x0, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x4000, 0xfffff000}, {r9, 0x0, 0xfffffffffffff000}]}) (async) 03:22:43 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r7, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) r10 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000000)={0x0, 0x6, [{r1, 0x0, 0x1000, 0x100000000}, {r4, 0x0, 0x100000000}, {r1, 0x0, 0xfffff000, 0x1000000000000}, {r6, 0x0, 0xfffff000, 0x4000}, {r3, 0x0, 0x2000}, {r8, 0x0, 0x1ff7fd000}]}) r11 = socket$caif_seqpacket(0x25, 0x5, 0x4) fcntl$addseals(r11, 0x409, 0x2) ioctl$FIOCLEX(r10, 0x5451) 03:22:43 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') [ 1174.678596][T11480] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1174.764266][T11483] syz-executor.4: vmalloc error: size 20480, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1174.788310][T11483] CPU: 0 PID: 11483 Comm: syz-executor.4 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1174.798858][T11483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1174.808918][T11483] Call Trace: [ 1174.812219][T11483] [ 1174.815161][T11483] dump_stack_lvl+0xcd/0x134 [ 1174.819768][T11483] warn_alloc.cold+0x9b/0x189 [ 1174.824474][T11483] ? zone_watermark_ok_safe+0x290/0x290 [ 1174.830045][T11483] ? __kmalloc_node+0x62/0x4a0 [ 1174.834856][T11483] ? __vmalloc_node_range+0x7bf/0x1060 [ 1174.840335][T11483] __vmalloc_node_range+0xe18/0x1060 [ 1174.840375][T11483] ? vfree_atomic+0xe0/0xe0 [ 1174.840398][T11483] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1174.840423][T11483] ? kernel_clone+0xe7/0xab0 [ 1174.840442][T11483] copy_process+0x926/0x7250 [ 1174.840466][T11483] ? kernel_clone+0xe7/0xab0 [ 1174.840493][T11483] ? find_held_lock+0x2d/0x110 [ 1174.840519][T11483] ? __cleanup_sighand+0xb0/0xb0 [ 1174.840536][T11483] ? __lock_acquire+0x1666/0x56c0 [ 1174.884742][T11483] ? kernel_clone+0x314/0xab0 [ 1174.889442][T11483] kernel_clone+0xe7/0xab0 [ 1174.893881][T11483] ? create_io_thread+0xf0/0xf0 [ 1174.898754][T11483] ? find_held_lock+0x2d/0x110 [ 1174.903547][T11483] __do_sys_clone+0xc8/0x110 [ 1174.908143][T11483] ? kernel_clone+0xab0/0xab0 [ 1174.912837][T11483] ? syscall_enter_from_user_mode+0x21/0x70 [ 1174.918745][T11483] do_syscall_64+0x35/0xb0 [ 1174.923159][T11483] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1174.929044][T11483] RIP: 0033:0x7f8b0ba46471 [ 1174.933455][T11483] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1174.953058][T11483] RSP: 002b:00007fffce8586f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1174.961503][T11483] RAX: ffffffffffffffda RBX: 00007f8b0a2d3700 RCX: 00007f8b0ba46471 [ 1174.969493][T11483] RDX: 00007f8b0a2d39d0 RSI: 00007f8b0a2d32f0 RDI: 00000000003d0f00 [ 1174.977606][T11483] RBP: 00007fffce858940 R08: 00007f8b0a2d3700 R09: 00007f8b0a2d3700 [ 1174.985567][T11483] R10: 00007f8b0a2d39d0 R11: 0000000000000206 R12: 00007fffce8587ae [ 1174.993532][T11483] R13: 00007fffce8587af R14: 00007f8b0a2d3300 R15: 0000000000022000 [ 1175.001513][T11483] 03:22:44 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x7, 0x0, 0x0, 0x2000) 03:22:44 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000040)=ANY=[@ANYBLOB="65efc84c8efa69e2c5702d6fede5dfd761a2"]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:44 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x10, &(0x7f0000f1dff8)={0x2}) 03:22:44 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1502c0, 0x0) ioctl$int_in(r1, 0x5421, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, '.\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000008000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x10}, {0xfff6, 0xa}, {0x9, 0xb}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048810) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000008000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x5, r7, 0x1, 0x9, 0x6, @multicast}, 0x14) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1502c0, 0x0) (async) ioctl$int_in(r1, 0x5421, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, '.\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6) (async) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000008000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x10}, {0xfff6, 0xa}, {0x9, 0xb}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048810) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000008000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) bind$packet(r3, &(0x7f0000000080)={0x11, 0x5, r7, 0x1, 0x9, 0x6, @multicast}, 0x14) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) (async) 03:22:44 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) (async, rerun: 64) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r7, 0x0) (async, rerun: 64) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) (async) r10 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000000)={0x0, 0x6, [{r1, 0x0, 0x1000, 0x100000000}, {r4, 0x0, 0x100000000}, {r1, 0x0, 0xfffff000, 0x1000000000000}, {r6, 0x0, 0xfffff000, 0x4000}, {r3, 0x0, 0x2000}, {r8, 0x0, 0x1ff7fd000}]}) r11 = socket$caif_seqpacket(0x25, 0x5, 0x4) fcntl$addseals(r11, 0x409, 0x2) ioctl$FIOCLEX(r10, 0x5451) [ 1175.220206][T11483] Mem-Info: [ 1175.230657][T11483] active_anon:1001 inactive_anon:126796 isolated_anon:0 [ 1175.230657][T11483] active_file:6341 inactive_file:7411 isolated_file:0 [ 1175.230657][T11483] unevictable:768 dirty:52 writeback:0 [ 1175.230657][T11483] slab_reclaimable:20138 slab_unreclaimable:106799 [ 1175.230657][T11483] mapped:28501 shmem:2927 pagetables:1004 bounce:0 [ 1175.230657][T11483] kernel_misc_reclaimable:0 [ 1175.230657][T11483] free:1329254 free_pcp:10551 free_cma:0 03:22:44 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000040)=ANY=[@ANYBLOB="65efc84c8efa69e2c5702d6fede5dfd761a2"]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') [ 