7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:34:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:34:19 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:19 executing program 5: syz_mount_image$xfs(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x245, &(0x7f0000000080)={[{@prjquota}, {@swalloc}, {@norecovery}, {@sysvgroups}, {@grpquota}]}, 0x0, 0x9658, &(0x7f0000009680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x4030580a, 0x0) 00:34:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) 00:34:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 3079.248098][T23874] syz-executor.5[23874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3079.256396][T23876] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:34:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) [ 3079.313684][T23884] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:34:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 3079.431516][T23893] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3079.474739][T23893] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:20 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 00:34:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:34:20 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/18, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) 00:34:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:34:20 executing program 5: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000005640), 0x1, 0x55a8, &(0x7f0000005680)="$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") r0 = open(&(0x7f00000025c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x1}) 00:34:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) [ 3080.133911][T23919] syz-executor.5[23919]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3080.147803][T23915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 00:34:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 00:34:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:20 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/18, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) 00:34:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 00:34:20 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 00:34:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:34:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 00:34:20 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/18, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) 00:34:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x18a8}, 0x48) 00:34:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 00:34:20 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000380)={r0}) 00:34:20 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/19, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) 00:34:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 00:34:21 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 00:34:21 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 00:34:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:34:21 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x28) socketpair(0x1d, 0x3, 0x3, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 00:34:21 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/19, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) 00:34:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 00:34:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 3081.300048][T23979] can: request_module (can-proto-3) failed. 00:34:21 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@ip_ttl={{0x14}}], 0x18}, 0x0) 00:34:21 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/19, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) 00:34:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 00:34:21 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x2, &(0x7f00000004c0)=@raw=[@btf_id], &(0x7f0000000080)='syzkaller\x00', 0x7, 0xc, &(0x7f00000000c0)=""/12, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 00:34:21 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000400)=@raw=[@func, @initr0, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000440)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 00:34:21 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:21 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:34:21 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) 00:34:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 00:34:21 executing program 5: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) 00:34:21 executing program 3: getpid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) 00:34:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 00:34:22 executing program 5: syz_80211_inject_frame(&(0x7f00000000c0)=@device_a={0x0, 0x2, 0x11, 0x0, 0x0, 0x13}, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 00:34:22 executing program 3: getpid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) 00:34:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) [ 3082.292326][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.306587][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 00:34:22 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:34:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) 00:34:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:34:22 executing program 3: getpid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) [ 3082.936538][T24027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3082.973020][T24043] __nla_validate_parse: 14 callbacks suppressed 00:34:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:34:22 executing program 3: r0 = getpid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) [ 3082.973037][T24043] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:34:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:34:23 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) 00:34:23 executing program 3: r0 = getpid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3083.302912][T24067] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:23 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) syz_io_uring_complete(0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) 00:34:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:34:23 executing program 3: r0 = getpid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:23 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) 00:34:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:34:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 00:34:23 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) [ 3083.884098][T24081] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:23 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) 00:34:23 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 00:34:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) [ 3084.016019][T24101] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:24 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:24 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:24 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}}, 0x0) 00:34:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:34:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) 00:34:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}}, 0x0) 00:34:24 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:24 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) [ 3084.746936][T24115] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) 00:34:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}}, 0x0) 00:34:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) [ 3084.886758][T24133] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3084.988155][T24141] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:25 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:25 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:34:25 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 00:34:25 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) 00:34:25 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) [ 3085.642216][T24153] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:25 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 00:34:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 00:34:25 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000500)="93a745711001619b9a2be11a86dd", 0x5ea, 0x0, 0x0, 0x0) [ 3085.846746][T24177] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:26 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 00:34:26 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:26 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) 00:34:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:34:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:34:26 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) 00:34:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) [ 3086.488986][T24179] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:26 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:26 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:34:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:34:27 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:27 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r2 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r2, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:34:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:34:27 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x11, r1) 00:34:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:34:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:34:27 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:27 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:27 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r2 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r2, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) 00:34:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 00:34:27 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:27 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:34:27 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r2 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r2, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:27 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:27 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) 00:34:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 00:34:27 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) 00:34:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 00:34:27 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) ptrace(0x10, 0x0) landlock_restrict_self(r0, 0x0) ptrace(0x11, 0x0) 00:34:27 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:27 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:34:27 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) ptrace(0x10, 0x0) landlock_restrict_self(r0, 0x0) ptrace(0x11, 0x0) 00:34:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 00:34:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a74571100161", 0x7, 0x0, 0x0, 0x0) 00:34:27 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:27 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:27 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3087.988057][T24303] __nla_validate_parse: 5 callbacks suppressed [ 3087.988074][T24303] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:27 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) ptrace(0x10, 0x0) landlock_restrict_self(r0, 0x0) ptrace(0x11, 0x0) 00:34:28 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a74571100161", 0x7, 0x0, 0x0, 0x0) 00:34:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 00:34:28 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:28 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3088.149932][T24322] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:28 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:34:28 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 00:34:28 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a74571100161", 0x7, 0x0, 0x0, 0x0) 00:34:28 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:34:28 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:28 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:28 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) [ 3088.306148][T24339] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:28 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) landlock_restrict_self(0xffffffffffffffff, 0x0) ptrace(0x11, r0) 00:34:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:34:28 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:28 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) landlock_restrict_self(0xffffffffffffffff, 0x0) ptrace(0x11, r0) 00:34:28 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be1", 0xb, 0x0, 0x0, 0x0) 00:34:28 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:34:28 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:34:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 00:34:28 executing program 5: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) landlock_restrict_self(0xffffffffffffffff, 0x0) ptrace(0x11, r0) [ 3088.640679][T24386] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:28 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:28 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 00:34:28 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be1", 0xb, 0x0, 0x0, 0x0) 00:34:28 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 00:34:28 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:28 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) [ 3088.855952][T24413] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:34:28 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be1", 0xb, 0x0, 0x0, 0x0) 00:34:28 executing program 2: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r0], 0x1c}}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:28 executing program 5: r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) [ 3089.039145][T24431] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:29 executing program 2: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r0], 0x1c}}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:34:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86", 0xd, 0x0, 0x0, 0x0) 00:34:29 executing program 5: r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:29 executing program 2: ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r0], 0x1c}}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x88}}, 0x0) 00:34:29 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:34:29 executing program 2: r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x88}}, 0x0) [ 3089.349025][T24453] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86", 0xd, 0x0, 0x0, 0x0) 00:34:29 executing program 5: r0 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:29 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0), 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:29 executing program 2: r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x88}}, 0x0) [ 3089.482710][T24467] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3089.488893][T11007] Bluetooth: hci1: command 0x0406 tx timeout 00:34:29 executing program 2: r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:34:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x88}}, 0x0) 00:34:29 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:29 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:29 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0), 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="010f1700010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000003c000200000000000000000000000000a2c234a0a516a896ff00000018000580140002000000007d0000000000000000ffffffff0800070001"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000500)="93a745711001619b9a2be11a86", 0xd, 0x0, 0x0, 0x0) 00:34:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x88}}, 0x0) 00:34:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x0, 0x25dfdbfd}, 0x1c}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:34:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x88}}, 0x0) [ 3089.836987][T24496] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:34:29 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0), 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:29 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:29 executing program 0: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x3, 0x0, 0x1f, 0x0, 0x27, 0x8}, r1}}, 0x120) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}, @acquire_done={0x40106309, 0x3}, @free_buffer], 0x0, 0x0, 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)=@newpolicy={0x124, 0x13, 0x800, 0x70bd28, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@local, 0x4e21, 0xff, 0x0, 0xfff8, 0x0, 0x20, 0x80, 0x6}, {0x0, 0x0, 0x2, 0x2, 0x9, 0x5, 0x0, 0xed}, {0x0, 0x0, 0xffffffffffffffc5, 0xbf}}, [@etimer_thresh={0x8}, @algo_aead={0x67, 0x12, {{'aegis128l\x00'}, 0xd8, 0x0, "941c08c71129e3e7c3573db095b2dc591a5558d7caaf25ad8200fd"}}]}, 0x124}, 0x1, 0x0, 0x0, 0x90}, 0x0) r3 = openat$full(0xffffff9c, &(0x7f0000000d00), 0x400, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000dc0), 0x6, 0x8a03) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000e00)={0x0, 0x0, r4}) openat$full(0xffffff9c, &(0x7f0000000e40), 0x20, 0x0) 00:34:29 executing program 1: syz_emit_ethernet(0xdd, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb0011428ebf"], 0x0) 00:34:29 executing program 1: socketpair$unix(0xa, 0x3, 0x2, &(0x7f0000000280)) 00:34:29 executing program 0: socketpair$unix(0x2, 0xa, 0x300, &(0x7f0000000280)) 00:34:30 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:30 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:30 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:30 executing program 0: openat$mice(0xffffffffffffff9c, &(0x7f0000000500), 0x600000) 00:34:30 executing program 1: socketpair$unix(0xa, 0x2, 0x3a, &(0x7f0000000280)) 00:34:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000cc0)="ab04da4080ad2ae1a0e5e59711c440ca0fa3d87325d6bbd8e041f12d467bc487f5c7a65f930a495a210b7454ba8cfc74237261d2cf2e1f4f417a0572e1a8ea3551fb54c8f24f485959d33ddb62bbc5c8a3e7970f1c0f4792ef09a9216c41be60a91c9fb5d5b7f5d2474ac0d06d1293b2c82f74a4dfb41ad2355a5730e4c63f12e6d783cfe633598be74c75608ed8c8c61cd1e652177a49693cd3b25107d7408fad985bbd449850a2d0c3cdcddd4fd521cd516807993702d35c6bbb33d849fe0c4230dadf06bf3c6f9524c33af9db733c3083b10f40c7b60bbeebf729fb61014c77d7cf6b65beb11f30c4313d73b17b6454906f63a1840439ad3a3a36da6adbc7fd8d53ce75a8ed284dd72a529a67084f74d8586fd1aa6f7d174c355df3c9734f9b46d609203161d65564fadc3ff77ecfdad43af67358dbd08691d5877bbc500f1d316f15d8878b2d33482c0670ff177b8231f016fe2805f878ced0cf216556893b737666754b816fc1c04248e621a94a3f", 0x171) 00:34:30 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x1000, 0x0) 00:34:30 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@hopopts={{0x18}}], 0x18}, 0x0) 00:34:30 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:30 executing program 4: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) close$fd_v4l2_buffer(0xffffffffffffffff) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x4000}, 0xc) close$fd_v4l2_buffer(0xffffffffffffffff) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x1, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x2eb1, 0x1f, "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", 0x1f, 0x1, 0x7f, 0x3, 0x3f, 0x2, 0x4}, r1}}, 0x120) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 00:34:30 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)="db") sched_rr_get_interval(0x0, &(0x7f0000002900)) 00:34:30 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={0x0}}, 0x200488d1) 00:34:30 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) [ 3090.466946][T24557] vxcan1 speed is unknown, defaulting to 1000 00:34:30 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001c40)={'batadv_slave_0\x00'}) 00:34:30 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x6, 0x0, 0x0) 00:34:30 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:30 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) r2 = timerfd_create(0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) dup3(r1, r3, 0x0) r4 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 00:34:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 00:34:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d00)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), r0) 00:34:30 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:30 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:30 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x1, &(0x7f0000000000)=@raw=[@ldst], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 