1175.305108][T11509] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1175.323668][T11483] Node 0 active_anon:3996kB inactive_anon:506352kB active_file:25292kB inactive_file:29644kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114004kB dirty:204kB writeback:0kB shmem:9232kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB kernel_stack:11096kB pagetables:4112kB all_unreclaimable? no 03:22:44 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x541b, &(0x7f0000f1dff8)={0x2}) [ 1175.365791][T11483] Node 1 active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no 03:22:44 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r5, 0x0) (async) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r7, 0x0) (async) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r9, 0x0) (async) r10 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000000)={0x0, 0x6, [{r1, 0x0, 0x1000, 0x100000000}, {r4, 0x0, 0x100000000}, {r1, 0x0, 0xfffff000, 0x1000000000000}, {r6, 0x0, 0xfffff000, 0x4000}, {r3, 0x0, 0x2000}, {r8, 0x0, 0x1ff7fd000}]}) (async) r11 = socket$caif_seqpacket(0x25, 0x5, 0x4) fcntl$addseals(r11, 0x409, 0x2) ioctl$FIOCLEX(r10, 0x5451) 03:22:44 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000040)=ANY=[@ANYBLOB="65efc84c8efa69e2c5702d6fede5dfd761a2"]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') (async) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') [ 1175.459326][T11483] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1175.586905][T11483] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 1175.593110][T11483] Node 0 DMA32 free:1349980kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:4000kB inactive_anon:506336kB active_file:25292kB inactive_file:29644kB unevictable:1536kB writepending:204kB present:3129332kB managed:2716640kB mlocked:0kB bounce:0kB free_pcp:42744kB local_pcp:20844kB free_cma:0kB [ 1175.668048][T11483] lowmem_reserve[]: 0 0 0 0 0 [ 1175.680931][T11483] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1175.725017][T11483] lowmem_reserve[]: 0 0 0 0 0 [ 1175.736002][T11483] Node 1 Normal free:3953564kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1175.786004][T11483] lowmem_reserve[]: 0 0 0 0 0 [ 1175.791123][T11483] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1175.804338][T11483] Node 0 DMA32: 2743*4kB (UME) 1533*8kB (UME) 1921*16kB (UME) 1067*32kB (UME) 428*64kB (UME) 237*128kB (UME) 121*256kB (UME) 44*512kB (UME) 8*1024kB (UME) 4*2048kB (ME) 277*4096kB (UM) = 1350324kB [ 1175.825493][T11483] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1175.837690][T11483] Node 1 Normal: 159*4kB (UME) 22*8kB (UE) 27*16kB (UE) 174*32kB (UE) 80*64kB (UME) 36*128kB (UME) 11*256kB (U) 0*512kB 0*1024kB 1*2048kB (U) 960*4096kB (ME) = 3953564kB [ 1175.855232][T11483] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1175.865495][T11483] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1175.875266][T11483] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1175.885501][T11483] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1175.898736][T11483] 16668 total pagecache pages [ 1175.903782][T11483] 0 pages in swap cache [ 1175.908654][T11483] Swap cache stats: add 0, delete 0, find 0/0 [ 1175.915138][T11483] Free swap = 0kB [ 1175.920566][T11483] Total swap = 0kB [ 1175.924619][T11483] 2097051 pages RAM [ 1175.931736][T11483] 0 pages HighMem/MovableOnly 03:22:45 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000ecb4e7fa847e379105d973b589d54b91a1ae61d9ce926d92c4e2986360a9eef976046ad79dc131f87572a0999ca03a0cbb6d75b620e85f5049620b6fa9c8c1b1d11601696768f2f821d0a185c8"]) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3ff, 0x80000) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) (async) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r8 = openat$cgroup_freezer_state(r3, &(0x7f0000000240), 0x2, 0x0) sendfile(r7, r8, &(0x7f0000000280)=0x1, 0x26) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40505331, &(0x7f00000001c0)={{0x8, 0x8}, {0x0, 0x5b}, 0x0, 0x4, 0x6c}) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000140)={0x1, 0x5, [{r2, 0x0, 0x100000000, 0xfffffffffffff000}, {r3, 0x0, 0x100000000, 0xfffffffff0000000}, {r5, 0x0, 0x0, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x4000, 0xfffff000}, {r9, 0x0, 0xfffffffffffff000}]}) 03:22:45 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 32) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1502c0, 0x0) (rerun: 32) ioctl$int_in(r1, 0x5421, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, '.\x00'}) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000008000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x10}, {0xfff6, 0xa}, {0x9, 0xb}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048810) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000008000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) (rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x5, r7, 0x1, 0x9, 0x6, @multicast}, 0x14) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) 03:22:45 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="00008f7fd223004c"]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) 03:22:45 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x5421, &(0x7f0000f1dff8)={0x2}) 03:22:45 executing program 2: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f00000000c0)='\xe2') ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:45 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x8, 0x0, 0x0, 0x2000) [ 1175.936966][T11483] 384546 pages reserved [ 1175.941120][T11483] 0 pages cma reserved 03:22:45 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="00008f7fd223004c"]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) ioctl$FIOCLEX(r1, 0x5451) 03:22:45 executing program 2: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f00000000c0)='\xe2') ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f00000000c0)='\xe2') (async) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) 03:22:45 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x5450, &(0x7f0000f1dff8)={0x2}) 03:22:45 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ftruncate(r2, 0x100000000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x6637f4e9cd56b42c, 0x0) r4 = syz_mount_image$ubifs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000400)=[{&(0x7f0000000140)="34fb91b5825b520c", 0x8, 0x5}, {&(0x7f0000000180)="0cfe2d53875fa30f5c4479fbed85ab0ea82287fbff48116c0e90aa564691156c50f6fcb77f2f1a37d63928eb4eb411744df2e5ed7ed45d5912b6dd37f3e174cf5cf5db5104cf65441a5f4357c74f77610b9058f12e", 0x55, 0x2}, {&(0x7f0000000200)="89960ab2f4fa50c8ca80a5fab389ad595ba3d19aa425db77fa2162af1b9d086aadcad8c33f4bb549f2019b5c0fc084e630088f45dc74bbdecb1b350b07c1edea6d2bf9da32e9c87328b5d7fbe2924e51b9944a27433d811d208a9c0647cdf1af868d4afd39730ba5112d4d3165ca6cbd2f09d776be", 0x75, 0x3}, {&(0x7f0000000280)="83224c2a15f4446f21844d997ec51ff0", 0x10}, {&(0x7f00000002c0)="01d693439aa7259ebfda90fe089a72bebf81ca0577042d067a60057c8ffa47a1d5be2119dac0bff7da4054e33c26ab2280a38006a3f206cc494c586806b816f8ecc4bbaa4d527a83bfd2bcb697e75e22b4db91f949493a5bb44769f7ed7cceaa973af06452657b798f97ab4ce563d4d4f210b7248268594c0e6a4bbad5091bdf81f2acb38142cd887fa72c98d2cc118b4a02343e5e71177747f6c6ac1b21c962883d", 0xa2, 0x40}, {&(0x7f0000000380)="88862c2e40ef044721a3010ddc1616e0f765c67c497f768bfca2573a935b38caccdc3425d07ade65a55b7583b36959839c2407a34b7c9a4e105c31e389ea7f22896a0749c677005f4e75d7976989", 0x4e, 0x8000}], 0x300000, &(0x7f0000000580)={[{@chk_data_crc}, {@compr_zstd}, {@no_bulk_read}, {@compr_lzo}, {@norm_unmount}, {@compr_lzo}, {@compr_zlib}], [{@seclabel}]}) openat(r4, &(0x7f0000000500)='./file0\x00', 0x18101, 0x105) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000080)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:45 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="00008f7fd223004c"]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="00008f7fd223004c"]) (async) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) ioctl$FIOCLEX(r1, 0x5451) (async) 03:22:45 executing program 2: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f00000000c0)='\xe2') (async, rerun: 32) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (rerun: 32) 03:22:45 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x5451, &(0x7f0000f1dff8)={0x2}) 03:22:45 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="441259834d1ac637bca952bbc7f636b6f4d5f93c3ce329ff25b4656f3d8938bb3bd034687efae3cd403e1ead1b62c6d2e86487b5db0f16fb799ab27edb7978d6cfbc670776776e513390568678d84c6ec078bf9730f81fb0d53d37e6dfec822818898a67a3a34b4cd471f79051a8a9209d23f76bc70164e0cb6470abe2dc81cb1560d0d19f61dbab688dd24a6a765235a2000776159aabde0f482832ba02ef8611afcb5562ab1c40bf0cbd65b732db1ade60b72f892331881e3bc0ea115eac563adbeaf668e90105760624b212c2cd8d3fa71705031cf1bc473edbaef39c689e8d700cf5700caf5687614b3ccca8614d820e50a7f392"]) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x3, r2}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x1, 0x3}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080), 0x2, 0x0) 03:22:45 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) (async) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ftruncate(r2, 0x100000000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x6637f4e9cd56b42c, 0x0) r4 = syz_mount_image$ubifs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000400)=[{&(0x7f0000000140)="34fb91b5825b520c", 0x8, 0x5}, {&(0x7f0000000180)="0cfe2d53875fa30f5c4479fbed85ab0ea82287fbff48116c0e90aa564691156c50f6fcb77f2f1a37d63928eb4eb411744df2e5ed7ed45d5912b6dd37f3e174cf5cf5db5104cf65441a5f4357c74f77610b9058f12e", 0x55, 0x2}, {&(0x7f0000000200)="89960ab2f4fa50c8ca80a5fab389ad595ba3d19aa425db77fa2162af1b9d086aadcad8c33f4bb549f2019b5c0fc084e630088f45dc74bbdecb1b350b07c1edea6d2bf9da32e9c87328b5d7fbe2924e51b9944a27433d811d208a9c0647cdf1af868d4afd39730ba5112d4d3165ca6cbd2f09d776be", 0x75, 0x3}, {&(0x7f0000000280)="83224c2a15f4446f21844d997ec51ff0", 0x10}, {&(0x7f00000002c0)="01d693439aa7259ebfda90fe089a72bebf81ca0577042d067a60057c8ffa47a1d5be2119dac0bff7da4054e33c26ab2280a38006a3f206cc494c586806b816f8ecc4bbaa4d527a83bfd2bcb697e75e22b4db91f949493a5bb44769f7ed7cceaa973af06452657b798f97ab4ce563d4d4f210b7248268594c0e6a4bbad5091bdf81f2acb38142cd887fa72c98d2cc118b4a02343e5e71177747f6c6ac1b21c962883d", 0xa2, 0x40}, {&(0x7f0000000380)="88862c2e40ef044721a3010ddc1616e0f765c67c497f768bfca2573a935b38caccdc3425d07ade65a55b7583b36959839c2407a34b7c9a4e105c31e389ea7f22896a0749c677005f4e75d7976989", 0x4e, 0x8000}], 0x300000, &(0x7f0000000580)={[{@chk_data_crc}, {@compr_zstd}, {@no_bulk_read}, {@compr_lzo}, {@norm_unmount}, {@compr_lzo}, {@compr_zlib}], [{@seclabel}]}) openat(r4, &(0x7f0000000500)='./file0\x00', 0x18101, 0x105) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000080)) (async) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:45 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000040)=ANY=[@ANYBLOB="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"/271]) fstat(r1, &(0x7f0000000240)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1a8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x8020}, {r3, 0x210}, {r1, 0x400}, {r1, 0x1182}], 0x4, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)={[0x10000]}, 0x8) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:45 executing program 3: r0 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4240, 0x1a0, 0x5}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000008000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20508a22}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@deltclass={0x2c, 0x29, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x8, 0xf}, {0xa, 0xc}, {0x10, 