00:34:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14}, 0x14}}, 0x0) 00:34:31 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:31 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:31 executing program 1: syz_open_dev$vcsu(&(0x7f0000000000), 0xffffffffffffffff, 0x40) 00:34:31 executing program 4: bpf$OBJ_GET_MAP(0x21, &(0x7f0000000a00)=@generic={0x0, 0x0, 0x20}, 0x18) 00:34:31 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:31 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x40043, 0x0) 00:34:31 executing program 1: r0 = socket(0x29, 0x5, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)='z', 0x1}}, 0x0) 00:34:31 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) 00:34:31 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:31 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:31 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:31 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:31 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x301100, 0x0) 00:34:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xa, 0x4) 00:34:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x13, 0x4) 00:34:31 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 00:34:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x6, 0x0, &(0x7f0000000040)) 00:34:31 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) landlock_restrict_self(r0, 0x0) ptrace(0x11, r1) 00:34:31 executing program 0: pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap$snddsp_control(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x0, 0x11, r0, 0x83000000) 00:34:31 executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:34:31 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3091.873854][T24658] vxcan1 speed is unknown, defaulting to 1000 00:34:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x5452, &(0x7f0000000080)={'wpan4\x00'}) 00:34:32 executing program 4: r0 = socket(0x29, 0x5, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)='z', 0x1}}, 0x44090) 00:34:32 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(0xffffffffffffffff, 0x0) ptrace(0x11, r1) 00:34:32 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8946, &(0x7f0000000080)={'wpan4\x00'}) 00:34:32 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:32 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(0xffffffffffffffff, 0x0) ptrace(0x11, r1) 00:34:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 00:34:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8937, &(0x7f0000000080)={'wpan4\x00'}) 00:34:32 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(0xffffffffffffffff, 0x0) ptrace(0x11, r1) 00:34:32 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x14, r1, 0x605}, 0x14}}, 0x0) 00:34:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8946, &(0x7f0000000080)={'wpan4\x00'}) 00:34:32 executing program 4: getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x1) 00:34:32 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:32 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0xffffffffffffffff, r1) 00:34:32 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x66003, 0x0) 00:34:32 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:32 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0xffffffffffffffff, r1) 00:34:32 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8946, &(0x7f0000000080)={'wpan4\x00'}) 00:34:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x891f, &(0x7f0000000080)={'wpan4\x00'}) 00:34:32 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0xffffffffffffffff, r1) 00:34:32 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000580)={0x5, 0x10, 0xfa00, {0x0, r2}}, 0x18) 00:34:32 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:33 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 00:34:33 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120102001402ce40fd07010078a0000800010902330001000000010904000001f4a3e700090509f6"], 0x0) 00:34:33 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, 0x0) 00:34:33 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r2, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8946, &(0x7f0000000080)={'wpan4\x00'}) 00:34:33 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:33 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 00:34:33 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, 0x0) 00:34:33 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f0000000700)) 00:34:33 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r2, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:33 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x40, r1, 0x605, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0xfffffffffffffd35, 0x34, 0x12}, @IEEE802154_ATTR_DEV_NAME={0x0, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000805}, 0x20000010) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r1}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, 0x0, 0x0) 00:34:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x111}}, 0x20) 00:34:33 executing program 5: r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) landlock_restrict_self(r0, 0x0) ptrace(0x11, 0x0) [ 3093.701910][T24785] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3093.799215][T27460] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 3094.189303][T27460] usb 1-1: config index 0 descriptor too short (expected 51, got 27) [ 3094.197412][T27460] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3094.209443][T27460] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 3094.310195][T27460] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=a0.78 [ 3094.319333][T27460] usb 1-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 3094.328772][T27460] usb 1-1: Product: syz [ 3094.335437][T27460] usb 1-1: config 0 descriptor?? [ 3094.627430][T27460] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 3094.636914][T27460] usb 1-1: USB disconnect, device number 12 [ 3094.652285][T13917] udevd[13917]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 00:34:35 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120102001402ce40fd07010078a0000800010902330001000000010904000001f4a3e700090509f6"], 0x0) 00:34:35 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r2, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r2, 0x1}, 0x14}}, 0x0) 00:34:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 00:34:35 executing program 5: r0 = semget(0x1, 0x1, 0x200) semtimedop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0xa9ee07b1c9da984f}], 0x1, 0x0) semctl$IPC_RMID(r0, 0xd000000, 0x0) 00:34:35 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:35 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120102001402ce40fd07010078a0000800010902330001000000010904000001f4a3e700090509f6"], 0x0) 00:34:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 00:34:35 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)='['}) 00:34:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 00:34:35 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r2, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8924, &(0x7f0000000080)={'wpan4\x00'}) [ 3095.399461][T11676] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 3095.449598][T11674] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 3095.770306][T11676] usb 1-1: config index 0 descriptor too short (expected 51, got 27) [ 3095.778787][T11676] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3095.788557][T11676] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 3095.809554][T11674] usb 5-1: config index 0 descriptor too short (expected 51, got 27) [ 3095.818128][T11674] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3095.831883][T11674] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 3095.869682][T11676] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=a0.78 [ 3095.878829][T11676] usb 1-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 3095.887081][T11676] usb 1-1: Product: syz [ 3095.894299][T11676] usb 1-1: config 0 descriptor?? [ 3095.929541][T11674] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=a0.78 [ 3095.938760][T11674] usb 5-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 3095.950433][T11674] usb 5-1: Product: syz [ 3095.956265][T11674] usb 5-1: config 0 descriptor?? [ 3096.187063][T11676] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 3096.197690][T11676] usb 1-1: USB disconnect, device number 13 [ 3096.224431][T16383] udevd[16383]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3096.284657][T11674] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 3096.294413][T11674] usb 5-1: USB disconnect, device number 58 [ 3096.310308][T15318] udevd[15318]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 00:34:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) 00:34:36 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r2, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x89a0, &(0x7f0000000080)={'wpan4\x00'}) 00:34:36 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:36 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120102001402ce40fd07010078a0000800010902330001000000010904000001f4a3e700090509f6"], 0x0) 00:34:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8927, &(0x7f0000000080)={'wpan4\x00'}) 00:34:36 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120102001402ce40fd07010078a0000800010902330001000000010904000001f4a3e700090509f6"], 0x0) 00:34:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x0, @remote}}}, 0xa0) 00:34:36 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r2, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8913, &(0x7f0000000080)={'wpan4\x00'}) 00:34:36 executing program 1: keyctl$dh_compute(0x17, &(0x7f0000000500), 0x0, 0x0, 0x0) 00:34:36 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r2, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:36 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x2000}) 00:34:36 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x10, 0x0) 00:34:36 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffffd}}, 0x0) [ 3097.029535][T11674] usb 1-1: new high-speed USB device number 14 using dummy_hcd 00:34:37 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) [ 3097.129706][ T4443] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 3097.409608][T11674] usb 1-1: config index 0 descriptor too short (expected 51, got 27) [ 3097.417830][T11674] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3097.427605][T11674] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 3097.509642][T11674] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=a0.78 [ 3097.518768][T11674] usb 1-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 3097.531909][T11674] usb 1-1: Product: syz [ 3097.537613][T11674] usb 1-1: config 0 descriptor?? [ 3097.540200][ T4443] usb 5-1: config index 0 descriptor too short (expected 51, got 27) [ 3097.553147][ T4443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3097.562855][ T4443] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 3097.662556][ T4443] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=a0.78 [ 3097.672288][ T4443] usb 5-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 3097.681325][ T4443] usb 5-1: Product: syz [ 3097.686934][ T4443] usb 5-1: config 0 descriptor?? [ 3097.817138][T11674] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 3097.825874][T11674] usb 1-1: USB disconnect, device number 14 [ 3097.844986][T13917] udevd[13917]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3097.977978][ T4443] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 3097.987547][ T4443] usb 5-1: USB disconnect, device number 59 [ 3098.006390][T15318] udevd[15318]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 00:34:38 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120102001402ce40fd07010078a0000800010902330001000000010904000001f4a3e700090509f6"], 0x0) 00:34:38 executing program 5: r0 = fsopen(&(0x7f00000001c0)='jfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) 00:34:38 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120102001402ce40fd07010078a0000800010902330001000000010904000001f4a3e700090509f6"], 0x0) 00:34:38 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r2, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) 00:34:38 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:38 executing program 5: fsopen(&(0x7f0000000080)='ntfs\x00', 0x0) 00:34:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end]}}}}}) [ 3098.474029][T24878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3098.481328][T24878] IPv6: NLM_F_CREATE should be set when creating new route [ 3098.488560][T24878] IPv6: NLM_F_CREATE should be set when creating new route 00:34:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x6c, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38}]}}]}, 0x6c}, 0x1, 0x8100000000000000}, 0x0) 00:34:38 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r2, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:38 executing program 5: r0 = syz_io_uring_setup(0x1e6, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) 00:34:38 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100"], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3098.589675][T11198] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 3098.809818][ T4443] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 3098.999856][T11198] usb 1-1: config index 0 descriptor too short (expected 51, got 27) [ 3099.008022][T11198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3099.018092][T11198] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 3099.139977][T11198] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=a0.78 [ 3099.149218][T11198] usb 1-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 3099.157416][T11198] usb 1-1: Product: syz [ 3099.163909][T11198] usb 1-1: config 0 descriptor?? [ 3099.229875][ T4443] usb 5-1: config index 0 descriptor too short (expected 51, got 27) [ 3099.238169][ T4443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3099.248097][ T4443] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 3099.342753][ T4443] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=a0.78 [ 3099.351982][ T4443] usb 5-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 3099.360058][ T4443] usb 5-1: Product: syz [ 3099.365380][ T4443] usb 5-1: config 0 descriptor?? [ 3099.437614][T11198] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 3099.448502][T11198] usb 1-1: USB disconnect, device number 15 [ 3099.474448][T13917] udevd[13917]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3099.658383][ T4443] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 3099.667272][ T4443] usb 5-1: USB disconnect, device number 60 [ 3099.685077][T15318] udevd[15318]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 00:34:39 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f00000020c0), 0xa4c0, 0x0) 00:34:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001900)={0x1, &(0x7f00000018c0)=[{}]}, 0x10) 00:34:40 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x35}, {0x6}]}) 00:34:40 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100"], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:40 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:40 executing program 5: ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 00:34:40 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x83000000) 00:34:40 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x100}]}) 00:34:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'erspan0\x00', 0x0}) 00:34:40 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)='J', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="2e26dc900b80bba5f3b721fd0260bac6af2ae0fb0a2c04e0d403923ab0102f97de6edc8253deea63b20de689bbfb90accc3dc1c168088d546172c20d15898c484993a70ec2ca159de30855ee43016716397510e5fe6bd2a708246cbd79fdac49eb8028", 0x63}, {&(0x7f0000000180)="1be1560825b51742606d883d6dc00dd48fc6089286f96b729b17a83a27410fea2ca5804a72af", 0x26}, {&(0x7f00000001c0)="505de045387b1bcc8169e27a138146fc423dd3f22836d6a72f8cef0150ce0515b7045a89d53fc9263754950eb0483d8d23613b3ff339659994f605ab27beeb64ddd6123a62ba25a275b96b30dde6ce3ae6a46636ebbd1e5612ea8eeacfa0d8882049ea75ef2a086677a386929f6fff4393fabee4a660151e8a5f7479b411dc16da91503b2683672322327ef28b136f46a402a4b5aab6de5b897b01c3bc2a377e85f476896e49", 0xa6}, {&(0x7f0000000280)="844fccfb14aa97b49b6a8e118859234e3f12c7ecfd75423f7915fdc539b5071caff4197a14e8b0964badb18e1b34f3b4b1138f2f108e2ff0417483484dc685006db5de9a284a4791ed570e15251685ba79eb1f4eb38d25b6670277692c0d989ece900c43235d45204ce4eeb1c9b8530f4b9e4c7cb225c833a9e16c", 0x8081}, {&(0x7f0000000300)="5d59a8ff98e58e788f1e1ab926f7a79d3e96eb6256e4b8d5235f28eed520bf4933", 0x21}, {&(0x7f00000004c0)="ec436da7cf6c352ce255c1c97fca8d5955fd8659d90f08248e2a63991fe56a9a4454ea5a57c9c4251f31da067101b063adfaba5fb9f9e8f4f9c355f01c", 0x3d}], 0x6}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000840)='%', 0x1}], 0x1}}], 0x2, 0x0) [ 3100.202725][ T28] audit: type=1326 audit(1693787680.136:36853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24917 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f41e7cae9 code=0x0 00:34:40 executing program 1: sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040004}, 0x0) syz_io_uring_setup(0x6abb, &(0x7f00000025c0)={0x0, 0x4e87, 0x0, 0x2, 0xa7}, &(0x7f0000002640), &(0x7f0000002680)) 00:34:40 executing program 5: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) 00:34:40 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100"], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:40 executing program 0: syz_io_uring_setup(0x6c14, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x2d8}, &(0x7f0000000300), &(0x7f0000000340)) 00:34:40 executing program 4: syz_open_dev$video4linux(&(0x7f0000002000), 0xb071, 0x82002) 00:34:40 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x4c}, 0x4c}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)={0x4c}, 0x4c}}, 0x0) 00:34:40 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:34:40 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x84, 0x0, &(0x7f0000000040)) 00:34:40 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:40 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002f00), 0x0) ioctl$TCGETS(r0, 0x5401, 0x0) 00:34:40 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) fcntl$lock(r0, 0x0, 0x0) 00:34:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8923, &(0x7f0000000180)={'syztnl1\x00', 0x0}) 00:34:40 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) io_cancel(0x0, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) 00:34:40 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:34:40 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) [ 3100.668678][T24972] syz-executor.0[24972]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3100.697479][T24972] loop0: detected capacity change from 0 to 2048 00:34:40 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3100.734889][T24976] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3100.750242][T24972] syz-executor.0: attempt to access beyond end of device [ 3100.750242][T24972] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0xa, 0x0, 0x0) 00:34:40 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:40 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:40 executing program 5: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:40 executing program 4: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x4}, &(0x7f0000000100)={0x5}, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0xf1a1]}, 0x8}) 00:34:40 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) [ 3101.001788][ T4443] usb 2-1: new high-speed USB device number 12 using dummy_hcd 00:34:41 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x66, 0x0, &(0x7f0000000040)) [ 3101.077352][T24990] syz-executor.0[24990]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3101.078220][T24988] syz-executor.5[24988]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 00:34:41 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000340)) 00:34:41 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3101.158365][T24990] loop0: detected capacity change from 0 to 2048 [ 3101.217450][T25004] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3101.217686][T24990] syz-executor.0: attempt to access beyond end of device [ 3101.217686][T24990] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 3101.360121][ T4443] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3101.375052][ T4443] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3101.397776][ T4443] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3101.414661][ T4443] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3101.434449][ T4443] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3101.446292][ T4443] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 3101.730095][ T4443] usb 2-1: string descriptor 0 read error: -22 [ 3101.738672][ T4443] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3101.747893][ T4443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3102.052908][ T4443] cdc_ncm 2-1:1.0: bind() failure [ 3102.061343][ T4443] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3102.068173][ T4443] cdc_ncm 2-1:1.1: bind() failure [ 3102.077728][ T4443] usb 2-1: USB disconnect, device number 12 00:34:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000), 0x8) 00:34:42 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)=0xc) 00:34:42 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:42 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:34:42 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:42 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:42 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000027c0), 0x0, 0x0) read$qrtrtun(r0, &(0x7f0000000000)=""/42, 0x2a) 00:34:42 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x2, 0x0, 0x0) 00:34:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0xb84}, 0x48) 00:34:42 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3102.548270][T25024] syz-executor.0[25024]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 00:34:42 executing program 4: r0 = socket(0x1d, 0x2, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 00:34:42 executing program 5: openat$uinput(0xffffffffffffff9c, 0xfffffffffffffffe, 0x0, 0x0) [ 3102.620496][T25024] loop0: detected capacity change from 0 to 2048 [ 3102.659284][T25040] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds 00:34:42 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) 00:34:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x5451, 0x0) [ 3102.671646][T25024] syz-executor.0: attempt to access beyond end of device [ 3102.671646][T25024] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:42 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:42 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x5452, 0x0) 00:34:42 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) [ 3102.894987][T25057] syz-executor.0[25057]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3102.926949][T25057] loop0: detected capacity change from 0 to 2048 [ 3102.943020][T25058] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3102.954215][T25057] syz-executor.0: attempt to access beyond end of device [ 3102.954215][T25057] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:43 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:43 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80108906, 0x0) 00:34:43 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) accept4$ax25(r0, 0x0, 0x0, 0x100000) 00:34:43 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x2}) 00:34:43 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:43 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:43 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000010c0), 0x10c00, 0x0) 00:34:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000180)) 00:34:43 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x24, 0x0, 0x0) [ 3103.107424][T25063] syz-executor.0[25063]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 00:34:43 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) 00:34:43 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x894a, &(0x7f0000000080)={'wlan0\x00'}) [ 3103.205180][T25063] loop0: detected capacity change from 0 to 2048 [ 3103.243248][T25083] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3103.244238][T25063] syz-executor.0: attempt to access beyond end of device [ 3103.244238][T25063] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:43 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:43 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f00000000c0)) 00:34:43 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8983, 0x0) 00:34:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[], 0x38}}, 0x0) 00:34:43 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:43 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:43 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="01", @ANYRES32]) 00:34:43 executing program 1: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) 00:34:43 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a3, &(0x7f0000000080)={'wlan0\x00'}) 00:34:43 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3103.545262][T25105] syz-executor.0[25105]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 00:34:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 00:34:43 executing program 5: r0 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) [ 3103.642600][T25105] loop0: detected capacity change from 0 to 2048 [ 3103.675977][T25123] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3103.676192][T25105] syz-executor.0: attempt to access beyond end of device [ 3103.676192][T25105] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:43 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:43 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x2, 0x0, &(0x7f0000000040)) 00:34:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x85, 0x0, &(0x7f0000000040)) 00:34:43 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 00:34:43 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 00:34:43 executing program 1: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x10002, 0x0) [ 3103.948896][T25135] syz-executor.0[25135]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 00:34:43 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0xd3, 0x7fff}, 0xc) 00:34:43 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3103.991543][T25135] loop0: detected capacity change from 0 to 2048 [ 3104.029550][T25146] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds 00:34:44 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x0, 0x0, 0x0, {0x7, 0x7, './file0', './file0'}}, 0x28}}, 0x0) [ 3104.040726][T25135] syz-executor.0: attempt to access beyond end of device [ 3104.040726][T25135] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:44 executing program 1: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x205c0, 0x0) [ 3104.083874][T25149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:34:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x75, 0x0, 0x0) 00:34:44 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 00:34:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 00:34:44 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:44 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:44 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:44 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0xfff3}, 0x8) 00:34:44 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) ioctl$UDMABUF_CREATE(r1, 0x4020940d, &(0x7f0000000280)={r0}) [ 3104.347556][T25164] syz-executor.0[25164]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 00:34:44 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) [ 3104.394933][T25164] loop0: detected capacity change from 0 to 2048 [ 3104.421048][T25167] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:34:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x70, 0x0, &(0x7f0000000040)=0x4) 00:34:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 00:34:44 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) [ 3104.452371][T25175] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3104.452653][T25164] syz-executor.0: attempt to access beyond end of device [ 3104.452653][T25164] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:44 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8990, &(0x7f0000000080)={'wlan0\x00'}) 00:34:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 00:34:44 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:44 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x10002, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) 00:34:44 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40086602, &(0x7f0000000080)={'wlan0\x00'}) [ 3104.592624][T25193] syz-executor.0[25193]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3104.631652][T25190] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3104.744640][T25193] loop0: detected capacity change from 0 to 2048 [ 3104.774924][T25203] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3104.775216][T25193] syz-executor.0: attempt to access beyond end of device [ 3104.775216][T25193] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:44 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 00:34:44 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x20642, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40305828, 0xffffffffffffffff) 00:34:44 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000100)) 00:34:44 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:44 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$eJzs3U2oXNUBAOBz5715+W8mNqlPjZrWFu2P7/li0mpTTcRAKYUQ6E67CTGmIc+0NCJVXKQuSjeiIGbVRSzddKO0paibElwUKSiltAhdWek2BaELKegrb+aceTMnM9yZvJ878+b74MyZe8+de86duXPnzr3nJwATq9Z8PHRotgjh1bdfOX77a+++tDznaHuJRvNxumOqHkIo4vR0tr4Pp1rxpx8/f7pXXISDzcc0HU5ca792RwjhUjgQroZGePHxy9MfvHni/dfD+WdOHn/vrfXZ+hXFemcAAAAj4OTVI4f2/euvt+353xt3HAtb2vPT+XkjTu+M5/3H4olyOl+uhe7poiN0msmWm46hli031WO5znzq2XLTffKfydZb77PclpL8pzrm9dpuGGdpP26EojbXNV2rzc21/pOH5v/6mWLuwrnFJy9WVFBgzf33zhDCAUEQJjEs7a76CATQkt8vvM6ltb1T117b9GD5X3uk1vv1sBpbW9FG7/85+Y92/r/5uSMOa2cT7k1/39WxXel7tDNO5/cR8vpLw37/0/ry+xH1AQvb7z7CuNxf6FfOqQ0ux43qV/58v9isHopxeh8eztLj96B5Oy3/TMflMwZ6+8T1f0FYk3BLUX0Zhg1LVR+AgJGV15tbilJ6Xq8vT99Skr61JH1bSfr2kvQdJekwyf7w9Evh5WLlelf+n37Y62HpOtuuGH9uyPLk1yOHzT+v9zus1eaf1yeGkbbjz5cfeOKxv7Xq/xft/f+zuL8fiNON+N26GhdI1wvz6+rtuv+N7mxqfZa7KSvOrh7LN5/v7V6u2LuyntBxnLmuHLPpFa0rurv7Lbe/e/2NbLltMWzNypufn2zPXpfOP9JxdWdXaVa2t55tx0xWjnRc2RPjvBxwI9L+2F3/f3nva9b/b9/Gmg314slzi2fui9NpP313qr5lef7CRhccWLVB2//Mhu72Pzvb8+u1zuPC7pX5RedxoZHNP9hn/v1xOv3O/WhqW3P+3OkfLz6x1hsPE+7is8+dP7W4eOannozak3AphBEohieT9CQdF04tVntcAtbf/NNP/WT+4rPP3XvuqVNnz5w9c2Hh8MIDDx5eWPjmg/PN8/r5zrP7zVhdGCbXyq9/1SUBAAAAAAAAAAAABnX2o/kr/3jnW/9stf9faf+X2v+nmr+p/f8vs/b/WTP/dgXh1A4wteO7rr191sHqTLZcPYbPZ+vfm+WzL3vdF2LcHscvtv9P2eX9uqby3JzNz/vvTcvNZvPz/lJmsj5IivCL7Z3l+1KMX4jxrwNUqNjWe3aMy/q3Tvt66p9CvxTjKX1uaW9I/Zik9t/9+nVKx/89G1BG1t5GtCusehuB3v6zmfv/TicxVZdDEEY0LC0ZxQMYDVWP/5mue6b4wp++t3U5pMWuPdJ9vMz7L4XVGPXxJ+Vf+fifgw4tOJD2+HcDH/+yEfPyG0ADOvLC9//dkW24ddD88/FPUz/Qe4fL/zsx/7Q1d4fB8l96Lcs/vyE0oIey/LcPmP9127//xvJ/OOaf3rZ77ho0/1aJi1p3OfLrxun+X37dODmabX/q23Po7b/BgRqPxfxhko3LOLPDGpfxf/vJ62EcjtPpQJjqOeTjnQxb/lS/Iv0O7MvWX5T8vm3S8X9/NSnjuHw7xmXfh53xM037Y6PHdK1jut7jvd2sxxoYVx9u5vt/gjAaofWz2jkv/RhWXLalpaVK+/TVoXC1qn7/q/6fUHX+Vb//ZfLxf/Nz+Hz83zw9H//3B1l6Pv5v/vp8fL08PR//N38/8/F/8/Sbs/Xm4wPPlqTfUpJ+a0n6bSXp+0vSby9J/2JJ+h0l6XeWpN9Ukn5XSfqXS9K/0j/9k85F+73+npL1f7UkfbNL7VEmdfthkuXt83z/YXKk+z/9vv97S9KB8XX5jYVHH/v9Dxut9v8z7esh6T7esThdj/+dfxan8/veoWN6Oe2dOP1Rlj7q1ztgkuT9Z+S/73eXpAPjK9Xz8v2GCVT07rEnv9/Wr9+qfuf5jJevxfjrMf5GjO+N8VyM52O8EOODG1Q+1sejv/vjkZeLlf/7u7P0QeuT5+2B8n6i7h+wPPn1gWHrs+f9+A1rtfnfYHMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAytSaj4cOzRYhvPr2K8ev/OW7v12ec7S9RKP5ON0xVW+/LoT7YjwV4yvxyacfP3+6M/4sxkU4GIpQtOeHE9faOe0IIVwKB8LV0AgvPn55+oM3T7z/ejj/zMnj7721fu9AS7HeGQAAAECF/h8AAP//tpMLBw==") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x7d, 0x0, 0x0) 00:34:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 00:34:44 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:44 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080), &(0x7f0000000040)=0x8) 00:34:44 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8941, 0x0) 00:34:44 executing program 5: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) [ 3104.963554][T25218] loop0: detected capacity change from 0 to 2048 [ 3105.041340][T25234] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3105.042510][T25218] syz-executor.0: attempt to access beyond end of device [ 3105.042510][T25218] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:45 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:45 executing program 5: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 00:34:45 executing program 1: r0 = socket(0x1d, 0x2, 0x2) bind$pptp(r0, 0x0, 0x0) 00:34:45 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x50000, 0x0) 00:34:45 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:45 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$lock(r0, 0x26, &(0x7f0000000400)={0x2, 0x1}) 00:34:45 executing program 5: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 00:34:45 executing program 4: syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) 00:34:45 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000080001", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:45 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000006900), 0x200883, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000006940)={0x0, r0}, 0x10) 00:34:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 00:34:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 00:34:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:45 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f000000ca40), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f000000cfc0)) 00:34:45 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$lock(r0, 0x26, 0x0) 00:34:45 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000080001", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:45 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:45 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x400000000005, 0x105000) 00:34:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 00:34:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:45 executing program 4: bind$xdp(0xffffffffffffffff, &(0x7f0000000000), 0x10) socketpair(0x22, 0x0, 0x1078f4ff, &(0x7f0000000b00)) 00:34:45 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) 00:34:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 00:34:45 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000080001", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:45 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000006900), 0x0, 0x0) 00:34:45 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:45 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0xc08c5332, &(0x7f0000000180)) tkill(r0, 0x7) 00:34:45 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3105.919050][T25313] __do_sys_memfd_create: 1 callbacks suppressed [ 3105.919068][T25313] syz-executor.0[25313]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3105.956544][T25313] loop0: detected capacity change from 0 to 2048 [ 3106.001038][T25319] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3106.002353][T25313] syz-executor.0: attempt to access beyond end of device [ 3106.002353][T25313] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:46 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 00:34:46 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1, @time}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "fb08299d2a5db985", "207aa804ac9613f94c32889e88c5fa7d07ca23278d5becdb0d4c6f918b2c17c0"}) 00:34:46 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:46 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:46 executing program 1: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1, @time}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0605345, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "fb08299d2a5db985", "207aa804ac9613f94c32889e88c5fa7d07ca23278d5becdb0d4c6f918b2c17c0"}) [ 3106.172909][T25334] syz-executor.0[25334]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3106.197807][T25334] loop0: detected capacity change from 0 to 2048 00:34:46 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) [ 3106.215064][T25337] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3106.215310][T25334] syz-executor.0: attempt to access beyond end of device [ 3106.215310][T25334] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 00:34:46 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x0, r2) r5 = dup3(r1, r4, 0x0) ioctl$TIOCSETD(r5, 0x5437, 0x0) 00:34:46 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3106.372310][T25356] syz-executor.0[25356]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3106.466158][T25356] loop0: detected capacity change from 0 to 2048 [ 3106.497041][T25363] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3106.497959][T25356] syz-executor.0: attempt to access beyond end of device [ 3106.497959][T25356] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) 00:34:46 executing program 4: socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) 00:34:46 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x0, r2) r5 = dup3(r1, r4, 0x0) ioctl$TIOCSETD(r5, 0x5437, 0x0) 00:34:46 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:46 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:46 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r3, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 00:34:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x4004556a, &(0x7f0000000300)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @rumble}}) [ 3106.696640][T25373] syz-executor.0[25373]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3106.722470][T25373] loop0: detected capacity change from 0 to 2048 00:34:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74, 0x70, 0xb0, 0x1ba, {0x46010000}}, @common=@inet=@LOG={0x2b, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000000000000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3ba) 00:34:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x0, r2) r5 = dup3(r1, r4, 0x0) ioctl$TIOCSETD(r5, 0x5437, 0x0) [ 3106.786983][T25384] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3106.800675][T25373] syz-executor.0: attempt to access beyond end of device [ 3106.800675][T25373] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, 0x0) 00:34:46 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:46 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$eJzs3U2oXNUBAOBz5715+W8mNqlPjZrWFu2P7/li0mpTTcRAKYUQ6E67CTGmIc+0NCJVXKQuSjeiIGbVRSzddKO0paibElwUKSiltAhdWek2BaELKegrb+aceTMnM9yZvJ878+b74MyZe8+de86duXPnzr3nJwATq9Z8PHRotgjh1bdfOX77a+++tDznaHuJRvNxumOqHkIo4vR0tr4Pp1rxpx8/f7pXXISDzcc0HU5ca792RwjhUjgQroZGePHxy9MfvHni/dfD+WdOHn/vrfXZ+hXFemcAAAAj4OTVI4f2/euvt+353xt3HAtb2vPT+XkjTu+M5/3H4olyOl+uhe7poiN0msmWm46hli031WO5znzq2XLTffKfydZb77PclpL8pzrm9dpuGGdpP26EojbXNV2rzc21/pOH5v/6mWLuwrnFJy9WVFBgzf33zhDCAUEQJjEs7a76CATQkt8vvM6ltb1T117b9GD5X3uk1vv1sBpbW9FG7/85+Y92/r/5uSMOa2cT7k1/39WxXel7tDNO5/cR8vpLw37/0/ry+xH1AQvb7z7CuNxf6FfOqQ0ux43qV/58v9isHopxeh8eztLj96B5Oy3/TMflMwZ6+8T1f0FYk3BLUX0Zhg1LVR+AgJGV15tbilJ6Xq8vT99Skr61JH1bSfr2kvQdJekwyf7w9Evh5WLlelf+n37Y62HpOtuuGH9uyPLk1yOHzT+v9zus1eaf1yeGkbbjz5cfeOKxv7Xq/xft/f+zuL8fiNON+N26GhdI1wvz6+rtuv+N7mxqfZa7KSvOrh7LN5/v7V6u2LuyntBxnLmuHLPpFa0rurv7Lbe/e/2NbLltMWzNypufn2zPXpfOP9JxdWdXaVa2t55tx0xWjnRc2RPjvBxwI9L+2F3/f3nva9b/b9/Gmg314slzi2fui9NpP313qr5lef7CRhccWLVB2//Mhu72Pzvb8+u1zuPC7pX5RedxoZHNP9hn/v1xOv3O/WhqW3P+3OkfLz6x1hsPE+7is8+dP7W4eOannozak3AphBEohieT9CQdF04tVntcAtbf/NNP/WT+4rPP3XvuqVNnz5w9c2Hh8MIDDx5eWPjmg/PN8/r5zrP7zVhdGCbXyq9/1SUBAAAAAAAAAAAABnX2o/kr/3jnW/9stf9faf+X2v+nmr+p/f8vs/b/WTP/dgXh1A4wteO7rr191sHqTLZcPYbPZ+vfm+WzL3vdF2LcHscvtv9P2eX9uqby3JzNz/vvTcvNZvPz/lJmsj5IivCL7Z3l+1KMX4jxrwNUqNjWe3aMy/q3Tvt66p9CvxTjKX1uaW9I/Zik9t/9+nVKx/89G1BG1t5GtCusehuB3v6zmfv/TicxVZdDEEY0LC0ZxQMYDVWP/5mue6b4wp++t3U5pMWuPdJ9vMz7L4XVGPXxJ+Vf+fifgw4tOJD2+HcDH/+yEfPyG0ADOvLC9//dkW24ddD88/FPUz/Qe4fL/zsx/7Q1d4fB8l96Lcs/vyE0oIey/LcPmP9127//xvJ/OOaf3rZ77ho0/1aJi1p3OfLrxun+X37dODmabX/q23Po7b/BgRqPxfxhko3LOLPDGpfxf/vJ62EcjtPpQJjqOeTjnQxb/lS/Iv0O7MvWX5T8vm3S8X9/NSnjuHw7xmXfh53xM037Y6PHdK1jut7jvd2sxxoYVx9u5vt/gjAaofWz2jkv/RhWXLalpaVK+/TVoXC1qn7/q/6fUHX+Vb//ZfLxf/Nz+Hz83zw9H//3B1l6Pv5v/vp8fL08PR//N38/8/F/8/Sbs/Xm4wPPlqTfUpJ+a0n6bSXp+0vSby9J/2JJ+h0l6XeWpN9Ukn5XSfqXS9K/0j/9k85F+73+npL1f7UkfbNL7VEmdfthkuXt83z/YXKk+z/9vv97S9KB8XX5jYVHH/v9Dxut9v8z7esh6T7esThdj/+dfxan8/veoWN6Oe2dOP1Rlj7q1ztgkuT9Z+S/73eXpAPjK9Xz8v2GCVT07rEnv9/Wr9+qfuf5jJevxfjrMf5GjO+N8VyM52O8EOODG1Q+1sejv/vjkZeLlf/7u7P0QeuT5+2B8n6i7h+wPPn1gWHrs+f9+A1rtfnfYHMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAytSaj4cOzRYhvPr2K8ev/OW7v12ec7S9RKP5ON0xVW+/LoT7YjwV4yvxyacfP3+6M/4sxkU4GIpQtOeHE9faOe0IIVwKB8LV0AgvPn55+oM3T7z/ejj/zMnj7721fu9AS7HeGQAAAECF/h8AAP//tpMLBw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:46 executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f000000ca40), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) [ 3106.904918][T25395] x_tables: ip_tables: LOG.0 target: invalid size 32 (kernel) != (user) 11 00:34:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, 0x0) 00:34:46 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x64, {0x64, 0x0, "a594f5cc9d21eb21195a3b181593410d3f8b2862bd6455de59444c74745ca7e58c42d6705858cf88edd9e5186f85593c411a611c057e6f30bba936927e4f40ad6107da112af5b9629d19e20bf85220fb4d31faec8d2bf92f6f1b7e03ddcf7ac8e495"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 3107.056395][T25418] syz-executor.0[25418]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3107.117942][T25418] loop0: detected capacity change from 0 to 2048 [ 3107.135844][T25419] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3107.146946][T25418] syz-executor.0: attempt to access beyond end of device [ 3107.146946][T25418] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:47 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x4004556a, 0x0) 00:34:47 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x0, r2) r5 = dup3(r1, r4, 0x0) ioctl$TIOCSETD(r5, 0x5437, 0x0) 00:34:47 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) [ 3107.310857][T11676] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 3107.316957][T25430] syz-executor.0[25430]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 00:34:47 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) 00:34:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) [ 3107.443674][T25430] loop0: detected capacity change from 0 to 2048 [ 3107.466809][T25446] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3107.471823][T25430] syz-executor.0: attempt to access beyond end of device [ 3107.471823][T25430] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 3107.580832][T25448] wireguard0: entered promiscuous mode [ 3107.586515][T25448] wireguard0: entered allmulticast mode [ 3107.800906][T11676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 00:34:47 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:47 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) [ 3107.971032][T11676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3108.014704][T11676] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 3108.047301][T25456] syz-executor.0[25456]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3108.050180][T11676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3108.081963][T11676] usb 5-1: config 0 descriptor?? 