0x1}}, [@tclass_kind_options=@c_cbs={0x8}]}, 0x2c}}, 0x8000) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x0) r7 = ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r7, 0x5451) [ 1176.350325][T11588] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:22:45 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x700, 0x0, 0x0, 0x2000) 03:22:45 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x5452, &(0x7f0000f1dff8)={0x2}) 03:22:45 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) (async) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ftruncate(r2, 0x100000000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x6637f4e9cd56b42c, 0x0) (async) r4 = syz_mount_image$ubifs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000400)=[{&(0x7f0000000140)="34fb91b5825b520c", 0x8, 0x5}, {&(0x7f0000000180)="0cfe2d53875fa30f5c4479fbed85ab0ea82287fbff48116c0e90aa564691156c50f6fcb77f2f1a37d63928eb4eb411744df2e5ed7ed45d5912b6dd37f3e174cf5cf5db5104cf65441a5f4357c74f77610b9058f12e", 0x55, 0x2}, {&(0x7f0000000200)="89960ab2f4fa50c8ca80a5fab389ad595ba3d19aa425db77fa2162af1b9d086aadcad8c33f4bb549f2019b5c0fc084e630088f45dc74bbdecb1b350b07c1edea6d2bf9da32e9c87328b5d7fbe2924e51b9944a27433d811d208a9c0647cdf1af868d4afd39730ba5112d4d3165ca6cbd2f09d776be", 0x75, 0x3}, {&(0x7f0000000280)="83224c2a15f4446f21844d997ec51ff0", 0x10}, {&(0x7f00000002c0)="01d693439aa7259ebfda90fe089a72bebf81ca0577042d067a60057c8ffa47a1d5be2119dac0bff7da4054e33c26ab2280a38006a3f206cc494c586806b816f8ecc4bbaa4d527a83bfd2bcb697e75e22b4db91f949493a5bb44769f7ed7cceaa973af06452657b798f97ab4ce563d4d4f210b7248268594c0e6a4bbad5091bdf81f2acb38142cd887fa72c98d2cc118b4a02343e5e71177747f6c6ac1b21c962883d", 0xa2, 0x40}, {&(0x7f0000000380)="88862c2e40ef044721a3010ddc1616e0f765c67c497f768bfca2573a935b38caccdc3425d07ade65a55b7583b36959839c2407a34b7c9a4e105c31e389ea7f22896a0749c677005f4e75d7976989", 0x4e, 0x8000}], 0x300000, &(0x7f0000000580)={[{@chk_data_crc}, {@compr_zstd}, {@no_bulk_read}, {@compr_lzo}, {@norm_unmount}, {@compr_lzo}, {@compr_zlib}], [{@seclabel}]}) openat(r4, &(0x7f0000000500)='./file0\x00', 0x18101, 0x105) (async) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000080)) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:45 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="441259834d1ac637bca952bbc7f636b6f4d5f93c3ce329ff25b4656f3d8938bb3bd034687efae3cd403e1ead1b62c6d2e86487b5db0f16fb799ab27edb7978d6cfbc670776776e513390568678d84c6ec078bf9730f81fb0d53d37e6dfec822818898a67a3a34b4cd471f79051a8a9209d23f76bc70164e0cb6470abe2dc81cb1560d0d19f61dbab688dd24a6a765235a2000776159aabde0f482832ba02ef8611afcb5562ab1c40bf0cbd65b732db1ade60b72f892331881e3bc0ea115eac563adbeaf668e90105760624b212c2cd8d3fa71705031cf1bc473edbaef39c689e8d700cf5700caf5687614b3ccca8614d820e50a7f392"]) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x3, r2}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x1, 0x3}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080), 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="441259834d1ac637bca952bbc7f636b6f4d5f93c3ce329ff25b4656f3d8938bb3bd034687efae3cd403e1ead1b62c6d2e86487b5db0f16fb799ab27edb7978d6cfbc670776776e513390568678d84c6ec078bf9730f81fb0d53d37e6dfec822818898a67a3a34b4cd471f79051a8a9209d23f76bc70164e0cb6470abe2dc81cb1560d0d19f61dbab688dd24a6a765235a2000776159aabde0f482832ba02ef8611afcb5562ab1c40bf0cbd65b732db1ade60b72f892331881e3bc0ea115eac563adbeaf668e90105760624b212c2cd8d3fa71705031cf1bc473edbaef39c689e8d700cf5700caf5687614b3ccca8614d820e50a7f392"]) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) dup3(r2, r3, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x3, r2}) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x1, 0x3}) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x2}) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080), 0x2, 0x0) (async) 03:22:45 executing program 3: r0 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4240, 0x1a0, 0x5}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) (async) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000008000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20508a22}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@deltclass={0x2c, 0x29, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x8, 0xf}, {0xa, 0xc}, {0x10, 0x1}}, [@tclass_kind_options=@c_cbs={0x8}]}, 0x2c}}, 0x8000) (async, rerun: 32) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (rerun: 32) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) dup3(r5, r6, 0x0) r7 = ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) ioctl$FIOCLEX(r7, 0x5451) 03:22:45 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000040)=ANY=[@ANYBLOB="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"/271]) fstat(r1, &(0x7f0000000240)) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000a0000000000000000000a20000000000a03000000000005000000010000060900010073797a300000000060010000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021240111800a0001006d6174636800000014010280680003001024a22d165a7986547f0495c3dbcae8ce92bcbd8315a5b4879bebc3a6d3d7af3132fc8dd9fad8e8ef66d74a4cd625d392fdfbac03da1b623b4c97e1168347a31b7993b400defe000bec94480e88314fa833675de862251c1a9f0f29f852d72d79ae3e1d08000240000000096a0003003125233ec6022a2fa733eabfaa54f3caec676e27df8e938efe7fc1f9c715a3fc40fd126656ab42e8f24f2a502634c11c66d8fd390cd9fb1fbabeab944f5aa10d50e4a1d5a08b7f7489ba44e25277935ded5f2fd83f9ce2667f34220f33583491a4a71ffbe3ce00000900010073797a3000000010050001000000000005000100000001000700010025270000070001005dc7000008000240000003f6140000c4ee650fffbd8e1100000000000000000a"], 0x1a8}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) (async, rerun: 32) ppoll(&(0x7f0000000180)=[{r2, 0x8020}, {r3, 0x210}, {r1, 0x400}, {r1, 0x1182}], 0x4, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)={[0x10000]}, 