00:34:48 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3108.117279][T25456] loop0: detected capacity change from 0 to 2048 [ 3108.168290][T25464] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3108.181780][T25456] syz-executor.0: attempt to access beyond end of device [ 3108.181780][T25456] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 3108.575955][T11676] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 3108.792447][T11676] cp2112 0003:10C4:EA90.0010: error requesting version [ 3108.800899][T11676] cp2112: probe of 0003:10C4:EA90.0010 failed with error -71 [ 3108.810416][T11676] usb 5-1: USB disconnect, device number 61 00:34:49 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:49 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) 00:34:49 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 00:34:49 executing program 4: clock_gettime(0x0, &(0x7f0000000040)={0x0}) ppoll(&(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={r0}, 0x0, 0x0) 00:34:49 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3109.319263][T25474] syz-executor.0[25474]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3109.548796][T25485] wireguard0: entered promiscuous mode [ 3109.554616][T25485] wireguard0: entered allmulticast mode [ 3109.922852][T25474] loop0: detected capacity change from 0 to 2048 00:34:49 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3109.967691][T25492] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3109.967979][T25474] syz-executor.0: attempt to access beyond end of device [ 3109.967979][T25474] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 3109.993841][T18670] Bluetooth: hci5: command 0x0406 tx timeout 00:34:50 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:50 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 00:34:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) 00:34:50 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:50 executing program 4: mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x1) [ 3110.205272][T25504] syz-executor.0[25504]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 00:34:50 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3110.380279][T25514] wireguard0: entered promiscuous mode [ 3110.386057][T25514] wireguard0: entered allmulticast mode 00:34:50 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x251, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) 00:34:50 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3110.790382][T25504] loop0: detected capacity change from 0 to 2048 [ 3110.836044][T25527] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3110.836929][T25504] syz-executor.0: attempt to access beyond end of device [ 3110.836929][T25504] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:50 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:50 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$eJzs3U2oXNUBAOBz5715+W8mNqlPjZrWFu2P7/li0mpTTcRAKYUQ6E67CTGmIc+0NCJVXKQuSjeiIGbVRSzddKO0paibElwUKSiltAhdWek2BaELKegrb+aceTMnM9yZvJ878+b74MyZe8+de86duXPnzr3nJwATq9Z8PHRotgjh1bdfOX77a+++tDznaHuJRvNxumOqHkIo4vR0tr4Pp1rxpx8/f7pXXISDzcc0HU5ca792RwjhUjgQroZGePHxy9MfvHni/dfD+WdOHn/vrfXZ+hXFemcAAAAj4OTVI4f2/euvt+353xt3HAtb2vPT+XkjTu+M5/3H4olyOl+uhe7poiN0msmWm46hli031WO5znzq2XLTffKfydZb77PclpL8pzrm9dpuGGdpP26EojbXNV2rzc21/pOH5v/6mWLuwrnFJy9WVFBgzf33zhDCAUEQJjEs7a76CATQkt8vvM6ltb1T117b9GD5X3uk1vv1sBpbW9FG7/85+Y92/r/5uSMOa2cT7k1/39WxXel7tDNO5/cR8vpLw37/0/ry+xH1AQvb7z7CuNxf6FfOqQ0ux43qV/58v9isHopxeh8eztLj96B5Oy3/TMflMwZ6+8T1f0FYk3BLUX0Zhg1LVR+AgJGV15tbilJ6Xq8vT99Skr61JH1bSfr2kvQdJekwyf7w9Evh5WLlelf+n37Y62HpOtuuGH9uyPLk1yOHzT+v9zus1eaf1yeGkbbjz5cfeOKxv7Xq/xft/f+zuL8fiNON+N26GhdI1wvz6+rtuv+N7mxqfZa7KSvOrh7LN5/v7V6u2LuyntBxnLmuHLPpFa0rurv7Lbe/e/2NbLltMWzNypufn2zPXpfOP9JxdWdXaVa2t55tx0xWjnRc2RPjvBxwI9L+2F3/f3nva9b/b9/Gmg314slzi2fui9NpP313qr5lef7CRhccWLVB2//Mhu72Pzvb8+u1zuPC7pX5RedxoZHNP9hn/v1xOv3O/WhqW3P+3OkfLz6x1hsPE+7is8+dP7W4eOannozak3AphBEohieT9CQdF04tVntcAtbf/NNP/WT+4rPP3XvuqVNnz5w9c2Hh8MIDDx5eWPjmg/PN8/r5zrP7zVhdGCbXyq9/1SUBAAAAAAAAAAAABnX2o/kr/3jnW/9stf9faf+X2v+nmr+p/f8vs/b/WTP/dgXh1A4wteO7rr191sHqTLZcPYbPZ+vfm+WzL3vdF2LcHscvtv9P2eX9uqby3JzNz/vvTcvNZvPz/lJmsj5IivCL7Z3l+1KMX4jxrwNUqNjWe3aMy/q3Tvt66p9CvxTjKX1uaW9I/Zik9t/9+nVKx/89G1BG1t5GtCusehuB3v6zmfv/TicxVZdDEEY0LC0ZxQMYDVWP/5mue6b4wp++t3U5pMWuPdJ9vMz7L4XVGPXxJ+Vf+fifgw4tOJD2+HcDH/+yEfPyG0ADOvLC9//dkW24ddD88/FPUz/Qe4fL/zsx/7Q1d4fB8l96Lcs/vyE0oIey/LcPmP9127//xvJ/OOaf3rZ77ho0/1aJi1p3OfLrxun+X37dODmabX/q23Po7b/BgRqPxfxhko3LOLPDGpfxf/vJ62EcjtPpQJjqOeTjnQxb/lS/Iv0O7MvWX5T8vm3S8X9/NSnjuHw7xmXfh53xM037Y6PHdK1jut7jvd2sxxoYVx9u5vt/gjAaofWz2jkv/RhWXLalpaVK+/TVoXC1qn7/q/6fUHX+Vb//ZfLxf/Nz+Hz83zw9H//3B1l6Pv5v/vp8fL08PR//N38/8/F/8/Sbs/Xm4wPPlqTfUpJ+a0n6bSXp+0vSby9J/2JJ+h0l6XeWpN9Ukn5XSfqXS9K/0j/9k85F+73+npL1f7UkfbNL7VEmdfthkuXt83z/YXKk+z/9vv97S9KB8XX5jYVHH/v9Dxut9v8z7esh6T7esThdj/+dfxan8/veoWN6Oe2dOP1Rlj7q1ztgkuT9Z+S/73eXpAPjK9Xz8v2GCVT07rEnv9/Wr9+qfuf5jJevxfjrMf5GjO+N8VyM52O8EOODG1Q+1sejv/vjkZeLlf/7u7P0QeuT5+2B8n6i7h+wPPn1gWHrs+f9+A1rtfnfYHMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAytSaj4cOzRYhvPr2K8ev/OW7v12ec7S9RKP5ON0xVW+/LoT7YjwV4yvxyacfP3+6M/4sxkU4GIpQtOeHE9faOe0IIVwKB8LV0AgvPn55+oM3T7z/ejj/zMnj7721fu9AS7HeGQAAAECF/h8AAP//tpMLBw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, 0x0, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:50 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3111.022234][T25539] syz-executor.0[25539]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3111.031236][T11676] usb 5-1: new high-speed USB device number 62 using dummy_hcd 00:34:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) [ 3111.063939][T25539] loop0: detected capacity change from 0 to 2048 00:34:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r4 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) [ 3111.134078][T25546] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3111.134306][T25539] syz-executor.0: attempt to access beyond end of device [ 3111.134306][T25539] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:51 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, 0x0, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) [ 3111.329070][T25553] wireguard0: entered promiscuous mode [ 3111.334682][T25553] wireguard0: entered allmulticast mode [ 3111.504513][T11676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3111.721415][T11676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3111.733757][T25557] syz-executor.0[25557]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3111.744689][T11676] usb 5-1: New USB device found, idVendor=05ac, idProduct=0251, bcdDevice= 0.40 [ 3111.759023][T25557] loop0: detected capacity change from 0 to 2048 00:34:51 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) [ 3111.765447][T11676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3111.767683][T11676] usb 5-1: config 0 descriptor?? [ 3111.798128][T25558] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3111.811729][T25557] syz-executor.0: attempt to access beyond end of device [ 3111.811729][T25557] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:51 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, 0x0, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:51 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3111.954682][T25569] syz-executor.0[25569]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3111.980578][T25569] loop0: detected capacity change from 0 to 2048 [ 3112.002327][T25571] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3112.023956][T25569] syz-executor.0: attempt to access beyond end of device [ 3112.023956][T25569] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r4 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) [ 3112.287787][T11676] apple 0003:05AC:0251.0011: unknown main item tag 0x0 [ 3112.296872][T11676] apple 0003:05AC:0251.0011: hidraw0: USB HID v0.00 Device [HID 05ac:0251] on usb-dummy_hcd.4-1/input0 [ 3112.489767][T11676] usb 5-1: USB disconnect, device number 62 00:34:52 executing program 5: syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x3, 0x42e, &(0x7f00000004c0)="$eJzs3E9vFGUcB/DvbFuIgBYV/yFoFYQq2tqiqIkh4eaB6EEPXhtaKrEUpTURQgwkHryayAvQeJWXYNTEPxc9Ga5q9KAkxEAPHIypme1uu5Ru6ULLGvbzSWZ5nplZnmfmyW9m5+kvE6Bj9ZUfRbIpyc9JeueqV+/QN/fPzKVTh8qlyOzs638X1f0uXzp1qL5r/Xsby49K0l9JKh8WeXiJdqdOnHx7ZGJi7HitPjh99J3BqRMnnzlydGR8bHxscmjv0L59Lzz/4vDQqh3rKz/N/PFZ96uTn5+9PHll//CGsr+batsaj2O19KXv6nPZYNdqN9Zm9zWUi+42doSWdCUph6unGv+96crC4PXm+1/b2jlgTc2W1jfdfHoWuI0VaXcPgPao3+jL59/6cqt+e9B+Fw/MPQBers3tzMyPf3cqc4V3d3379VXP96upL8mbB1/bXi5Zo3kYAAAAgE721YEkTy81/1fJ/Q37leUHkjyY5KEkW5NqXs+2JNuTPJLk0Xo+UQsW73/t/E/lwg0dGCty8UDyckNu10zD+Nds7qrV7iwr6SkOH5kYezbJXUn607O+rC+XpXX0rZEfm21rnP8rl7L9+lxgrR8Xuhf9fXp0ZHrkZo6ZBRfPJFu7lxr/Yj4TqEjyWJLHV/IfflfNqBvfcu6f+VUvfXTv+Wa7X3/8WUuznya7l4z/hczFYvn8zMHq9WCwflW41g9n933RrH3j315l/G9Yfvw3F435ulOtt/HNlt9+abbtRq//64o3qh1cV1v3/sj09PGhZF1x8Nr1w633+XZVPx/181WOf/+Ope//99S+U57QHUl2Jnmilru8u3rvT55M8lSSPcu0eXr893+bbRP/7VWO/2hL8d964a8zH+9s1v7K4v+5amf6a2v8/ru+lQ5Qu/sJAAAAAAAAwOqoVN+BV1QG5suVysDA3Dv8tmRDZeLY1PSew8femxyde1fe5vRU6plevQ35oEPV8kJ9eFF9b5K7k3zSdUe1PnDo2MRouw8eOtzGJvFf+rOr3b0D1pz3tULnEv/QucQ/dC7xD51L/EPnEv/QucQ/dC7xD51rcfx/cP7g/itfbjvXpu4At5D7P3Skm3mvn4KCwu1aaPeVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/4b8AAAD//y2P0tw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 00:34:52 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:52 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:52 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r4 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:34:52 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x251, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) [ 3113.029762][T25579] syz-executor.5[25579]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3113.040267][T25587] syz-executor.0[25587]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 00:34:53 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) [ 3113.074217][T25587] loop0: detected capacity change from 0 to 2048 [ 3113.092466][T25592] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3113.092702][T25587] syz-executor.0: attempt to access beyond end of device [ 3113.092702][T25587] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000180)="c4c1f95a4ba43e3e2e0ff8a5000000000f01c364660f3a14e693660f3882759e0f01c966b86c008ec066b860008ec0c4c16572f5e0b9800000c00f3235008000000f30", 0x43}], 0x1, 0x0, &(0x7f00000000c0)=[@efer={0x2, 0x1100}], 0x1) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) [ 3113.265996][T25603] syz-executor.0[25603]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 00:34:53 executing program 5: dup(0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x21) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000001880)={0x8, 0x689}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000018c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000001900)={0x2020}, 0x2020) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x96e) sched_setaffinity(0x0, 0xffffffffffffff73, &(0x7f00000003c0)=0x6) r5 = socket$inet6(0xa, 0x0, 0x3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r5, &(0x7f0000001840)={0xa, 0x0, 0x8, @mcast2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000100), 0x40000c4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f00000017c0)='./file0\x00', 0x101000, 0xf0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='io.weight\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380), 0x10c4090, &(0x7f0000000640)=ANY=[@ANYBLOB="7460616e733d48ce247266646e6f3d", @ANYRESHEX, @ANYRES8=r6, @ANYRESHEX, @ANYBLOB=',cachetag=vfat\x00,dfltuid=', @ANYRESHEX, @ANYBLOB=',posixacl,fscache,func=FILE_CHECK,\x00']) syz_clone(0x42048480, 0x0, 0x0, 0x0, 0x0, 0x0) [ 3113.341032][T11676] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 3113.345820][T25603] loop0: detected capacity change from 0 to 2048 [ 3113.366263][T25604] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3113.373289][T25603] syz-executor.0: attempt to access beyond end of device [ 3113.373289][T25603] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:53 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 00:34:53 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) [ 3113.651402][T25611] vxcan1 speed is unknown, defaulting to 1000 00:34:54 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) r4 = fcntl$dupfd(r0, 0x0, r2) r5 = dup3(r1, r4, 0x0) ioctl$TIOCSETD(r5, 0x5437, 0x0) [ 3114.226286][T25614] syz-executor.0[25614]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 00:34:54 executing program 5: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 3114.300692][T25614] loop0: detected capacity change from 0 to 2048 [ 3114.325188][T11676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3114.359234][T25623] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3114.359477][T25614] syz-executor.0: attempt to access beyond end of device [ 3114.359477][T25614] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 3114.381354][T11676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 00:34:54 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:34:54 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3114.458931][T11676] usb 5-1: New USB device found, idVendor=05ac, idProduct=0251, bcdDevice= 0.40 00:34:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) r4 = fcntl$dupfd(r0, 0x0, r2) r5 = dup3(r1, r4, 0x0) ioctl$TIOCSETD(r5, 0x5437, 0x0) [ 3114.508223][T11676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3114.537550][T11676] usb 5-1: config 0 descriptor?? [ 3114.600449][T25641] syz-executor.0[25641]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3114.684168][T25641] loop0: detected capacity change from 0 to 2048 [ 3114.702192][T25644] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3114.713246][T25641] syz-executor.0: attempt to access beyond end of device [ 3114.713246][T25641] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 3114.731355][T11674] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 3115.053294][T11676] apple 0003:05AC:0251.0012: unknown main item tag 0x0 [ 3115.064512][T11676] apple 0003:05AC:0251.0012: hidraw0: USB HID v0.00 Device [HID 05ac:0251] on usb-dummy_hcd.4-1/input0 [ 3115.122011][T11674] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3115.135708][T11674] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3115.145598][T11674] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 3115.252274][T27460] usb 5-1: USB disconnect, device number 63 [ 3115.351236][T11674] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3115.360438][T11674] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3115.368546][T11674] usb 6-1: Product: syz [ 3115.373497][T11674] usb 6-1: Manufacturer: syz [ 3115.378157][T11674] usb 6-1: SerialNumber: syz [ 3115.701465][T11674] usb 6-1: 0:2 : does not exist [ 3115.714417][T11674] usb 6-1: USB disconnect, device number 21 00:34:55 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x251, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) 00:34:55 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) r4 = fcntl$dupfd(r0, 0x0, r2) r5 = dup3(r1, r4, 0x0) ioctl$TIOCSETD(r5, 0x5437, 0x0) 00:34:55 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:34:55 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3115.805709][T25650] syz-executor.0[25650]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3115.852946][T25650] loop0: detected capacity change from 0 to 2048 [ 3115.877729][T25660] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3115.892136][T25650] syz-executor.0: attempt to access beyond end of device 00:34:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x0, r2) r5 = dup3(r1, r4, 0x0) ioctl$TIOCSETD(r5, 0x5437, 0x0) [ 3115.892136][T25650] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:55 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:34:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) [ 3116.056454][T25667] syz-executor.0[25667]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3116.082435][T25667] loop0: detected capacity change from 0 to 2048 00:34:56 executing program 5: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 00:34:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) [ 3116.100198][T25670] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3116.101498][T25667] syz-executor.0: attempt to access beyond end of device [ 3116.101498][T25667] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 3116.126195][T11675] usb 5-1: new high-speed USB device number 64 using dummy_hcd 00:34:56 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$eJzs3U2oXNUBAOBz5715+W8mNqlPjZrWFu2P7/li0mpTTcRAKYUQ6E67CTGmIc+0NCJVXKQuSjeiIGbVRSzddKO0paibElwUKSiltAhdWek2BaELKegrb+aceTMnM9yZvJ878+b74MyZe8+de86duXPnzr3nJwATq9Z8PHRotgjh1bdfOX77a+++tDznaHuJRvNxumOqHkIo4vR0tr4Pp1rxpx8/f7pXXISDzcc0HU5ca792RwjhUjgQroZGePHxy9MfvHni/dfD+WdOHn/vrfXZ+hXFemcAAAAj4OTVI4f2/euvt+353xt3HAtb2vPT+XkjTu+M5/3H4olyOl+uhe7poiN0msmWm46hli031WO5znzq2XLTffKfydZb77PclpL8pzrm9dpuGGdpP26EojbXNV2rzc21/pOH5v/6mWLuwrnFJy9WVFBgzf33zhDCAUEQJjEs7a76CATQkt8vvM6ltb1T117b9GD5X3uk1vv1sBpbW9FG7/85+Y92/r/5uSMOa2cT7k1/39WxXel7tDNO5/cR8vpLw37/0/ry+xH1AQvb7z7CuNxf6FfOqQ0ux43qV/58v9isHopxeh8eztLj96B5Oy3/TMflMwZ6+8T1f0FYk3BLUX0Zhg1LVR+AgJGV15tbilJ6Xq8vT99Skr61JH1bSfr2kvQdJekwyf7w9Evh5WLlelf+n37Y62HpOtuuGH9uyPLk1yOHzT+v9zus1eaf1yeGkbbjz5cfeOKxv7Xq/xft/f+zuL8fiNON+N26GhdI1wvz6+rtuv+N7mxqfZa7KSvOrh7LN5/v7V6u2LuyntBxnLmuHLPpFa0rurv7Lbe/e/2NbLltMWzNypufn2zPXpfOP9JxdWdXaVa2t55tx0xWjnRc2RPjvBxwI9L+2F3/f3nva9b/b9/Gmg314slzi2fui9NpP313qr5lef7CRhccWLVB2//Mhu72Pzvb8+u1zuPC7pX5RedxoZHNP9hn/v1xOv3O/WhqW3P+3OkfLz6x1hsPE+7is8+dP7W4eOannozak3AphBEohieT9CQdF04tVntcAtbf/NNP/WT+4rPP3XvuqVNnz5w9c2Hh8MIDDx5eWPjmg/PN8/r5zrP7zVhdGCbXyq9/1SUBAAAAAAAAAAAABnX2o/kr/3jnW/9stf9faf+X2v+nmr+p/f8vs/b/WTP/dgXh1A4wteO7rr191sHqTLZcPYbPZ+vfm+WzL3vdF2LcHscvtv9P2eX9uqby3JzNz/vvTcvNZvPz/lJmsj5IivCL7Z3l+1KMX4jxrwNUqNjWe3aMy/q3Tvt66p9CvxTjKX1uaW9I/Zik9t/9+nVKx/89G1BG1t5GtCusehuB3v6zmfv/TicxVZdDEEY0LC0ZxQMYDVWP/5mue6b4wp++t3U5pMWuPdJ9vMz7L4XVGPXxJ+Vf+fifgw4tOJD2+HcDH/+yEfPyG0ADOvLC9//dkW24ddD88/FPUz/Qe4fL/zsx/7Q1d4fB8l96Lcs/vyE0oIey/LcPmP9127//xvJ/OOaf3rZ77ho0/1aJi1p3OfLrxun+X37dODmabX/q23Po7b/BgRqPxfxhko3LOLPDGpfxf/vJ62EcjtPpQJjqOeTjnQxb/lS/Iv0O7MvWX5T8vm3S8X9/NSnjuHw7xmXfh53xM037Y6PHdK1jut7jvd2sxxoYVx9u5vt/gjAaofWz2jkv/RhWXLalpaVK+/TVoXC1qn7/q/6fUHX+Vb//ZfLxf/Nz+Hz83zw9H//3B1l6Pv5v/vp8fL08PR//N38/8/F/8/Sbs/Xm4wPPlqTfUpJ+a0n6bSXp+0vSby9J/2JJ+h0l6XeWpN9Ukn5XSfqXS9K/0j/9k85F+73+npL1f7UkfbNL7VEmdfthkuXt83z/YXKk+z/9vv97S9KB8XX5jYVHH/v9Dxut9v8z7esh6T7esThdj/+dfxan8/veoWN6Oe2dOP1Rlj7q1ztgkuT9Z+S/73eXpAPjK9Xz8v2GCVT07rEnv9/Wr9+qfuf5jJevxfjrMf5GjO+N8VyM52O8EOODG1Q+1sejv/vjkZeLlf/7u7P0QeuT5+2B8n6i7h+wPPn1gWHrs+f9+A1rtfnfYHMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAytSaj4cOzRYhvPr2K8ev/OW7v12ec7S9RKP5ON0xVW+/LoT7YjwV4yvxyacfP3+6M/4sxkU4GIpQtOeHE9faOe0IIVwKB8LV0AgvPn55+oM3T7z/ejj/zMnj7721fu9AS7HeGQAAAECF/h8AAP//tpMLBw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 00:34:56 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) [ 3116.261654][T25677] syz-executor.0[25677]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3116.316506][T25677] loop0: detected capacity change from 0 to 2048 [ 3116.335886][T25681] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3116.336365][T25677] syz-executor.0: attempt to access beyond end of device [ 3116.336365][T25677] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 3116.461442][ T4443] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 3116.541653][T11675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3116.553037][T11675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3116.563234][T11675] usb 5-1: New USB device found, idVendor=05ac, idProduct=0251, bcdDevice= 0.40 [ 3116.578053][T11675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3116.588008][T11675] usb 5-1: config 0 descriptor?? [ 3116.821481][ T4443] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3116.832737][ T4443] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3116.845241][ T4443] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 3117.011591][ T4443] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3117.021867][ T4443] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3117.029893][ T4443] usb 6-1: Product: syz [ 3117.034142][ T4443] usb 6-1: Manufacturer: syz [ 3117.038846][ T4443] usb 6-1: SerialNumber: syz [ 3117.086544][T11675] apple 0003:05AC:0251.0013: unknown main item tag 0x0 [ 3117.096220][T11675] apple 0003:05AC:0251.0013: hidraw0: USB HID v0.00 Device [HID 05ac:0251] on usb-dummy_hcd.4-1/input0 [ 3117.300241][T27460] usb 5-1: USB disconnect, device number 64 [ 3117.361479][ T4443] usb 6-1: 0:2 : does not exist [ 3117.372103][ T4443] usb 6-1: USB disconnect, device number 22 00:34:57 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 00:34:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:34:57 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:57 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x251, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) 00:34:57 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:57 executing program 5: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 3117.844416][T25688] syz-executor.0[25688]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3117.875509][T25688] loop0: detected capacity change from 0 to 2048 00:34:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:34:57 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) [ 3117.918006][T25703] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3117.932158][T25688] syz-executor.0: attempt to access beyond end of device [ 3117.932158][T25688] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:34:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = dup3(r1, r2, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) [ 3118.069274][T25711] syz-executor.0[25711]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3118.099290][T25711] loop0: detected capacity change from 0 to 2048 [ 3118.111353][T11404] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 3118.128194][T25713] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3118.151820][ T4443] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 3118.152911][T25711] syz-executor.0: attempt to access beyond end of device [ 3118.152911][T25711] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:58 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$eJzs3U2oXNUBAOBz5715+W8mNqlPjZrWFu2P7/li0mpTTcRAKYUQ6E67CTGmIc+0NCJVXKQuSjeiIGbVRSzddKO0paibElwUKSiltAhdWek2BaELKegrb+aceTMnM9yZvJ878+b74MyZe8+de86duXPnzr3nJwATq9Z8PHRotgjh1bdfOX77a+++tDznaHuJRvNxumOqHkIo4vR0tr4Pp1rxpx8/f7pXXISDzcc0HU5ca792RwjhUjgQroZGePHxy9MfvHni/dfD+WdOHn/vrfXZ+hXFemcAAAAj4OTVI4f2/euvt+353xt3HAtb2vPT+XkjTu+M5/3H4olyOl+uhe7poiN0msmWm46hli031WO5znzq2XLTffKfydZb77PclpL8pzrm9dpuGGdpP26EojbXNV2rzc21/pOH5v/6mWLuwrnFJy9WVFBgzf33zhDCAUEQJjEs7a76CATQkt8vvM6ltb1T117b9GD5X3uk1vv1sBpbW9FG7/85+Y92/r/5uSMOa2cT7k1/39WxXel7tDNO5/cR8vpLw37/0/ry+xH1AQvb7z7CuNxf6FfOqQ0ux43qV/58v9isHopxeh8eztLj96B5Oy3/TMflMwZ6+8T1f0FYk3BLUX0Zhg1LVR+AgJGV15tbilJ6Xq8vT99Skr61JH1bSfr2kvQdJekwyf7w9Evh5WLlelf+n37Y62HpOtuuGH9uyPLk1yOHzT+v9zus1eaf1yeGkbbjz5cfeOKxv7Xq/xft/f+zuL8fiNON+N26GhdI1wvz6+rtuv+N7mxqfZa7KSvOrh7LN5/v7V6u2LuyntBxnLmuHLPpFa0rurv7Lbe/e/2NbLltMWzNypufn2zPXpfOP9JxdWdXaVa2t55tx0xWjnRc2RPjvBxwI9L+2F3/f3nva9b/b9/Gmg314slzi2fui9NpP313qr5lef7CRhccWLVB2//Mhu72Pzvb8+u1zuPC7pX5RedxoZHNP9hn/v1xOv3O/WhqW3P+3OkfLz6x1hsPE+7is8+dP7W4eOannozak3AphBEohieT9CQdF04tVntcAtbf/NNP/WT+4rPP3XvuqVNnz5w9c2Hh8MIDDx5eWPjmg/PN8/r5zrP7zVhdGCbXyq9/1SUBAAAAAAAAAAAABnX2o/kr/3jnW/9stf9faf+X2v+nmr+p/f8vs/b/WTP/dgXh1A4wteO7rr191sHqTLZcPYbPZ+vfm+WzL3vdF2LcHscvtv9P2eX9uqby3JzNz/vvTcvNZvPz/lJmsj5IivCL7Z3l+1KMX4jxrwNUqNjWe3aMy/q3Tvt66p9CvxTjKX1uaW9I/Zik9t/9+nVKx/89G1BG1t5GtCusehuB3v6zmfv/TicxVZdDEEY0LC0ZxQMYDVWP/5mue6b4wp++t3U5pMWuPdJ9vMz7L4XVGPXxJ+Vf+fifgw4tOJD2+HcDH/+yEfPyG0ADOvLC9//dkW24ddD88/FPUz/Qe4fL/zsx/7Q1d4fB8l96Lcs/vyE0oIey/LcPmP9127//xvJ/OOaf3rZ77ho0/1aJi1p3OfLrxun+X37dODmabX/q23Po7b/BgRqPxfxhko3LOLPDGpfxf/vJ62EcjtPpQJjqOeTjnQxb/lS/Iv0O7MvWX5T8vm3S8X9/NSnjuHw7xmXfh53xM037Y6PHdK1jut7jvd2sxxoYVx9u5vt/gjAaofWz2jkv/RhWXLalpaVK+/TVoXC1qn7/q/6fUHX+Vb//ZfLxf/Nz+Hz83zw9H//3B1l6Pv5v/vp8fL08PR//N38/8/F/8/Sbs/Xm4wPPlqTfUpJ+a0n6bSXp+0vSby9J/2JJ+h0l6XeWpN9Ukn5XSfqXS9K/0j/9k85F+73+npL1f7UkfbNL7VEmdfthkuXt83z/YXKk+z/9vv97S9KB8XX5jYVHH/v9Dxut9v8z7esh6T7esThdj/+dfxan8/veoWN6Oe2dOP1Rlj7q1ztgkuT9Z+S/73eXpAPjK9Xz8v2GCVT07rEnv9/Wr9+qfuf5jJevxfjrMf5GjO+N8VyM52O8EOODG1Q+1sejv/vjkZeLlf/7u7P0QeuT5+2B8n6i7h+wPPn1gWHrs+f9+A1rtfnfYHMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAytSaj4cOzRYhvPr2K8ev/OW7v12ec7S9RKP5ON0xVW+/LoT7YjwV4yvxyacfP3+6M/4sxkU4GIpQtOeHE9faOe0IIVwKB8LV0AgvPn55+oM3T7z/ejj/zMnj7721fu9AS7HeGQAAAECF/h8AAP//tpMLBw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 3118.258809][T25718] syz-executor.0[25718]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3118.287321][T25718] loop0: detected capacity change from 0 to 2048 00:34:58 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:58 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 3118.308261][T25718] syz-executor.0: attempt to access beyond end of device [ 3118.308261][T25718] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 3118.320473][T25719] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3118.435875][T25725] syz-executor.0[25725]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3118.472701][T25725] loop0: detected capacity change from 0 to 2048 [ 3118.488388][T25726] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3118.499335][T11404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3118.510901][T25725] syz-executor.0: attempt to access beyond end of device [ 3118.510901][T25725] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 3118.535666][T11404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3118.546804][ T4443] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3118.559349][T11404] usb 5-1: New USB device found, idVendor=05ac, idProduct=0251, bcdDevice= 0.40 [ 3118.568604][ T4443] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 00:34:58 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$eJzs3U2oXNUBAOBz5715+W8mNqlPjZrWFu2P7/li0mpTTcRAKYUQ6E67CTGmIc+0NCJVXKQuSjeiIGbVRSzddKO0paibElwUKSiltAhdWek2BaELKegrb+aceTMnM9yZvJ878+b74MyZe8+de86duXPnzr3nJwATq9Z8PHRotgjh1bdfOX77a+++tDznaHuJRvNxumOqHkIo4vR0tr4Pp1rxpx8/f7pXXISDzcc0HU5ca792RwjhUjgQroZGePHxy9MfvHni/dfD+WdOHn/vrfXZ+hXFemcAAAAj4OTVI4f2/euvt+353xt3HAtb2vPT+XkjTu+M5/3H4olyOl+uhe7poiN0msmWm46hli031WO5znzq2XLTffKfydZb77PclpL8pzrm9dpuGGdpP26EojbXNV2rzc21/pOH5v/6mWLuwrnFJy9WVFBgzf33zhDCAUEQJjEs7a76CATQkt8vvM6ltb1T117b9GD5X3uk1vv1sBpbW9FG7/85+Y92/r/5uSMOa2cT7k1/39WxXel7tDNO5/cR8vpLw37/0/ry+xH1AQvb7z7CuNxf6FfOqQ0ux43qV/58v9isHopxeh8eztLj96B5Oy3/TMflMwZ6+8T1f0FYk3BLUX0Zhg1LVR+AgJGV15tbilJ6Xq8vT99Skr61JH1bSfr2kvQdJekwyf7w9Evh5WLlelf+n37Y62HpOtuuGH9uyPLk1yOHzT+v9zus1eaf1yeGkbbjz5cfeOKxv7Xq/xft/f+zuL8fiNON+N26GhdI1wvz6+rtuv+N7mxqfZa7KSvOrh7LN5/v7V6u2LuyntBxnLmuHLPpFa0rurv7Lbe/e/2NbLltMWzNypufn2zPXpfOP9JxdWdXaVa2t55tx0xWjnRc2RPjvBxwI9L+2F3/f3nva9b/b9/Gmg314slzi2fui9NpP313qr5lef7CRhccWLVB2//Mhu72Pzvb8+u1zuPC7pX5RedxoZHNP9hn/v1xOv3O/WhqW3P+3OkfLz6x1hsPE+7is8+dP7W4eOannozak3AphBEohieT9CQdF04tVntcAtbf/NNP/WT+4rPP3XvuqVNnz5w9c2Hh8MIDDx5eWPjmg/PN8/r5zrP7zVhdGCbXyq9/1SUBAAAAAAAAAAAABnX2o/kr/3jnW/9stf9faf+X2v+nmr+p/f8vs/b/WTP/dgXh1A4wteO7rr191sHqTLZcPYbPZ+vfm+WzL3vdF2LcHscvtv9P2eX9uqby3JzNz/vvTcvNZvPz/lJmsj5IivCL7Z3l+1KMX4jxrwNUqNjWe3aMy/q3Tvt66p9CvxTjKX1uaW9I/Zik9t/9+nVKx/89G1BG1t5GtCusehuB3v6zmfv/TicxVZdDEEY0LC0ZxQMYDVWP/5mue6b4wp++t3U5pMWuPdJ9vMz7L4XVGPXxJ+Vf+fifgw4tOJD2+HcDH/+yEfPyG0ADOvLC9//dkW24ddD88/FPUz/Qe4fL/zsx/7Q1d4fB8l96Lcs/vyE0oIey/LcPmP9127//xvJ/OOaf3rZ77ho0/1aJi1p3OfLrxun+X37dODmabX/q23Po7b/BgRqPxfxhko3LOLPDGpfxf/vJ62EcjtPpQJjqOeTjnQxb/lS/Iv0O7MvWX5T8vm3S8X9/NSnjuHw7xmXfh53xM037Y6PHdK1jut7jvd2sxxoYVx9u5vt/gjAaofWz2jkv/RhWXLalpaVK+/TVoXC1qn7/q/6fUHX+Vb//ZfLxf/Nz+Hz83zw9H//3B1l6Pv5v/vp8fL08PR//N38/8/F/8/Sbs/Xm4wPPlqTfUpJ+a0n6bSXp+0vSby9J/2JJ+h0l6XeWpN9Ukn5XSfqXS9K/0j/9k85F+73+npL1f7UkfbNL7VEmdfthkuXt83z/YXKk+z/9vv97S9KB8XX5jYVHH/v9Dxut9v8z7esh6T7esThdj/+dfxan8/veoWN6Oe2dOP1Rlj7q1ztgkuT9Z+S/73eXpAPjK9Xz8v2GCVT07rEnv9/Wr9+qfuf5jJevxfjrMf5GjO+N8VyM52O8EOODG1Q+1sejv/vjkZeLlf/7u7P0QeuT5+2B8n6i7h+wPPn1gWHrs+f9+A1rtfnfYHMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAytSaj4cOzRYhvPr2K8ev/OW7v12ec7S9RKP5ON0xVW+/LoT7YjwV4yvxyacfP3+6M/4sxkU4GIpQtOeHE9faOe0IIVwKB8LV0AgvPn55+oM3T7z/ejj/zMnj7721fu9AS7HeGQAAAECF/h8AAP//tpMLBw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 3118.586266][T11404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3118.596472][ T4443] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 3118.608669][T11404] usb 5-1: config 0 descriptor?? 00:34:58 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3118.673573][T25729] syz-executor.0[25729]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3118.707082][T25729] loop0: detected capacity change from 0 to 2048 [ 3118.726767][T25731] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3118.727109][T25729] syz-executor.0: attempt to access beyond end of device [ 3118.727109][T25729] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 3118.762476][ T4443] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3118.776208][ T4443] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3118.791036][ T4443] usb 6-1: Product: syz [ 3118.808946][ T4443] usb 6-1: Manufacturer: syz [ 3118.814744][ T4443] usb 6-1: SerialNumber: syz [ 3119.093858][T11404] apple 0003:05AC:0251.0014: unknown main item tag 0x0 [ 3119.102582][T11404] apple 0003:05AC:0251.0014: hidraw0: USB HID v0.00 Device [HID 05ac:0251] on usb-dummy_hcd.4-1/input0 [ 3119.141902][ T4443] usb 6-1: 0:2 : does not exist [ 3119.153306][ T4443] usb 6-1: USB disconnect, device number 23 [ 3119.175982][T24826] udevd[24826]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3119.308376][T11404] usb 5-1: USB disconnect, device number 65 00:34:59 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:34:59 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x0) 00:34:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = dup3(r1, r2, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) 00:34:59 executing program 5: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 00:34:59 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:34:59 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 3119.867299][T25746] syz-executor.0[25746]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3119.925528][T25746] loop0: detected capacity change from 0 to 2048 [ 3119.950321][T25755] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3119.961401][T25746] syz-executor.0: attempt to access beyond end of device [ 3119.961401][T25746] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 00:34:59 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x0) [ 3120.051163][T25758] syz-executor.0[25758]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3120.081032][T25758] loop0: detected capacity change from 0 to 2048 00:35:00 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) [ 3120.104997][T25759] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 3120.119158][T25758] syz-executor.0: attempt to access beyond end of device [ 3120.119158][T25758] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 3120.141729][T11404] usb 6-1: new high-speed USB device number 24 using dummy_hcd 00:35:00 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@order_relaxed}, {@nobarrier}, {@order_strict}, {@discard}, {@nobarrier}]}, 0x1, 0xa60, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './bus/file0'}, 0xf) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x0) [ 3120.162942][T11673] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 3120.260749][T25765] syz-executor.0[25765]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3120.291169][T25765] loop0: detected capacity change from 0 to 2048 [ 3120.317638][T25765] syz-executor.0: attempt to access beyond end of device [ 3120.317638][T25765] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 3120.337343][T25766] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds 00:35:00 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0xffffff51) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x10001, 0x5, 0x1, 0x0, 0x1}, 0x48) [ 3120.422707][T11673] usb 5-1: Using ep0 maxpacket: 16 00:35:00 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) [ 3120.531990][T11404] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3120.542301][T11673] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 3120.554356][T11404] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3120.565394][T11673] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 3120.580083][T11673] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3120.580568][T11404] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping 00:35:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = dup3(r1, r2, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) 00:35:00 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3120.771982][T11404] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3120.781429][T11404] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3120.791467][T11404] usb 6-1: Product: syz [ 3120.795875][T11404] usb 6-1: Manufacturer: syz [ 3120.802307][T11404] usb 6-1: SerialNumber: syz [ 3120.841903][T11673] usb 5-1: string descriptor 0 read error: -22 [ 3120.848330][T11673] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3120.883515][T11673] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 00:35:00 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:00 executing program 0: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x2000001, &(0x7f0000000540)=ANY=[], 0x5, 0x54f4, &(0x7f000000ab00)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x10001, 0x5, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000280), 0xfffffffc, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000100), &(0x7f0000001100)=""/81}, 0x20) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 3121.100823][T25787] syz-executor.0[25787]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 3121.131973][T11404] usb 6-1: 0:2 : does not exist [ 3121.149553][T11673] usb 5-1: 0:2 : does not exist [ 3121.150972][T11404] usb 6-1: USB disconnect, device number 24 [ 3121.197225][T11673] usb 5-1: USB disconnect, device number 66 [ 3121.234884][T24826] udevd[24826]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3121.489263][T25787] loop0: detected capacity change from 0 to 40427 [ 3121.500212][T25787] F2FS-fs (loop0): invalid crc value [ 3121.511940][T25787] F2FS-fs (loop0): Found nat_bits in checkpoint 00:35:01 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:01 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) [ 3121.574731][T25787] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 00:35:01 executing program 5: socket$inet6(0xa, 0x0, 0x92fd) 00:35:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) 00:35:01 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8948, &(0x7f0000000040)={'veth1_vlan\x00'}) 00:35:01 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8981, 0x0) 00:35:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8917, &(0x7f0000000000)={'macvlan0\x00'}) 00:35:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@private2, @empty, @local, 0x0, 0x9d0}) 00:35:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) select(0x8, &(0x7f0000000300), 0x0, &(0x7f0000000380)={0x9}, &(0x7f00000003c0)={0x0, 0xea60}) 00:35:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0}, 0x0) 00:35:01 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x3}, 0xfffffffffffffffc) 00:35:01 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f00000009c0)={0x8, {"d62f7d60582f6fb19881113fa9651e6005211843d9388c040eed072bbffda95ae81eb28e01a7ccac116c79acb82013499764709a6d5407b983c24f5907845f4dd9af256111a80c1610966ba0aa9e19d6f13c1c89eb836cf5815f73a4f6d59e4c5949c83708bf2dc5f419c1a67af44f6893a9ca9821b1e81192a22a3a5abe6e2d58883d4df8613ae58e1e2092978016b7907195907e08983307814894f940d7c0bf233028ecc7a4a9540c6b0d0caeb26a0162b6e78917d5791f76d2c6bc97ec17729e38c52e1506bb14e3fc2509927eade476fd1d51d4bb3c8437061587b4e90bc6bd2b07a1d44e12d980371b26215ab8d63971669b46425ffe7677c3130bdd7c2351cea5680a3804039b519bc652919f2e8baa8ee632a830ae0023e9002d0084532cac293ea86ab3f91265b956a8e6026955fb09a4763bf1ef2ad753d8be4857f48fcccc03cf7f205122f5396d16b06a53fe64f8c86a894e53587969f6911b937b83700445ea95fb0d5b037abb943caa18860a7542d4f37a8593f87dd29df0b7ed8b52497013a1251380ab1499b5010499ee4e53ef1ef38e39adf7dec727da4d8f8b5cf76896c49d94900a3a97efb807ea5f02b5c0fd7ce311532065a00bd21ba88c5177f520b320ea6989d3c2e35aa39f1add8dfb8886be1318bc7beb4a1390141f5cdb92f9f0dbdecb98d00c174d040bcd5d10e0c72401afbb41a18e96cfb6329f878301859fc44701d367f3b77d2cb6ae1977718bb7460b639b08ac433c73009ec32dfc68635663f7717cf013e6e1849ceee958cb09410021b32deeb0d0c76e225d47ed6b85c382444630ca7b9969b322929dbcc134a21df041a93554e98699d05ebc27371b22d0649822cf14f220b494c64a3dd1efa3e81587c37764ee25c8cb140b1c0e8004e7fe40b19ee6e7871b5e26c09d77cc25e863d9b298f802dbb4be4f5ffbfb350425a54ea17ce0fdcc8aab15477bd48b46fd08340010363c1251b2970a75edc271fdd2f99b5af07466c473247228dd3145c214a3e4913110b22bdc67d6ee366d15dc33aa53fb0202a402aab0dbe32a2cf75c27609111e3d70c273bf649d78471790e1bc94e4f4100d118e986119bd6ffbe3b19c890fedfceefcaee74478c7847cc2a0788a59a2bf120e9fdbb1402b8a4e78e690cf830d91ead9fafa490bda7dee2c1373cda4f4968a600e089f88e30cb843afa07593ba7f7bcba81c8faa8f5c5373d6f8c08fbc7f41812435e45efd068ca22f34e9950cf99464d60be04f2a884e8b54dcedd6b5d67587ac3d5b9825700702fbf52196fe63edb17e82a2a8f1d981e47de9c46c8496356d918b718ca854a885c9e0e44339773784ffbb05a3110d099a10183f0954ce054985b28d9df68684804f650cc384aa761f117bc9486c90345c56d283c999335aaa07a2f57f5e2c5a7c2d412717bd64f912f5ea21872a8c8c0886761f881c9eac26c29f1b646546882cc2e80695a225ca95d6a607b314ef7e928c4ec8b7358826d09a87c70d012365ae4e68374efaebc054046d84d0ef29383b3263a190f7ddd297afcbf8558e1a88d9e03d9cb701e009b4587638a7d2df412860d61fa10b8d4ad6bd4f83a855f3bd09ad977384c383af4b6d6715bae5226cbc193703fac36b11de23c4917d0fbe98509687bbd8e3b24d57ad70bc225071b82b475f01c940950f1fda985e7ebc3bfb50f8987d29bb2cffc2738d4de50e5a71aedf4c0de5925b8280c1545ee2c20b3b9ae29c5fa558371a81fad6744e8606d4f4744a7eeb31fd1c3bf17d75a0c53eeeca89f1fc1359c6fea69f0da2b522ae6ea4c10768e5278a2da3d44a61dedfdeec6c9bd67712ebedb3c75043466a309c56555c6c9da59ce88211c81dd89596394b9fdcba97ebc830bae49717e6aa63e28128e8e3a7f77f152beb0f122bc783aeaf0aa13b84bfce78a05647145960ac95ab7a86751280c71ef1985cb99ff607deb2f2c4e9d60dadfa89f9cdf1b85b2cc2b66d8237f11643d5924f272eb73135339b435ce8ca018cae450cd87cc07beaedeabbd4643ca07f7e124b603d099f3f08c557cbbcf2bc48cc50a72c6a32ddcb1fbfd259b9182998fcae240867ec3aeb8b0ca0e3b8d10aef36b0688cb1a3896b00869077d063157bcdceb6cf466e99ce8d09c0f995d17d5f1fbe9abe9416777a47135ca44e5e80a99f349022008a5b09db243895b55a926c6f1f1d5ee9fd72ebd9790c74cadfcbd0f1274979dde14cf0b52ca5ba5930224012f7a38d91663525ca85a2726084312f22eac2979c8744c6be5eae7a000b555c783821d520a946441fa72570c0c3915e7aaf72f56278cea724c27e529d0ab4a691b4d84e647ca4e576613f418d911b95d4cb147184fec97e8270f4c5c986ebf20439a6bcbbff965a7d6eddb6fe79c1ef6f45e4d8d0c25e9673c7daf9612b3e9079327ac198e4ec6e7031262deb6e0e4993a31df6b00298d188296d79dd4ddbbd48481b8b2e12c16d584715e7e7a3a475f114e42d2e2ea34803612d1823a956c7c9257c377b78bf1b76a8412ffb5f22025e2f99231d02d2b375a80be5116819bda951a81d7ff598b58b79f374a39afcfdfeefe071bdccbf8e17745b98d4602802eb73222ffe1c6743d5b990e03944622f6c4ee92103323b6414850f947e83edf81dc979c04a41a9e335632fb5d2f522ef8a1c1c7c370f7925