0x8) (async, rerun: 32) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') (async) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:45 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x8000}) mmap$snddsp_control(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x10010, r0, 0x83000000) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r2 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="ab2d000000000000"]) ppoll(&(0x7f0000000040)=[{r2, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:45 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x5460, &(0x7f0000f1dff8)={0x2}) 03:22:45 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="441259834d1ac637bca952bbc7f636b6f4d5f93c3ce329ff25b4656f3d8938bb3bd034687efae3cd403e1ead1b62c6d2e86487b5db0f16fb799ab27edb7978d6cfbc670776776e513390568678d84c6ec078bf9730f81fb0d53d37e6dfec822818898a67a3a34b4cd471f79051a8a9209d23f76bc70164e0cb6470abe2dc81cb1560d0d19f61dbab688dd24a6a765235a2000776159aabde0f482832ba02ef8611afcb5562ab1c40bf0cbd65b732db1ade60b72f892331881e3bc0ea115eac563adbeaf668e90105760624b212c2cd8d3fa71705031cf1bc473edbaef39c689e8d700cf5700caf5687614b3ccca8614d820e50a7f392"]) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x3, r2}) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x1, 0x3}) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x2}) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080), 0x2, 0x0) [ 1176.797646][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.804007][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 03:22:45 executing program 3: r0 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4240, 0x1a0, 0x5}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) (async) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000008000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=@delchain={0x34, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20508a22}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@deltclass={0x2c, 0x29, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x8, 0xf}, {0xa, 0xc}, {0x10, 0x1}}, [@tclass_kind_options=@c_cbs={0x8}]}, 0x2c}}, 0x8000) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x0) (async) r7 = ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r7, 0x5451) 03:22:46 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000040)=ANY=[@ANYBLOB="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"/271]) fstat(r1, &(0x7f0000000240)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000a0000000000000000000a20000000000a03000000000005000000010000060900010073797a300000000060010000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021240111800a0001006d6174636800000014010280680003001024a22d165a7986547f0495c3dbcae8ce92bcbd8315a5b4879bebc3a6d3d7af3132fc8dd9fad8e8ef66d74a4cd625d392fdfbac03da1b623b4c97e1168347a31b7993b400defe000bec94480e88314fa833675de862251c1a9f0f29f852d72d79ae3e1d08000240000000096a0003003125233ec6022a2fa733eabfaa54f3caec676e27df8e938efe7fc1f9c715a3fc40fd126656ab42e8f24f2a502634c11c66d8fd390cd9fb1fbabeab944f5aa10d50e4a1d5a08b7f7489ba44e25277935ded5f2fd83f9ce2667f34220f33583491a4a71ffbe3ce00000900010073797a3000000010050001000000000005000100000001000700010025270000070001005dc7000008000240000003f6140000c4ee650fffbd8e1100000000000000000a"], 0x1a8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x8020}, {r3, 0x210}, {r1, 0x400}, {r1, 0x1182}], 0x4, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)={[0x10000]}, 0x8) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000040)=ANY=[@ANYBLOB="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"/271]) (async) fstat(r1, &(0x7f0000000240)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1a8}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) (async) ppoll(&(0x7f0000000180)=[{r2, 0x8020}, {r3, 0x210}, {r1, 0x400}, {r1, 0x1182}], 0x4, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)={[0x10000]}, 0x8) (async) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') (async) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) 03:22:46 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x8000}) mmap$snddsp_control(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x10010, r0, 0x83000000) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r2 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="ab2d000000000000"]) ppoll(&(0x7f0000000040)=[{r2, 0x8001}], 0x1, 0x0, 0x0, 0x0) [ 1176.967308][T11636] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 03:22:46 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x1f00, 0x0, 0x0, 0x2000) 03:22:46 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$setsig(r0, 0xa, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:46 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8933, &(0x7f0000f1dff8)={0x2}) 03:22:46 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x8000}) mmap$snddsp_control(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x10010, r0, 0x83000000) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r2 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="ab2d000000000000"]) ppoll(&(0x7f0000000040)=[{r2, 0x8001}], 0x1, 0x0, 0x0, 0x0) 03:22:46 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="89df88c494000010"]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x1) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r2, 0x1, 0xfffff000, 0xfffffffffffff000}) 03:22:46 executing program 2: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000009000000000000005312aa0a17c4b49c74c2f2f7a14df625dbdb256d6ce5a86a7dfb342a7a76c86ca94fbd3100cce4052d1b91bc5df78039b8aa03840366a0e7c71fd6f74b0a9b0e4bc5d8d5249ec1af64685f6f3cb15f15c79e951d8c50e1", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000580)={{r1}, 0x0, 0x6, @unused=[0x4, 0x5, 0x1, 0x7ff], @subvolid=0x3}) r2 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000600"]) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000040)='\x00\xda\xc6\xc9\xc6}&\xc7\x98\n\xf4/\xee\xd7 ^X1\x85\x85YV\xdd\xc9Sy%\xa7\xdf\x13\x1cq\x8fk\xd63g\x93\x82\x9f\xe6\xe9\xf7\x1e\xb9^\x8fM\x91\x8eNG\x99S\xaao\xd1\xf8Z\x0f\x18;|\xd4\xc88:\xe9]\xb1jry\x1a\xb3\xbd]\xec\x94\xa4p\x9bzR\xb3\xbem\x80i7t\xd1.\xef\xfc\xfe!\xcc\x86\xfd\xf6%\x13pFfl#\xcfCr\xa8\x8f\xc9KkX\xfc{\x06\x83*p\x01y\xab\xe2\x18\x93\xff\xe9k0\x13\xe7\x92g5\xf1@k\xe7um\xf6\x00\x98\xe2\x1d\xa2k\xe0\x86\x87\xd1\r\xfc\x13\x9b\xd6)\xf3hg\xeb\x84\xd4\x9d\xb1\xfa\xac3\f\x8420h\x89\xde\x9b\xb90\xbe^\a\x1c6\xa0u\xde*a\xa2\xdc5\xcbu') ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:46 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000596aa1952e83bf2c1554127ad68a85dcf8ffffff7ace06460000fed7ff502cc0945f1bca7aa9e35093f41dbc940bf1cbb3cd02cc4346f388127ee92a9c2cc6034eaadda7ed2f0a364f06c892eb7f0d00"/97]) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)=':\xcb~@\x00') r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x10002) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r5, 0x1, 0xfffff000, 0x1000}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x500, 0x0) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000000c0)={r6, 0x1, 0x0, 0x100000000}) 03:22:46 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$setsig(r0, 0xa, 0x1) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:46 executing program 2: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000009000000000000005312aa0a17c4b49c74c2f2f7a14df625dbdb256d6ce5a86a7dfb342a7a76c86ca94fbd3100cce4052d1b91bc5df78039b8aa03840366a0e7c71fd6f74b0a9b0e4bc5d8d5249ec1af64685f6f3cb15f15c79e951d8c50e1", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000580)={{r1}, 0x0, 0x6, @unused=[0x4, 0x5, 0x1, 0x7ff], @subvolid=0x3}) (async) r2 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000600"]) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000040)='\x00\xda\xc6\xc9\xc6}&\xc7\x98\n\xf4/\xee\xd7 ^X1\x85\x85YV\xdd\xc9Sy%\xa7\xdf\x13\x1cq\x8fk\xd63g\x93\x82\x9f\xe6\xe9\xf7\x1e\xb9^\x8fM\x91\x8eNG\x99S\xaao\xd1\xf8Z\x0f\x18;|\xd4\xc88:\xe9]\xb1jry\x1a\xb3\xbd]\xec\x94\xa4p\x9bzR\xb3\xbem\x80i7t\xd1.\xef\xfc\xfe!\xcc\x86\xfd\xf6%\x13pFfl#\xcfCr\xa8\x8f\xc9KkX\xfc{\x06\x83*p\x01y\xab\xe2\x18\x93\xff\xe9k0\x13\xe7\x92g5\xf1@k\xe7um\xf6\x00\x98\xe2\x1d\xa2k\xe0\x86\x87\xd1\r\xfc\x13\x9b\xd6)\xf3hg\xeb\x84\xd4\x9d\xb1\xfa\xac3\f\x8420h\x89\xde\x9b\xb90\xbe^\a\x1c6\xa0u\xde*a\xa2\xdc5\xcbu') ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:46 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="89df88c494000010"]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) ioctl$FIOCLEX(r1, 0x5451) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x1) (async) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r2, 0x1, 0xfffff000, 0xfffffffffffff000}) 03:22:46 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf01, &(0x7f0000f1dff8)={0x2}) 03:22:46 executing program 2: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) (async) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000009000000000000005312aa0a17c4b49c74c2f2f7a14df625dbdb256d6ce5a86a7dfb342a7a76c86ca94fbd3100cce4052d1b91bc5df78039b8aa03840366a0e7c71fd6f74b0a9b0e4bc5d8d5249ec1af64685f6f3cb15f15c79e951d8c50e1", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000580)={{r1}, 0x0, 0x6, @unused=[0x4, 0x5, 0x1, 0x7ff], @subvolid=0x3}) r2 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000600"]) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000040)='\x00\xda\xc6\xc9\xc6}&\xc7\x98\n\xf4/\xee\xd7 ^X1\x85\x85YV\xdd\xc9Sy%\xa7\xdf\x13\x1cq\x8fk\xd63g\x93\x82\x9f\xe6\xe9\xf7\x1e\xb9^\x8fM\x91\x8eNG\x99S\xaao\xd1\xf8Z\x0f\x18;|\xd4\xc88:\xe9]\xb1jry\x1a\xb3\xbd]\xec\x94\xa4p\x9bzR\xb3\xbem\x80i7t\xd1.\xef\xfc\xfe!\xcc\x86\xfd\xf6%\x13pFfl#\xcfCr\xa8\x8f\xc9KkX\xfc{\x06\x83*p\x01y\xab\xe2\x18\x93\xff\xe9k0\x13\xe7\x92g5\xf1@k\xe7um\xf6\x00\x98\xe2\x1d\xa2k\xe0\x86\x87\xd1\r\xfc\x13\x9b\xd6)\xf3hg\xeb\x84\xd4\x9d\xb1\xfa\xac3\f\x8420h\x89\xde\x9b\xb90\xbe^\a\x1c6\xa0u\xde*a\xa2\xdc5\xcbu') (async) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:46 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x2000, 0x0, 0x0, 0x2000) 03:22:46 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) fcntl$setsig(r0, 0xa, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) fcntl$setsig(r0, 0xa, 0x1) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) (async) 03:22:46 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="89df88c494000010"]) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x1) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r2, 0x1, 0xfffff000, 0xfffffffffffff000}) openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)=ANY=[@ANYBLOB="89df88c494000010"]) (async) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) ioctl$FIOCLEX(r1, 0x5451) (async) pipe(&(0x7f0000000040)) (async) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x1) (async) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r2, 0x1, 0xfffff000, 0xfffffffffffff000}) (async) 03:22:46 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, &(0x7f0000f1dff8)={0x2}) 03:22:46 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r2, 0x0, &(0x7f0000000080)) 03:22:47 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = accept4(r1, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x80800) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:47 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000596aa1952e83bf2c1554127ad68a85dcf8ffffff7ace06460000fed7ff502cc0945f1bca7aa9e35093f41dbc940bf1cbb3cd02cc4346f388127ee92a9c2cc6034eaadda7ed2f0a364f06c892eb7f0d00"/97]) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)=':\xcb~@\x00') r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x10002) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r5, 0x1, 0xfffff000, 