207c42fbf7e3bf7f0231ffc63bdcb96b0d8a1eeaf042a7ad28a38cf616fa02de21164df9d979595c40b9622c683f62abffbb69e87db0f6012dff48b8d8738335098800193bae383a9fb59d0922416ef441ee5e401be1e25d92118f24619eecbb2172f61003e91bf8c38d611faf0b2f6b87e5aba56ae381b14f877f3a325f57f4f8ab940ea1f93042bb0ded60fdaa099122cf359144d418c4ea1485b9311aa7c7d0ce740e12b7a7ee63055bf365fadde27347f1c50d4b01066bcd6a1ff9bad113b22c6dbc55be8a23be577c92153727c014b7ec2c0be9ebf5d1a242788e87eae44d96a326c1a6a371ddf6fd8d377aac728761294df30f3d7d2cadeb7a5a955b75176df8e510756191fea77af669b9eb529e3cf11ddbc3b4a0a65bbbdda778cd6e87a334781b2292ba94dc211e5c5c2fcd53d388be8e0a988c371350fea3ad06110aae2579f3d31d6e494fc469521eb792ec2f08c0dcdcfca2ea02aaff71e0f893b6c030fb5ad09874026a5ff3910674632c60b483b11f7ee0c3e80ef60e7889a1ec8cbb653c56e595fae6442b39d8b9d563d652827863e8af98afd6ce234c307d68fdb896bc837491f754e62e9e2d79280906fc5f7c10f13b9170fc0bf60ecc560bd0c1df02d8f8495e77588832cb18395ad80455600a348b3892749ab0c88f3b3141c00fc552b1a51b4de9cdf14da3518c9eb6ae85f3b8f1a1672a0a901a3e222a93564ab60cbcd6ded4cb5b6fe34ad6ff0ae29c800d635071df2928b3293802c6e9c5c58df3d6a023d87ba9fa0ecca32818937dbc8d420ef97dfd345087c03452636807326c02b645a0e39b405d903b843a64086f16b2a78a55bbfb68db43e80f2f1af0a48c5c0ee4e9c8e6cc2b4bf61dc5ab313e027db1179f5076fd93e495796a5a9dfd1a6bcfaa260477257124896d467529263268138533af1c9ebd0db36d63ef9e30b0ae786525a9090f8230725bc74dc4889ee106a3868947bd8ad8aaaaff1700388809c4c8f280ab07257a544bb7762cb2849a37d0cdb19ae79ac010e4eed6b65ea04cff8925f36234ca69b1fa66d314e3ee279bc991072ad8a905742000acd9563de21c06fd6a9ff56dfca16a2c585385c71328a438e4c50641070d036cc7485b0a3111a7ee613e6feaf94cbab315d1af69e9a85266510a21d4e30a39db4f5514600f2ff5f70b34bf0d0a47a58bb15b066fe92f54211b3e309bc2a7998d1f748dc0a8a14ef55c25a5543dd214f04ce6c4693d026a90b7706f9999c399523dc653d0bd029d48adbcd32d6148790228e898959692d2fb24b8242b922f2792b0690c33a0a15359acf13b564ff9e26634bc7b2d63888b00152ae9f825e7329cb2a8a51112f371038a1a4e21ee050b5f82c81fb768ddbcc7f89f1380c756d0f72cb283a82a852e14e8eb63916023e737715f1a374fd59f6fe426be7537c2afb30d8fa858802ef0afcf954851d10e8b2c5018ea5779739cf309509ec1c408723bfb5b3c8e00619ffcb117801e7a61d517b227428f8569b42c892206ff162a8e8ac2eb24511f04f64c244247c5367fa8f079c558cd61a09720019b4eed2f24dafbc67757c346b8042f8c8b218b72c1b28c299f81f1212a70682e0f5eed5704cbeac5caea9b1950dad63aa17f2c3cc1ec3ccffa4395dfb6808a7d0e44a351b3abd1095b54ab4bdc43b6966505b46716698b9b2f7fbedb2b071f4505dc7f4e5f290d56e948c73c486253f6d15635fe33bcedddf0ab12d23a82d18a77be32c7577f65fd8fe28b7702f3c14f2e00481a349d462042e4ebbbbfc8cd3187a87154cd87c6d5a21fb8afa50b4868f3b8fee79389fd87862e996f33b589e77d1020fc7c0da22c98a0f42c32662dae108609160fbff868bdefc6c5e13f519798a2403f5f50bbce00d79f7f1e9fb78ecdec60a1109161afa6c94bfcd895fd670cfb5d49668045d9d0033ae968adf1b006f94b8e8941335f5c3e6aebeaf0e8e492cc3888862e79c47499b302c908e1a69dfa583a01b7d1bc7524d4437bb72be06c766236769d2b91e45a42c5d5bd8bbf2c0b4efb073f5d3c1fcb3ddaa00d6ef4c700d85c0093790028f028502a205344fa5a1a41634f65e42b5275c996e919c4567af0099785faa421c158156f73309e5da51f7b3059984e9615792e4a0e18796359927731c75daf2c86858d1f0965ce6cede86b3723cc8340df73413ab5107352ebdee62a304c962c97318cd0373fa4359efe2607db807a4c4009c1d90a6eccc1a15d6ff6f6dcaaec560a5be406283cfb3a12741696c21ad83827651e7e83de4d33243340d39ee1480f496afd886592bf5ecc5bd482d06eb4277cae766ba7525ec8bd4400c54c8e9bda3edc8be7a20074b1469a6d9de0a106f42f2cc6e59213bd8d1082c89c7acce0d643d949b7eb7e2831ace1df7716f0eab1cbf35cf5bf26fe192a73d60305c493e311f5decf99ea264283aa1e8cbd18821a1152d0925e62a3e7b11f1d4e1520deb67bc6a47d23bb4382a7b1f5c445f4f7c7911ea5e9f03ed2f0f6d3271162f3933151456200947d8f17b0b8d0cd628d2edb61a0943e5e7b9adc2c3784348ab5cc181bcbb38eabf1d998ea0293081e3d313f796c1fb1c1b752686655956dc9005cd7c71cc59a498ccd09bb820d4d172f8fc811ba24b137bfd56c8ed00bdd7c742a90e7cc7066e777873c2ab7cd4e5b150fe16e7d10876fd2a2d05b386976bf790fb843af14a419c7d867eebcf4092dfa6e5290200bdd7f4aa2c4e0a5eb295bf17896633dbc8e745ff02e2e21142a3c21863cc32c7f372ee869758b13622540e6f4159b24914eb5c62039a7b3b5095252030edf0ce6c7b42cb65edb09d8885121b2352cea6bc248ec5cfc11c2c6ff0a8a55a309f78dd06d8031b5b92e5f11563a5f4a9d66cc21992c3a11ec0e12844d82bed10bf152c0f56b8e6773c14c59cd8b8d573b8bc0e77348d5b52d8f86ea28a61831e1b2a4cd53026cc99271989dbc3ffe9954d8ef40402f5c71e396bf3dbc5f25c5f6111ade13acd66f70fd496afc33a6055530b38a7f949dcdd7c603c850cd439dd2228180da4a63661244f809e487bc417e4eb4502ba", 0x1000}}, 0x1006) 00:35:01 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:02 executing program 5: syz_clone(0x808000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='t') 00:35:02 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) 00:35:02 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x891c, &(0x7f0000000000)={'\x00', {0x2, 0x0, @empty}}) 00:35:02 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP, 0x7) 00:35:02 executing program 4: select(0x40, &(0x7f0000000300)={0x2}, 0x0, 0x0, 0x0) 00:35:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write$P9_RSTAT(r0, 0x0, 0x0) 00:35:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) 00:35:02 executing program 5: timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=0xffffffffffffffff}, 0x0) 00:35:02 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8917, 0x0) 00:35:02 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@private2, @empty, @local}) 00:35:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8953, 0x0) 00:35:02 executing program 5: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) getpid() syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) timer_create(0x0, 0x0, &(0x7f0000003a40)) accept$inet6(0xffffffffffffffff, 0x0, 0x0) getpid() timer_settime(0x0, 0x0, &(0x7f0000003c00)={{0x77359400}, {0x77359400}}, 0x0) 00:35:02 executing program 0: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) 00:35:02 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:02 executing program 5: select(0x8, &(0x7f0000000300), 0x0, &(0x7f0000000380)={0x9}, &(0x7f00000003c0)={0x0, 0xea60}) 00:35:03 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') ioctl$NS_GET_OWNER_UID(r0, 0x4b47, 0x0) 00:35:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x5, &(0x7f00000003c0), 0x4) 00:35:03 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) 00:35:03 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, 0x0, 0x0) 00:35:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040), 0x4) 00:35:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:35:03 executing program 0: timer_settime(0x0, 0x0, &(0x7f0000003c00)={{0x77359400}, {0x77359400}}, 0x0) 00:35:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc0045878, 0x0) 00:35:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x891c, &(0x7f0000000000)={'macvlan0\x00'}) 00:35:03 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x2, 0x0, 0x0, 0x8001}]}) 00:35:03 executing program 0: syz_clone(0x808000, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="7457bc1c95ae29075b1209b40d") r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0xa40) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x6, 0x7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180)={0x1, 0x0, r1}) 00:35:03 executing program 0: ioperm(0x0, 0x5, 0x40) 00:35:03 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8934, 0x0) 00:35:03 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8991, &(0x7f0000000040)={'veth1_vlan\x00'}) 00:35:04 executing program 1: r0 = dup(0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = dup3(r0, r2, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) 00:35:04 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, 0x0, 0x0) 00:35:04 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)={0x10}, 0x10}], 0x1}, 0x0) bind$netlink(r0, &(0x7f0000000600), 0xc) 00:35:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)={0x10}, 0x10}], 0x1}, 0x0) 00:35:04 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8916, &(0x7f0000000000)={'macvlan0\x00'}) 00:35:04 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = dup2(r0, r1) dup2(r2, 0xffffffffffffffff) 00:35:04 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) 00:35:04 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) write$UHID_INPUT2(r0, 0x0, 0x0) 00:35:04 executing program 5: openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getuid() 00:35:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0xfffffffffffffffe, 0x0) 00:35:04 executing program 4: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000001140), 0x101202, 0x0) 00:35:05 executing program 1: r0 = dup(0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = dup3(r0, r2, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) 00:35:05 executing program 2: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) write$nci(r4, 0x0, 0x0) 00:35:05 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 00:35:05 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0) 00:35:05 executing program 0: write$ppp(0xffffffffffffffff, 0x0, 0x0) 00:35:05 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="fc785b94"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:05 executing program 0: inotify_init1(0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x20) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_init1(0x0) pipe2$watch_queue(&(0x7f0000000380), 0x80) 00:35:05 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) request_key(0x0, &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='\xf0/&]\\\x00', 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) 00:35:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:05 executing program 5: bpf$MAP_DELETE_BATCH(0x15, 0x0, 0x0) 00:35:05 executing program 5: syz_io_uring_setup(0x5607, &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)) 00:35:05 executing program 1: r0 = dup(0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = dup3(r0, r2, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) 00:35:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="fc785b94"], 0x208e24b) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x21) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:06 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:06 executing program 2: pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x81893, r0, 0x8000000) 00:35:06 executing program 2: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x90) 00:35:06 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pselect6(0x40, &(0x7f0000000340), &(0x7f0000000380)={0x3c}, &(0x7f00000003c0)={0x6}, &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440)={[0xffffffff00000000]}, 0x8}) 00:35:06 executing program 2: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x2, 0x0, 0x200}) 00:35:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:06 executing program 2: socket$inet6(0xa, 0x3, 0x9) 00:35:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x84}, 0x48) 00:35:06 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x400800, 0x0) 00:35:06 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001240)={0x14, 0x2, 0x1, 0x101}, 0x14}}, 0x0) 00:35:06 executing program 2: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:35:06 executing program 2: pselect6(0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000480)={&(0x7f0000000440), 0x8}) 00:35:06 executing program 4: pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) inotify_add_watch(r0, 0x0, 0x440) 00:35:07 executing program 2: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000900)='cifs.idmap\x00', &(0x7f0000000940)={'syz', 0x1}, &(0x7f0000000980)='syzkaller\x00', 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0x0) 00:35:07 executing program 4: open$dir(&(0x7f0000001040)='./file0\x00', 0x220000, 0x0) 00:35:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:07 executing program 4: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x0) read$fb(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000980)=@o_path={0x0}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000b40), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000c80)='ns/net\x00') 00:35:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:07 executing program 2: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000500)=0x20, 0x4) 00:35:07 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:07 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1018c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) 00:35:07 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x801080, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) 00:35:07 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x901084, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x50002, &(0x7f00000002c0)) 00:35:07 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x801080, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x100400, &(0x7f00000001c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}}, 0x0, 0x0, &(0x7f0000000140)) 00:35:07 executing program 4: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) 00:35:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:08 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1018c0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) 00:35:08 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x187801, 0x0) write$FUSE_WRITE(r1, 0x0, 0x0) 00:35:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:08 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:08 executing program 2: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:35:08 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa240, 0x659eb209f970091e) [ 3128.695806][ T28] audit: type=1804 audit(1693787708.624:36854): pid=26087 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir504975362/syzkaller.GoVMED/542/file0/file0" dev="sda1" ino=1993 res=1 errno=0 00:35:08 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x801080, 0x0) mount$9p_xen(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x2a40000, 0x0) 00:35:08 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x801080, 0x0) mount$9p_xen(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x2a40000, &(0x7f00000003c0)) 00:35:08 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x801080, 0x0) mount$9p_xen(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x2240000, 0x0) 00:35:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:09 executing program 2: unshare(0x20000400) 00:35:09 executing program 4: unshare(0x16051b80) 00:35:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:09 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:09 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast2}, 0x10) 00:35:09 executing program 2: bpf$MAP_CREATE(0xf, &(0x7f0000000000)=@bloom_filter, 0x48) 00:35:09 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0x13, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast2}, 0x10) 00:35:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(0xffffffffffffffff) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:09 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$llc_int(r0, 0x10c, 0x0, 0x0, 0x0) 00:35:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:09 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="0600f7080000000008009e00f87540f114002d800a"], 0x40}}, 0x0) 00:35:09 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7f) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:35:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:09 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0x19, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast2}, 0x10) 00:35:09 executing program 4: bpf$MAP_CREATE(0x6, &(0x7f0000000000)=@bloom_filter, 0x48) 00:35:09 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0xe, &(0x7f0000000540)=@framed={{}, [@call, @generic, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @call, @btf_id, @map_val, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 00:35:09 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xd, &(0x7f00000000c0)={0xff00, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast2}, 0x10) 00:35:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:09 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x38, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x38}}, 0x0) 00:35:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup(r1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(0xffffffffffffffff) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:10 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x1a, &(0x7f0000000240)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 00:35:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:10 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x3, 0x2, 0x801}, 0x14}}, 0x0) 00:35:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:10 executing program 2: pipe(&(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) 00:35:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(0xffffffffffffffff) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:11 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:11 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)) 00:35:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:12 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)) 00:35:12 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(0x0, 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:12 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:12 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:12 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)) 00:35:12 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:12 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)) 00:35:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:12 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)) 00:35:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(0x0, 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:13 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)) 00:35:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:13 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:13 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:13 executing program 2: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) 00:35:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:13 executing program 2: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) 00:35:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(0x0, 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:13 executing program 2: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) 00:35:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:35:13 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:14 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)) 00:35:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:14 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)) 00:35:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:35:14 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)) 00:35:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:14 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:15 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:35:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:16 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3136.927991][T26460] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) [ 3137.056719][T26470] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:17 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:17 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:17 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:35:17 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:35:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) [ 3137.569059][T26485] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:35:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:17 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:35:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:18 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) 00:35:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:18 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:18 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:18 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)) 00:35:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 00:35:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)) 00:35:19 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) 00:35:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:19 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:19 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)) 00:35:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(0x0, r0) 00:35:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(0x0, r0) 00:35:19 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:19 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) 00:35:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:20 