0x1000}) (async) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x500, 0x0) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000000c0)={r6, 0x1, 0x0, 0x100000000}) 03:22:47 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x400448c9, &(0x7f0000f1dff8)={0x2}) 03:22:47 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') (async) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r2, 0x0, &(0x7f0000000080)) 03:22:47 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='freezer.self_freezing\x00', 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x1, 0x4, 0x3, 0x6, 0xffffffffffffffe0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0x0, 0x4, 0x7, 0xfffffffffffffff0, 0xc}, @call={0x85, 0x0, 0x0, 0x13}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x8f, &(0x7f0000000240)=""/143, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x1, 0xffffffff, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0, r2, r3, 0xffffffffffffffff, 0x1]}, 0x80) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r6 = ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000002608d868b7e4975c91e788dd8beffaab", @ANYRES32=r5, @ANYRESHEX=0x0, @ANYBLOB="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"]) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r6, 0x5451) 03:22:47 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) r2 = accept4(r1, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x80800) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:47 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x200000, 0x0, 0x0, 0x2000) 03:22:47 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='freezer.self_freezing\x00', 0x0, 0x0) (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x1, 0x4, 0x3, 0x6, 0xffffffffffffffe0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0x0, 0x4, 0x7, 0xfffffffffffffff0, 0xc}, @call={0x85, 0x0, 0x0, 0x13}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x8f, &(0x7f0000000240)=""/143, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x1, 0xffffffff, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0, r2, r3, 0xffffffffffffffff, 0x1]}, 0x80) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r6 = ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000002608d868b7e4975c91e788dd8beffaab", @ANYRES32=r5, @ANYRESHEX=0x0, @ANYBLOB="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"]) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') (async) ioctl$FIOCLEX(r6, 0x5451) 03:22:47 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x400448dd, &(0x7f0000f1dff8)={0x2}) 03:22:47 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) (async) r2 = accept4(r1, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x80800) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:22:47 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') (async) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r2, 0x0, &(0x7f0000000080)) 03:22:47 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='freezer.self_freezing\x00', 0x0, 0x0) (async, rerun: 64) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x1, 0x4, 0x3, 0x6, 0xffffffffffffffe0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x0, 0x0, 0x4, 0x7, 0xfffffffffffffff0, 0xc}, @call={0x85, 0x0, 0x0, 0x13}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x8f, &(0x7f0000000240)=""/143, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x1, 0xffffffff, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0, r2, r3, 0xffffffffffffffff, 0x1]}, 0x80) (async, rerun: 32) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r6 = ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000002608d868b7e4975c91e788dd8beffaab", @ANYRES32=r5, @ANYRESHEX=0x0, @ANYBLOB="01df90d6dfc12419caedaf56ff88f3668b9bffa44991d83050a22de8ca988aabe60a704627dcef99e216faf0e42531419c3d2fa0f54f3eb24221e69cd23e1082daf4c1f8e4701c78b5ca9ac9abbbe1b97a0696286aacddf0ffa4e5e68e73d02a6ba4b430cb0facdcf7051e45064598465fe885c9921eb8252bf0fb25341db279144f3ec6215b7bd13ff6c55febb08d0a7ea8defa00ffe4eeff412c8265f742dd21a6ed6260e821604082e4addfd6742b4d92980239fa200f571c000567785a1bd3e55e25d2eb8e4bd68e2ddb079c6a18bc43eee808619373e932e96bc2e8aa750073bae899f539a7040b96478c8954689ba0dd9049627854d403"]) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r6, 0x5451) 03:22:47 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x400454ca, &(0x7f0000f1dff8)={0x2}) 03:22:48 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000596aa1952e83bf2c1554127ad68a85dcf8ffffff7ace06460000fed7ff502cc0945f1bca7aa9e35093f41dbc940bf1cbb3cd02cc4346f388127ee92a9c2cc6034eaadda7ed2f0a364f06c892eb7f0d00"/97]) ppoll(&(0x7f0000000040)=[{r1, 0x8001}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = dup(0xffffffffffffffff) (async, rerun: 32) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)=':\xcb~@\x00') (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x10002) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={r5, 0x1, 0xfffff000, 0x1000}) (async) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x500, 0x0) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000000c0)={r6, 0x1, 0x0, 0x100000000}) 03:22:48 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0xa00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x5, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1c}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000080)={0x0, 0x9}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r4, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)={'syz0', "42d32d56da08775b353400cde84ea969f42a404624b411f8b27da0801e8573ed9fe8e84e4f5451"}, 0x2b) 03:22:48 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x40049409, &(0x7f0000f1dff8)={0x2}) 03:22:48 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)={0x1}) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000340)='\x00') r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) fsetxattr(r2, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f0000000080)='\x1e,[\x00', 