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) 00:35:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(0x0, r0) 00:35:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) 00:35:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) 00:35:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) 00:35:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) 00:35:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) 00:35:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:21 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x1c}]}, 0x1c}}, 0x0) 00:35:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) 00:35:21 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) 00:35:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:21 executing program 2: pipe(&(0x7f0000000440)={0xffffffffffffffff}) write$cgroup_pressure(r0, 0x0, 0x0) 00:35:21 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 00:35:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 00:35:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x44, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}]}]}, 0x44}}, 0x0) 00:35:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000540)={@mcast1}, 0x14) 00:35:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x8, 0xb, 0x101}, 0x14}}, 0x0) 00:35:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 00:35:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:21 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)) 00:35:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f00000006c0), &(0x7f0000000700)=0x5) 00:35:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 00:35:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000040)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000100)={r4}, 0x8) 00:35:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x8) 00:35:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 00:35:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000001a00), 0x8) 00:35:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000040)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000080)=0x10) 00:35:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 00:35:22 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) sendmsg$unix(r2, &(0x7f0000000480)={&(0x7f0000000000)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f00000003c0)=[@rights], 0x10}, 0x0) 00:35:22 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)) 00:35:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 00:35:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 00:35:23 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$TUNGETVNETLE(r0, 0x800454dd, 0x0) 00:35:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:23 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002700)=[{0x0}, {&(0x7f00000013c0)=""/164, 0xa4}], 0x2}, 0x0) sendmsg$tipc(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000040)="a1", 0x1}], 0x1}, 0x0) 00:35:23 executing program 2: bpf$BPF_PROG_TEST_RUN(0x5, &(0x7f0000001bc0)={0xffffffffffffffff, 0x2000, 0x55, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 00:35:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 00:35:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 00:35:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ipvlan0\x00', 0x1}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 00:35:23 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000100)=""/113, 0x71}], 0x300}, 0x62) 00:35:23 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) close(r0) [ 3143.736459][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.745555][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 00:35:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:23 executing program 2: bpf$BPF_PROG_TEST_RUN(0x5, &(0x7f0000001bc0)={0xffffffffffffffff, 0x2000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 00:35:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 00:35:23 executing program 5: bpf$BPF_PROG_TEST_RUN(0x5, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 00:35:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:23 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)) 00:35:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 00:35:23 executing program 5: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) 00:35:23 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) unlink(&(0x7f0000000100)='./file0/file0\x00') 00:35:23 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000040)="9a", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1}, 0x0) 00:35:23 executing program 2: bpf$BPF_PROG_TEST_RUN(0x5, &(0x7f0000001bc0)={0xffffffffffffffff, 0xf4240, 0x20000000, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}, 0x50) 00:35:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 00:35:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:24 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 00:35:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x0, 0x0, 0x0, 0xc24, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) 00:35:24 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2de97bd6e90200330a6a37d9e4c24d9c267e8a4fae4b9bca0c0b95c4c82ef30c5e0d28ad92fa929d753705c646291ee56394c0d0f68d4af25d67390c9b8122ad9f48e3e4a439fe28fca371695f5a835b54728e5c551668278d5fc713758f87ec6df66190d7b4b0596a3465f04f62ae03fb5979b2c0578523a49dfb9944907034ba", 0x81}, {&(0x7f00000000c0)="505150f76ff4f0ff35bf0975decfd3e1831ecc729be040805990b3c68527c24b5acc65e05f41f7af8966e329bd9dd4f291a944819c8a58e1a2a1f7b646d0d1e6a38e49bd50577eb8fed2b878118e9a0f1c4baa63f71831f32ae005908aea59e8ee1e0fae479767a85c06527089", 0x6d}, {&(0x7f0000000140)="fa43fc6df5ae69dc445def45e589d852dbc0be229f71d82eb22b72e6d1b3e86e5edc8aa4e15ad475da9b8b32efe151f275694992bcd218ec35a689be3d4f346c29351d61849f9927a4121e0bcee83c731a41c96d137580e867935da1a23b52d7da767b6b535bb62c36767b574aebe0b04c2cb0423258715e5b55fa66fdf0684a975579c12b0c02013ac2ebcd65dbcbc1acf259df076775b5c54112be015748657010dee22f8055fb12b4e8d57208a39a45e2f4bf5124dd50f65837f81e8a6349394b76e818a549c6563592b467407e8a5ae7c1acaae423465674f8565a5ee54f2d8d8556f2e0ab3295d371", 0xeb}, {&(0x7f0000000740)="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", 0xe27}, {&(0x7f0000000240)="87", 0x1}], 0x5}, 0x0) 00:35:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, 0x0, 0x0) 00:35:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:24 executing program 3: bpf$BPF_MAP_FREEZE(0x3, 0x0, 0x0) 00:35:24 executing program 5: bpf$BPF_MAP_FREEZE(0x2, 0x0, 0x0) 00:35:24 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x26}, 0x10) 00:35:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2de97bd6e90200330a6a37d9e4c24d9c267e8a4fae4b9bca0c0b95c4c82ef30c5e0d28ad92fa929d753705c646291ee56394c0d0f68d4af25d67390c9b8122ad9f48e3e4a439fe28fca371695f5a835b54728e5c551668278d5fc713758f87ec6df66190d7b4b0596a3465f04f62ae03fb5979b2c0578523a49dfb9944907034ba", 0x81}, {&(0x7f00000000c0)="505150f76ff4f0ff35bf0975decfd3e1831ecc729be040805990b3c68527c24b5acc65e05f41f7af8966e329bd9dd4f291a944819c8a58e1a2a1f7b646d0d1e6a38e49bd50577eb8fed2b878118e9a0f1c4baa63f71831f32ae005908aea59e8ee1e0fae479767a85c06527089", 0x6d}, {&(0x7f0000000140)="fa43fc6df5ae69dc445def45e589d852dbc0be229f71d82eb22b72e6d1b3e86e5edc8aa4e15ad475da9b8b32efe151f275694992bcd218ec35a689be3d4f346c29351d61849f9927a4121e0bcee83c731a41c96d137580e867935da1a23b52d7da767b6b535bb62c36767b574aebe0b04c2cb0423258715e5b55fa66fdf0684a975579c12b0c02013ac2ebcd65dbcbc1acf259df076775b5c54112be015748657010dee22f8055fb12b4e8d57208a39a45e2f4bf5124dd50f65837f81e8a6349394b76e818a549c6563592b467407e8a5ae7c1acaae423465674f8565a5ee54f2d8d8556f2e0ab3295d371", 0xeb}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="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", 0xca8}], 0x5}, 0x0) 00:35:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0) 00:35:25 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000004c0)="11", &(0x7f0000000580)="02"}, 0x50) 00:35:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x7fff, 0x0, 0x1}, 0x48) 00:35:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000600)={&(0x7f00000002c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000540)}, 0x100) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='-', 0x1}], 0x1}, 0x0) 00:35:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x604200, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 00:35:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 00:35:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000003980)={&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, &(0x7f0000003480)=[{&(0x7f0000000040)="e9", 0x1}], 0x1, &(0x7f0000003580)=[@ip_retopts={{0x10}}], 0x10}, 0x4f6948da57493c37) 00:35:25 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) 00:35:25 executing program 5: bpf$MAP_UPDATE_BATCH(0x13, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}, 0x38) 00:35:25 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)="02"}, 0x50) 00:35:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4001) 00:35:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 00:35:26 executing program 2: socketpair(0x28, 0x0, 0x7f, &(0x7f0000000040)) 00:35:26 executing program 3: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000010c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) 00:35:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:26 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x480, 0x0) 00:35:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='-', 0x1}], 0x1}, 0x1) 00:35:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001900)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:35:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)="cf", 0x1}], 0x1}, 0x0) 00:35:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 00:35:26 executing program 5: bpf$MAP_UPDATE_BATCH(0x9, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}, 0x38) 00:35:26 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x5}, 0x10) 00:35:26 executing program 5: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000010c0)) 00:35:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2de97bd6e90200330a6a37d9e4c24d9c267e8a4fae4b9bca0c0b95c4c82ef30c5e0d28ad92fa929d753705c646291ee56394c0d0f68d4af25d67390c9b8122ad9f48e3e4a439fe28fca371695f5a835b54728e5c551668278d5fc713758f87ec6df66190d7b4b0596a3465f04f62ae03fb5979b2c0578523a49dfb9944907034ba", 0xfd36}, {&(0x7f00000002c0)="505150f76ff4f0ff35bf0975decfd3e1831ecc729be040805990b3c68527c24b5acc65e05f41f7af8966e329bd9dd4f291a944819c8a58e1a2a1f7b646d0d1e6a38e49bd50577eb8fed2b878118e9a0f1c4baa63f71831f32ae005908aea59e8ee1e0fae479767a85c06527089", 0x6d}, {&(0x7f0000000140)="fa43fc6df5ae69dc445def45e589d852dbc0be229f71d82eb22b72e6d1b3e86e5edc8aa4e15ad475da9b8b32efe151f275694992bcd218ec35a689be3d4f346c29351d61849f9927a4121e0bcee83c731a41c96d137580e867935da1a23b52d7da767b6b535bb62c36767b574aebe0b04c2cb0423258715e5b55fa66fdf0684a975579c12b0c02013ac2ebcd65dbcbc1acf259df076775b5c54112be015748657010dee22f8055fb12b4e8d57208a39a45e2f4bf5124dd50f65837f81e8a6349394b76e818a549c6563592b46740", 0xce}, {&(0x7f0000000740)="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", 0xcc5}], 0x4}, 0x0) 00:35:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}}, 0x0) 00:35:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r4 = dup3(r1, r3, 0x0) ioctl$TIOCSETD(r4, 0x5437, 0x0) 00:35:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}}, 0x0) 00:35:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:27 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x5}, 0x10) 00:35:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:35:27 executing program 2: socketpair(0x27, 0x0, 0x0, &(0x7f0000000b80)) 00:35:27 executing program 2: openat$cgroup_pressure(0xffffffffffffffff, 0xfffffffffffffffd, 0x2, 0x0) 00:35:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x58}}, 0x0) 00:35:27 executing program 5: bpf$MAP_UPDATE_BATCH(0xb, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}, 0x38) 00:35:27 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x5}, 0x10) 00:35:27 executing program 2: socketpair(0x29, 0x0, 0x0, &(0x7f0000000680)) 00:35:27 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x501581, 0x0) 00:35:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:35:28 executing program 2: bpf$MAP_UPDATE_BATCH(0x1d, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}, 0x38) 00:35:28 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x5}, 0x10) 00:35:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='-', 0x1}, {&(0x7f0000000740)="7d5141dd450f7e5363fdddbb508e170508f98305109ec988547af7356873c8c7528e83455d7383fa9bb7beabd42cecf560e82c1daf1808fcd1c8f4b258d537375c3052297cb558a6ac0f0fcd210cf1cf03924237490ae6bd7c4cfac8e8c6e290d412bd5543702d51cac5634f2933c2c82303116cf720aa909f36a7c1158a8a1d123cdadaa985d68b349aee8412a1d6d53b8efce7f7bc4dc71c3a8d4e615873269dfa4529f3eef830d3492a59a84e6225abc14ef7e4b64640731036e8eeb207e43ced9f6f39da85a1e9b556960f3c470165f9b1ae09821f193752e07e45a5ee801b3afdeaa5e11c7e95982905398d0de0f23fe1df0a6549a67e67d7c6a9b28606cc35a17e85f54be3e0e0f29e48501503f500700e4fe1efbfd4bc8e9081d5b5d95063c6e9e670dfc138dde0db5f26119cbae338c7c7fafedbdc3d58b6611afcbedc047676db006f87b5cf9bac2b6964d146787cfc8d74ce8a9ad7f0155dacf74ab7f2b152e690a14d65d9534c397219fb7ccf55bac2391f962e0f2253950ebd9a1afec4d08f979183be526119a8e73e738c7018647e8be0ab000e357ab6018328c7b0f74679b48e65b351e0160d9fa8a792c72f628b778d9258775b496476379f98c5021864f72cc629dba4938990ee59bc16631adb8d363bcd202cd2ee5a2728b1b12662f03cda917793a8dae4429556cab29076abd1ee1f7fd05a14d29e68d8a29f313abe12ccbe5b43a8ea85ab09cf6b3d467f60b575a0def395da74ba59b99d3be364cda105cc10ca14c688a06019238aaf3dd1fe1528888e13738fc6678f2614cbf97472de212232b1510cbb79e20d0991fbcccee01bb94aa30df25b7de1238855c20c0cc83188779240a374b100443bf7c1f1b019f5c75d0fbcc0013a6c89ff15b22d4533ba4decbaf77f81041d83471c74e89794634bb205b9efdf1e9aa3de9a9519d7328dba10dc5787a8d187ba0ae8415060720bb2ad1ac9ddf0307db94f1c73d3b8c95757bbc6857d273e5ba2aa32fa390f88cbfcd09dba1e13ae009696f00da0b1196ad6bca43e74c42f62b6ae991d1f3d03f7cb04e20a33586932510fdc8365a401c168aa29026335c41499f09616f1055340cf912c979c8d8f45bc0aac805ae6565f563589a416bcbbbeb34feaede7edba3d1ff048596b77207b542075541eee7cabc1b1934d019da75ace07f3d55ebd185c89faf95b0493c24517ae8717f118b1c0fbabe9eb5d075e73e29396a5a3fbcb9ced16071416594e02640a25dd32d17151d3a8396ee2d19ef44fc1c6dcad2b2110f7a6a31b127b3fe021f9bef774581e4933e65f302354b1651320db270ae862cc64aa2639037ff288796b5dced2f2add7e505fa533cf7ecac4d0f09dfacf24ef7677a0f5c943ac25959677bc191ca92461e5dea46a15c863b71aefa6f99815c19790c375b40f7ecf713aef412d2aea3b748ab1bf0aadb00fbf9807267faf3375a38c4f48e799bd45dd99c09fb0e1dcb7c1c7424b5278be64b5c2024870d90212480820777ff3ee46d6fd9b1da29c27e31d1c7cb2d9c01ceeb2de49721250c0efc7b1cc666ec6a7549faff42b2e82b7c73a032e47f060d622d825e2ee7cc66b890b491855ea6b7c1fcaec6f86446a8c8dc6601dc90b47673718d1347f6db47f9fae0e71cc9354a61c5091abb3a4f8b4c4443a9f8afd78b5d4de9b3f58bc55573d894d6f3518ba136d4ed69e2e733d219ea43f7ebcaaeb57f36c4712d4e7febe87535f5c1bb55766376ab62c23725e0ac9ce421718ede985845a076db6359252edef92317da25c0f62a190b441447cb0e172a5563be03117ea701fcef447244ba56656375f8e1da59ba4b16f4451fc34b8f16ff4a71b5b7f677080c96420a96e9c84db92e43c9d68b7de14c2dc53926fbf8e125c07c3c2ea19b1b08f7d0182dba4a36b3d2ff85053320fa0a68fdc527ce76a6a51f2a9cb07e0f3a911533b83b6b4b05ccc9810c96531e372fdf89cd23c60fc53d369c1a6275744b98b3df5201e6e7ccaf5b4808d5f2c792026866e558f2bbab74351e66dca42fcdfdf01af867e8d53e3c04fc4299d175fb71cae6a376166f837dc25159e9141968840e85e3ff6e06014b0b0124fdb7e341e94e5f1ff13dbc1e6e63a48df46bb238723f6f6247f0a443873c840a1d797a3e5e6d50bb776e61c459533a2fd725094bf5324efca99772c2508f673df69af8125ecac137201b9f5c60b7b1efcd86a6c955f5a1376ebbb209255cdeac771150de83cd280d9ddd072638ffcf9f5011fc2bdcbbc74695407504198101732926b4490f1bc97fbce502f651a47cda86012da06c7162f0fc82073b9b3398c5700e58ac438c235184b788c02a82f10cf3e1af3f5cb7ec1aef484791cdb535daffd0e54dfd73dda2d033b7af98dcf749d7c020ab2a238d73f3546ed772db2188dc269e2e0fb0d84574db880823bc0b09a5c754d42a59974d5b07ca0009db69081be5c2df60e8552eabdbd408dedcc078976f45f789df2aa619eb1ea33a3798eeeeb974cdf3ac8efaaf8b334d3b37140f686b622e34e933a52f500338b8abdfdb65ab13722ddd65201594db6aad1a3d1cbd2d5e6940ad4aad1f9651941d1b0c28524332098b8c1b82e40b9fd37bb33a7604bdb1c6b9e6264d3b7bd72a3e12258f957b2b0870f0039254ac6bca67d88412f2d127b038548e0d39124a666b49855634404c4495b291263b8c9806850ce950bbe71664438597ba3b4c0541ee6d4cc79770c3fc6d22f01315e7296c5249f2647c9aecee44ce8b0a5c1b696b819762fd7df7bb2a1427e9b5416afb14f79c77d206eb612f44436813b1c0e055d1a4c9a15dc4ff84b3b327ba136bcc0837a6f6cb7e8f315b92403a561593a7836326e5966a5e01475fefc58299d49792d8589e75931d8771bd0ea4f6e385ca7052377aaee1de67d4f81a8caabb9ed381fa0905c9f07e139781b3c1658f1c952675af3f3bd4a16e47b79fcc3beadbb4c0f8c2a80093047ba448faee6272894e2710ffbd58f07ffc103409a29ebc9c40307e7941fcb59fc6203abeedac2ac76ebc5acf167badebe4867bfa8baf29d86eaa1d1c3853ddda09a23936e900e2ee95bd6363b861610bc699316b93349742733d41be0c9dd9949c9fb8346885548aec42ed53bd1b8a30e4fc090e4d48ef5f11ba0ffe72e8feab98289b7618e63748a596478f61e7e05f98a4bc6895eccb3a800ad8c2b0bd830c035b3ba0cd16025bfc9abd6c80f69c63dd2ece6fe20b89cc4240605b70bc568a0a2c6bec62b8d708ac096dfae17a9c324c9721955419d16c8dee2d5e411f7535b2912d8f68e8b1869fdd5d631220aeb25e747fd6e16c40642573033627d6aa1998f727e246e526087feff791b197ba07d16f51d7f59eeea6d68a5e240f25c352ad30fa67afd1eebfd5f8dc5d55a7a8c812f3fea0df024005311cd798ebd3a80b542433c6a7ab457b6d8cc629448b9610e3952e55b8ce0b81c111719ddabd1e13d27f7f58b9ceb06e6db14f664ea218049c0c8fbbc6bd32c055531a7266b0ecb2e11d51981c865b3ac57c049555a6284bef2dda2d9d5472cf4f2ba331e01dcff6c3db2a5322d039d07b6e77248a482d4609717e2bb4e3fe2bc74fe4afd1fc90885122fc5a7a3f26f238c4d7c259eeb412b41e5354a2a422d31ca3a5e4cce866fd6291db8aa905d9b1c15e92f6ff9ee474b96645544a7b537e8ed683532f90b0e00ef0b4ba2df600e8e7889ae8cc9235ab61f7e7ec65e0babd9b5748960744b441798f7df6ced923b91729c1d9d3f0032a27a54b87126a70c240cf02e1264526bc5f93a6bf056e1fd62ca7cb16d3c07417520cc3ff019286f93b664f6e2ad89012b42c901db72b575aa9d2112ef5ca3c1a24068922f7766bf09fec2a91630341df25d7cb7c67f084a17caf2230ed139cd0385d17dc47465fcae4e2993de8328132ed2964c32e7f42088db28f5c9342299590f547bd88ba13ad0ebd2d84c163ddcae5c1a5e6b1096eea6eb5a3a2cb5b2d75855b3049a26a9e37ad48c24aaa57994c3a50956c3ad9ecc869643307ccac47fea11ef97076754059bc9a2143b383abe8d0f507136b4cd750184c430349ccf48d0edc6097c5b6c3422848e40ba5231c40d7cde44aa43ce867c608512911a37601d99b25d10f9f45b0a7458703f94826b6bb5435b370c3f1109f9d331502d5f78430df6a882c45d244492fdef3ec7dd90d0e7aef0ae5289a05e833f70006e5e06281060485bba5d22ee407f72054b91de94b1f6e38f4e63540e97c497f390bcc54d32377ab7fa8f6b6be54470e04961ff0f56c23bf888cc1cc56ab0cdec87f4364c71b7e1d9239010419fe50691ab155fb150f4d008c3928815e5e247b26da677ad7757c6ca4e4cac43e89270952b80e0f93d6f34dcffda464b4b1dd17f0d3a2897a147e33c0aca93cf30d9613249ca30adacc721c41b045bcc834beab8ce1c9b4594e20bcf669789e9ffcfb1400da5545b00a36dbd6eba9fc06000a3df95935d15f2b2187eec70f050a6ced1e1177a0d893b425ced7e851070f3a3c87a2ddbce01d00a87f2fc4417fe622f163a5b2b50675e499977f2c2dbacde418ab8522293b05f66654eaa0e6365d31c9fe44ba2759f1fefcd25fde5eea57a5e1ca1158e3448f96a780a365a87610eb5d70c560c72be77ae37d1a9f7e235e896a1bce79ad72fdb86b25510e86fc33a51a37b65991f79158393648e993aad62b2d463456cc7a029e324576f729c86d89ef877e67ba8d51a3f2e45d2986467461ba151dee89466cabb33b932ec789474defc54a71058fb3dfd8acb302b436ef826929564d3133ff218afbd6555d5479f5b8800e6aacaf76fe34d2c56554e753429fc7702e50daa1e154d94675235744c94ab49593a67022f5975c60db8f796a3e73baca587642f78d259b4417420da1307ef00b4dc58cd5241413cc06145acb2a263b2f9a40c4e2d67b5e4e436f5602b2efbecea2620108e9400b91d307ad3faf5adaa1bbbc00f517d00c71a48f062fdfa9da12370f9f99c54917439475481443006045bde5f80b520310c3ece3c8533c7d5798a886bcecedc3514dec146f2f2aa6201c96bb12fd95def5db1b1778b2cd4c81ff5240189970d7262bac381244b70929934bbc8db0c94e728c53df449abb70beab3cdf7eb2906a3bc854fb1e34532bb7458dd6cdab32fc6be6b507ce353fec83dbac4946434d211634ffd7bcb29d71de5b76e48325f26bd9b68f2992707b4cf17f7f3de3b0952e24d7eadad70921e13a88371d2185a02958090a178387005297566e63500e69a9664c8ad30b415fdc0ad1d4021edbf6e00a7d44a4b456c73f271584e0f1ce19b2524af83f76560defe9180473c22c2a702ed3a1d912192ccd6b5242944fb41ae6a7f5c3ab9e406b674bb7cf182ca0414578dc85145c6a06a7a613fbc35adca5ea823df1a7b0ac6be80279c2e48bb25341adf1342272a0f929ebda43f0ad11fa683dd43a056f1d94975ddae397d0ae40f07b8cd42348fea227ce895b77a407944668110a773ece05d73e3858afdd371eb5bb4a4e502ec44f8be210d6856825e46845547a60ddf9628521daa7264be57592980e5dc84446a225f0461503352617d6c8023cd69df42b906ae009c5aa8e63d0c2539f742124f8e72bac8dc7d0005d4ddc5bbe410605f02aa8e588a16371996480bcaade4d00f9e0eb747d84781d10c8a670d12cf8f6f68eb055665f81d223f3f8c86d50833fa0c2857cbe7496b7c486d109621b43508de798c4c8848bdc", 0x1000}], 0x2}, 0x0) 00:35:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = dup3(r1, r2, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) 