0x4, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x1) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') 03:22:48 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x2000}) 03:22:48 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x1000000, 0x0, 0x0, 0x2000) [ 1179.257537][T11763] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 1179.269683][T11763] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 1179.278101][T11763] CPU: 1 PID: 11763 Comm: syz-executor.2 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 1179.288618][T11763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1179.298684][T11763] RIP: 0010:sg_alloc_append_table_from_pages+0x822/0xdb0 [ 1179.305736][T11763] Code: 0c 24 48 8b 4c 24 48 48 39 c8 48 0f 46 c8 89 f0 4c 8d 3c c7 48 89 4c 24 30 48 b9 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <80> 3c 08 00 0f 85 24 05 00 00 4d 8b 3f 4c 89 e0 31 ff 83 e0 03 48 [ 1179.326144][T11763] RSP: 0018:ffffc9000af9fc48 EFLAGS: 00010212 [ 1179.332230][T11763] RAX: 0000000000000002 RBX: 0000000000000001 RCX: dffffc0000000000 [ 1179.340210][T11763] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000010 [ 1179.348212][T11763] RBP: 00000000fffff000 R08: fffffffffffff000 R09: ffff88807a001340 [ 1179.356193][T11763] R10: ffffffff83dcba31 R11: 0000000000000001 R12: 0000000000000002 [ 1179.364178][T11763] R13: ffff88807a001340 R14: 0000000000000000 R15: 0000000000000010 [ 1179.372159][T11763] FS: 00007fd089e08700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 1179.381102][T11763] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1179.387699][T11763] CR2: 0000001b2e022000 CR3: 0000000077ac1000 CR4: 0000000000350ee0 [ 1179.395682][T11763] Call Trace: [ 1179.398960][T11763] [ 1179.401905][T11763] sg_alloc_table_from_pages_segment+0xc9/0x260 [ 1179.408186][T11763] ? sg_alloc_append_table_from_pages+0xdb0/0xdb0 [ 1179.414650][T11763] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1179.420232][T11763] get_sg_table.isra.0+0xbb/0x160 [ 1179.425286][T11763] begin_cpu_udmabuf+0x130/0x1d0 [ 1179.430226][T11763] ? map_udmabuf+0xa0/0xa0 [ 1179.434646][T11763] dma_buf_begin_cpu_access+0xfd/0x1d0 [ 1179.440109][T11763] dma_buf_ioctl+0x259/0x2b0 [ 1179.444701][T11763] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 1179.450414][T11763] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1179.457040][T11763] ? dma_buf_begin_cpu_access+0x1d0/0x1d0 [ 1179.462783][T11763] __x64_sys_ioctl+0x193/0x200 [ 1179.467565][T11763] do_syscall_64+0x35/0xb0 [ 1179.471990][T11763] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1179.477899][T11763] RIP: 0033:0x7fd08b493049 [ 1179.482325][T11763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 03:22:48 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x1fa7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) unshare(0x20000400) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000040)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000eed000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x45f5, 0x2000000, 0x0, 0x0, 0x2000) 03:22:48 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x2000}) 03:22:48 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x2000}) (rerun: 32) 03:22:48 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000040)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000, 0x2000}]}) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) [ 1179.502215][T11763] RSP: 002b:00007fd089e08168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1179.510649][T11763] RAX: ffffffffffffffda RBX: 00007fd08b5a5f60 RCX: 00007fd08b493049 [ 1179.518627][T11763] RDX: 00000000200000c0 RSI: 0000000040086200 RDI: 0000000000000004 [ 1179.526606][T11763] RBP: 00007fd08b4ed08d R08: 0000000000000000 R09: 0000000000000000 [ 1179.534583][T11763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1179.542567][T11763] R13: 00007ffccb43955f R14: 00007fd089e08300 R15: 0000000000022000 [ 1179.550560][T11763] [ 1179.553577][T11763] Modules linked in: [ 1179.566104][T11763] ---[ end trace 0000000000000000 ]--- [ 1179.572067][T11763] RIP: 0010:sg_alloc_append_table_from_pages+0x822/0xdb0 [ 1179.582240][T11763] Code: 0c 24 48 8b 4c 24 48 48 39 c8 48 0f 46 c8 89 f0 4c 8d 3c c7 48 89 4c 24 30 48 b9 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <80> 3c 08 00 0f 85 24 05 00 00 4d 8b 3f 4c 89 e0 31 ff 83 e0 03 48 [ 1179.602975][T11763] RSP: 0018:ffffc9000af9fc48 EFLAGS: 00010212 03:22:48 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x40086602, &(0x7f0000f1dff8)={0x2}) 03:22:48 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000004c0), 0x2) r1 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000040)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000, 0x2000}]}) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000000)='/dev/udmabuf\x00') ioctl$FIOCLEX(r1, 0x5451) [ 1179.617672][T11763] RAX: 0000000000000002 RBX: 0000000000000001 RCX: dffffc0000000000 [ 1179.652607][T11763] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000010 [ 1179.686229][T11763] RBP: 00000000fffff000 R08: fffffffffffff000 R09: ffff88807a001340 [ 1179.719297][T11763] R10: ffffffff83dcba31 R11: 0000000000000001 R12: 0000000000000002 [ 1179.735929][T11763] R13: ffff88807a001340 R14: 0000000000000000 R15: 0000000000000010 [ 1179.744043][T11763] FS: 00007fd089e08700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 1179.766194][T11763] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1179.773226][T11763] CR2: 0000000020f1dff8 CR3: 0000000077ac1000 CR4: 0000000000350ef0 [ 1179.783666][T11763] Kernel panic - not syncing: Fatal exception [ 1179.790333][T11763] Kernel Offset: disabled [ 1179.794643][T11763] Rebooting in 86400 seconds..