00:35:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:35:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2de97bd6e90200330a6a37d9e4c24d9c267e8a4fae4b9bca0c0b95c4c82ef30c5e0d28ad92fa929d753705c646291ee56394c0d0f68d4af25d67390c9b8122ad9f48e3e4a439fe28fca371695f5a835b54728e5c551668278d5fc713758f87ec6df66190d7b4b0596a3465f04f62ae03fb5979b2c0578523a49dfb9944907034ba", 0x81}, {&(0x7f00000000c0)="505150f76ff4f0ff35bf0975decfd3e1831ecc729be040805990b3c68527c24b5acc65e05f41f7af8966e329bd9dd4f291a944819c8a58e1a2a1f7b646d0d1e6a38e49bd50577eb8fed2b878118e9a0f1c4baa63f71831f32ae005908aea59e8ee1e0fae479767a85c06527089", 0x6d}, {&(0x7f0000000380)="fa43fc6df5ae69dc445def45e589d852dbc0be229f71d82eb22b72e6d1b3e86e5edc8aa4e15ad475da9b8b32efe151f275694992bcd218ec35a689be3d4f346c29351d61849f9927a4121e0bcee83c731a41c96d137580e867935da1a23b52d7da767b6b535bb62c36767b574aebe0b04c2cb0423258715e5b55fa66fdf0684a975579c12b0c02013ac2ebcd65dbcbc1acf259df076775b5c54112be015748657010dee22f8055fb12b4e8d57208a39a45e2f4bf5124dd50f65837f81e8a6349394b76e818a549c6563592b46740", 0xce}, {&(0x7f0000000740)="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", 0xffffffffffffff2f}], 0x4}, 0x1) 00:35:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:35:28 executing program 5: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x50) 00:35:28 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0x14}, 0x10) 00:35:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 00:35:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:35:28 executing program 5: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="11", 0x0}, 0x50) 00:35:28 executing program 2: syz_clone(0x9c200000, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0), 0x0) 00:35:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:28 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x2, 0x0, 0xae) 00:35:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = dup3(r1, r2, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) 00:35:29 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x8}, {0x7}, {0x4, 0x2}]}, @ptr={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x51, 0x0, 0x1}, 0x20) 00:35:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:35:29 executing program 3: socketpair(0x18, 0x0, 0x200, &(0x7f00000006c0)) 00:35:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000000)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @exit, @generic, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0c}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 00:35:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:29 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000006c0)='E', 0x1}], 0x1}, 0x0) 00:35:29 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000480)=@framed={{}, [@call]}, &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 00:35:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x48) 00:35:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:35:29 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000280)=""/196, 0x26, 0xc4, 0x1}, 0x20) 00:35:29 executing program 2: socketpair$unix(0x1, 0xb96677676600c7df, 0x0, 0x0) 00:35:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r3 = dup3(r1, r2, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) 00:35:29 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001080)={0x6, 0x3, &(0x7f0000000d00)=@framed, &(0x7f0000000a80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 00:35:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:35:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x0, 0x0, 0x2}, 0x48) 00:35:29 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000003"], 0x0, 0x47}, 0x20) 00:35:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:29 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x147300, 0x0) 00:35:30 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000080)=@name, 0x10, 0x0}, 0x0) 00:35:30 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5}}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) 00:35:30 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)="ef38", 0x2}, {0x0}], 0x2}, 0x80088c1) 00:35:30 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)="ef", 0x1}], 0x1, &(0x7f0000000740)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}, 0x0) 00:35:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:35:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) dup(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) 00:35:30 executing program 2: syz_clone(0x9c200000, &(0x7f0000000000)="cec2a8e5533a7f773d01ba4c8ee56fb945e9fc84774190f4b1997dbc5ef6086da28ea6a4d905e3cbaa626262e5f23f1852e096aa3c5c2bd406c6de2fca41988b1d3496c0", 0x44, &(0x7f0000000080), 0x0, &(0x7f0000000100)="ae933d19659ecda812986886ad442ac0c0ef880d2dc834bcdfbb1fecf42221eb421d5c01b938dcf8bce95df2e644c77af1e3ad2cbcd924b69d2b5c9cc19bbcd0f8ef61defcb9a6d154bc22b87171d7c35def41123fe94d") 00:35:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200c00, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 00:35:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) 00:35:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:35:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:35:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x1, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 00:35:30 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000000)=@raw=[@map_idx], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 00:35:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:35:30 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="1fc170668c072bd99682b18a127e12c632a05c78a787b049929958570ea1218c659d8a4e0899275a7d05bf6973638bfa67f9a1cd6b60176cb1abf21a17c406b92e4f84836eb1fcf0f627d47c6f1fd47679cc26d672dffec61edd769fb5ab4ac00bc2ab2a2e3e23f9d0cbb475c2c01d0abf1524a3", 0x74}, {&(0x7f0000001200)="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", 0xff}, {&(0x7f0000001300)="0d17de52d2153184d142756020e79064eaad0102ce9ce3c836fe02585a8152a434ba4dc4c56eaac289a41cedbd4fc2ccc1301095c9704b4d763bd6045e6893aae6ab8e5da35f73dc6a0f9e92aa89e64d4f0c2f2651197b9a167f6c91fa96b4651b83c605c40bbf88541c6587f2f3aff21b046d51b8a0ea6ca1a2902d2a929b831dd7c78a637f249bff0dd4ec68242e59bbeca17271a13989a106e2f529d674d54a51d5bd5571d09df6584682b771a4185f764c1d5c4813ec8442eda393b247c79ef76ff448ceb6de885262764606f43e83021b463f43e0d0f6fc1f9327d3fefd543cfb4fc7cfb0d211b712ac54afb9b28fcf5cf805b19e91a46fa3d77b5455eb8a8c3d04e694820360e7fbabad077eebf3768b41ddcc7c2a259fadd5788d983c5604c5c60887cb324cba6cb3544b777979b0296d993ce777e95f16fbeb836d9f4361e5bce0897c0ef9a06a152858385e5e5b6e4e7aad1e89000e8cde917677fadeeb13e4e05608b25a83ebed9ddf30d9855b685fd6641ca99975a56ce48cbfa57128d5a2170fd26e104aeb8b24717443c79c1f48ea7f54834f7bcc43bcc1342e98b17912af80ba19e2290590f6535effa20f01d7657a45eb5e185cc66c62fce57277338a22447f98d64f3be70487556b247e4bbce970b76f5a2a0344d9bf0de060e70cc27b01f46f259e28ce9393ff82afe101871be52ece03f47f091e6e3faf48153ba832e09d3bd641a857ee7b70322b8778e5fd16a59746c1c7145701ddd99e7ed21eafc341c3cfdd6f0d1acba2b7272c0a205719281cb9f1e342d68429bdc3f3a314d98984dd73382b21be3db5a2cea626edd9465f15010b2616160e8c46753dae4063ab31f0cc766eadc522db62a7dfede280c31e3eb05cdb466fef846493d31f2dcd8126a54db56262bba65981d582bd9f12635d49aae64e49f3b71b5bee55f9c2a75e5cbf92ee0d77cda30e833bc8d8cb2c2a1bd1984fbbff27abb97a826914c5e224029a08c4a04eb91c5417eae0c9ec2b0db0203a677d667a9f0b7343eb09af3b0e0cb67d2f176b690818c8cd02597e63b58b9676089351a4076849d3859f57f9eb8324274976377bc2879e25953298f146cd217ec3e43c0a36430e299b7bc0b3b4f42de9a9370e1a4b4061dcb9c512628f9438bfef7196e018c9f7f3227cd2f007ec3ad4cb9e37f18f36b98d1feba9c6771b284d160fa67613293f2e0bab0d825c49c0fdfcb7d31e94f980bc017f8b0de0d657907a4ce63a5e5e31666ca5f66a4bf66bf91d103091e768fd15bc40b96ab4f9100563b14ee629459de2bb3e9d298e7156e914fc76a22c167ab75ca47470c6e85ccd1ecc9fee459dec6f4facb82234dc7555843d58df58843fd5eac8eb2afecd9b10ad3084db79c2c640c082e1fcfe7cc06a26f2a1d7eee3d30f6333f42e90915c314a73d32d9e37b17a471508ff1ecf6ebf7b998aa503060b58d45d05d13ed7e13d8310e29977a8fa16592055dd71dea371b9aae9c460a2678c755865316b234f58eded11cd282ca148e97b411456ffbad6e8bd042adf9b79d9f5aa97b81ed6ef2e53d5bca5303e7fcec9c81e8a63b3f16af66efe22e64554c6a6f0a92327f38f81c4110ed4fb6d98ff8f202e4f4fa4a635008766b2dd15855e718dfd0f9268af5ddc5fe7b5bba52bf0b9d11943ee926c4830856f8c9ccb134409a918e389a473620f2b12842f728cb7659c0820a2b7b4d33ccb92c2c9a745cc5c312d7b40738dd230caac4763bd1712f518966d51a41b517310eb2b35fb9849fd5f9445594726a7b96fe659f349d2290926db528a4f244a3fc140773b227279521241321aef67bd7b7bc0355f7d88746d9a4029d4d9dfa6ddd2c9ffee8e92dae0464c628e91190bee1f2489cfd4e553962494733e21a07f6f59571ae6f1f9a3a167dff69fec75c26a39620b93296efe784da3833c42fe39a48a517f2dcf63150161b964578531b44f32793465f56ff04267a45d1855dc38b9d22b59155c4951c4a182bee4876395a697677f7bd409a8db447d05fccc3c7bfb135076ec74324bdb6397915e17df8358d7fb83b5dbf91ff0162b742d49a16f19e349a67eb02e8d36f1a9e8f6f9472e1f2205f021fb0db272539b7971ac6cabe2615c94b060d3d453ae824b6661aa7f03c1f61471d3dd53879b8822b6b0313aa42f1212706e012ecd7d96a13ae71d4317dfaf86152891c1260a34760f8f44ecfad35b19b99e53733d59c53ef770e98dd662ae42c1b5ce525cc2424ade4ffc3ffe90f7136ca3e449868a5324059a53eaf24386f651976b40b8a966fec50dacf15bf5df66129e81435c7d1fe25b1e7f81498724c82727e6bd36563f2a43fbf6ea5f38f6dad7cc81e449a7980f8168adca26cba05486b6a433cd05b5d9bd9e5e4c53aac1471af4adff5272fc9cdcebfb9051b8b981b56c43fb14f9edfb444f81d5f257f9e2c80aa29f0f99395367bccb668027b7441416afbdae6541f88c9c2e48b585d4e206a6597e4070622ee22109490ac9161839dc508da56df170ddd3aada04734d92e08517e7fca07f11c729134165b6b44285fc2666cbd59e3859efba590ea9a1782d5af5eef2548675e99d6175b7a71bbed6d1b1488cd3c616e313c25c9dc28ee43d59feccb2f1079c9205f6b6afe4eaeb5d3ecced6f62dcdd742ae493ab33bac218c311be53fadc81ed2dcb276c1b2a3fe49a13efde9ca7f3bb3bc45d5412861257ba01c60382b9cdbc5d06e50a84c1c6aebd1f1709dd1bd73122e71c237ee586457f5a469aadfc55c53260c986b5b6557089f3264cf6f639deda249f1aa237e6501981445dcd5e44807504d0086b8b5ed737fae507b4f752a844f58438ac81cda15e68745f30232580f032d5df1d0550b70f4f35c2bd755ffb1e9c055c5b40038d6b272cf03dfe4f88bd5602b100f6036ed9a408fd2814ac5a68992c24ae5d32f2b48a5d5875be9432a11dd97b149ac3733b0d67418ecef822564844d7143bcb1fa9a504f60e1e2d778d92c51e93d7ffb71bad86673a14be4dc33f9ae5c2f75a595e6d996b060417c5916dfb725bb9cfeaaa8437c88870ec10321ac5fbc834e4dd370e5148a3db9f64a4c89bc0035547c7260d5e8845cd981cb99c047502972d699206a6a25c012171850cd960a974361eb1c013f001abc2627223bbbe651cc8f3f2cc4fa36cd851575e5c6d273e6b5e0d36d6b89a9cf8a23f77606408fe45632b591c438c9fc478ba560e1b4fd90007844691357a1509e0c3de3c8580a1642044640ea2a7bf5a514af6aeedbd16ddf66fd0673b26dd38439f09934959abe3be0d1179b4a1377b7b6825ce1a54dcf37148a27238c2996e4b3160e9d25f50f7a069cdba4dd8a4bcb0192b9f530dee2c74a870374b71e77ffc00226896396c26b784cf03a926e64cdbe86004a5519a047c567fc5396f093e5d067fea7ba514d3e62adf99778b4ffe5a8971a8d16d17870bb58e7f9a250eb9beb22601655d4ee793a1c6f3bf4f90e25f9d136f4ce960edf46c358076087f3a764b5618b80c1a6c8df92f6f140dcd8299f02e9a90d7e8a4006307e1aaeb4b60948c1cbcb080ad51c2180ffdda3a5469b5ff465c6be8cac4f3204a712521a877f69aa173319a35604687de8c2ce3766acf1223a7c23b36f6d4a9378b5b989ef8382c6e96c990f4fc2d10f014c5098421b8b9a4da9bb4e50abaf608f68068988924c05eaa07c6d6a994d0b016d168e5beee3b6436c8f065a0aeb0b9027c0b4d03b7cfb630fcaf4ef1b9e0cf9d2788703707b957241a972f6f959129d700d13a93a743818c2853aeccf630e1dc1dae2e9e71fe2459669040d746213747da05594720b1d2b57fe5a8e3a6b55b9376a8443c314c44ec20f9344e9faf4e4c5af9634e2f23dcad550ee1ba4653d9cfeb7c0d96ff07b8528b14c6ea56377e66389c7db993cc0af495580ccd823771592a4dc6eac43954b77db4d5f519e8266d861f07ec866f9c4bd26d7ff82e8626f1138123c9e87ba77bd3db0e6b7ef748f17d2e8e39cd4135df652858ffeac775872ec771ef509788dcbd08fb530a64e7a8af620227612f1908e39afa483514124c83202d11447ace7afae0c7de2ddb62e690e672c682cc78eab6695485e513be5baa3c659f4ead7ea4ed128c456089480bc304c0b3d7114da07ec57aee7da60add79384db6fbcc129be10547201598a2199fb71d79d0d2e7f7b9b788e14114db851f7fc10a614c5126c36d111d8b17eca6045e28403c53b4db258c1febd36fb2f87241463f36902781ffef135d11c618133ff5bb6a9d7ff234f8a0e7ac1536d0f5f2889bd7430474db61acdf178211b70b7e3907859ceb3ab914cb9b6897dfdbe5bd1602678999dfe934325a746464069dfa92bb99153f936087ee479b64ad675cfe4ab12829fbdbc6b74ecd5862f1a820727928057c6c54395c6b59bd6c19", 0xc4e}], 0x4}, 0x0) 00:35:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8906, 0x0) 00:35:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) dup(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) 00:35:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:35:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r1) write$cgroup_pressure(r2, &(0x7f0000000000)={'full'}, 0x2f) write$cgroup_int(r2, &(0x7f0000000080), 0x12) 00:35:31 executing program 2: sendmsg$inet(0xffffffffffffffff, 0x0, 0xd3d4df25c812f8b1) 00:35:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r1) write$cgroup_pressure(r2, &(0x7f0000000000)={'full'}, 0x2000002f) 00:35:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000014c0), 0x5b9921, 0x0) write$cgroup_type(r0, 0x0, 0xfdef) 00:35:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:35:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:35:31 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d6202, 0x0) 00:35:31 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x200, 0x0) 00:35:31 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge0\x00'}) 00:35:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) dup(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) 00:35:32 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00'}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@o_path={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1606ac2da25fda1d, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) syz_clone(0x6e90a200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:35:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:35:32 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge0\x00'}) 00:35:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:32 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x28) 00:35:32 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge0\x00'}) 00:35:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:35:32 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x28) 00:35:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000002bc0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48) [ 3152.784625][T27062] vxcan1 speed is unknown, defaulting to 1000 00:35:32 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'caif0\x00'}) 00:35:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:35:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:33 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge0\x00'}) 00:35:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:35:33 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)="91", 0x1}], 0x1, 0x0, 0x3e80}, 0x0) 00:35:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r2) r3 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) 00:35:33 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/19, 0x13}], 0x1, &(0x7f0000000100)}, 0x40002040) 00:35:33 executing program 3: syz_clone(0x21000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)="f0") 00:35:33 executing program 5: socketpair(0x64, 0x0, 0x0, &(0x7f00000004c0)) 00:35:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 00:35:33 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f00000005c0)="91", 0x1}], 0x2, &(0x7f0000000700)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}, 0x0) 00:35:33 executing program 3: syz_clone(0x21000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)="f0") 00:35:33 executing program 5: syz_clone(0x20204000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:35:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x349200, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 00:35:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:33 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000014c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) 00:35:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r2) r3 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) 00:35:34 executing program 3: syz_clone(0x21000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)="f0") 00:35:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d00)={0xffffffffffffffff}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, 0x0) 00:35:34 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000026c0)={&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="af207a4311b2b42084adf44c58961b68036141cfdf358e5cc8db82c25c", 0xfffffffffffffe3c}, {&(0x7f00000027c0)="0b20e4510ba72008749166bcc1715e53a5027504c8ae5c1d9267827e9d56fcc7cf47910a6c0f854656a9886ebe9c7809ad8d46ffa52b242d9ef834ccbe321e446e225b78785626feee424ea29bd9d050d6756027a95e6550b4cba1b32f54ad0ba4cdde622e5bd1e37a537d9de5a22837a75e9948fb873b07510c081c67a284e8f5dde0978127fac933701408bfbe82b7a884af4f313bc09782d2901ba6bfb034591c277c2d9fdfe59af137934daf5b1ba04f5b9cb998065996e3e70ef7701f5f09ad4c462927960f6be56738e4db1365fbe970ddf89e6d57ced2999a25e8274fbb7d989300657753f501927616e9de27ab6a4ba76faef352", 0xf8}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="38c15eed485fe254530f81043d0158beb0ba5ae7b5aca8996a71aff751cd7a", 0x1f}, {&(0x7f0000001500)="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", 0x1000}], 0x6, &(0x7f0000002600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @remote}}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14}}], 0xb8}, 0x0) 00:35:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 00:35:34 executing program 5: syz_clone(0x40004100, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)="8cad5fb94d3240abca0e52bfde2b2a46415524ccf1f4601b94aafda23e71774c13b03b4b959182f29524d9279a4b73d74c702ff1144dfe3cbef8a5030c425e7e02208c732aa75f0e57") 00:35:34 executing program 2: socket(0x2, 0x2, 0x0) select(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x4bbd}, 0x0) 00:35:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x90}}, 0x0) 00:35:34 executing program 3: syz_clone(0x21000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)="f0") 00:35:34 executing program 2: mlock(&(0x7f0000000000/0x1000)=nil, 0x1000) pipe2(&(0x7f0000000c40), 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) [ 3154.626239][T27145] vxcan1 speed is unknown, defaulting to 1000 00:35:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r2) r3 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r3, 0x5437, 0x0) 00:35:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x90}}, 0x0) 00:35:35 executing program 2: r0 = socket(0x18, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa) 00:35:35 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) listen(r1, 0x0) 00:35:35 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) close(r0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:35:35 executing program 5: accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0xffffffffffffffff) 00:35:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:35:35 executing program 3: r0 = getpid() r1 = getpgrp(0x0) setpgid(r0, r1) 00:35:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x90}}, 0x0) 00:35:35 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0x44) 00:35:35 executing program 2: mlock(&(0x7f0000ff7000/0x9000)=nil, 0x9000) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 00:35:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) dup3(r1, r3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 00:35:36 executing program 3: socketpair(0x1, 0x1, 0x1, &(0x7f0000000100)) 00:35:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x90}}, 0x0) 00:35:36 executing program 5: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6) 00:35:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:36 executing program 2: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) 00:35:36 executing program 2: msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xb2}}) r0 = socket(0x18, 0x1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) r1 = socket(0x18, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000000c0)={0x0, 0x1ff}, 0x10) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="c9ae5769416f77a01a10ecc5d96bdff584840b71ded1f5eb3ba260db5ee2c26532f0bf99ae547e39623c6ae99ea27fa2134597826c0da5b268246a1c6395a21367d19822ea00ad44bcfdc54b2d72ee7bc0e28486e40b40d4bd250ba05b70f2911984ace5664e4581c3547a343256279a05691ee54bd83392adfbf45996f8ecaf456e3c2e7e97ae361c", 0x89}, {&(0x7f0000000980)="f5c601655417529409bcad1d367ec0e28e2d00", 0x13}, {&(0x7f0000000a00)="ee1348163f37b988e0f1de080d85e05c1c15c3197a320f5418027be732830fbb716cb48350db", 0x26}, {&(0x7f0000000a80)="d56e721bf48acd8a48dfb105c4ea1f7ada7cb200a6eb7a04c7ad1d370475c8dd7550e814a3da96d616335060ae76c434842d3c0545", 0x35}, {&(0x7f0000000200)="27561c87c2296d8b3c2d82c150223c0857c564a791a70c5f1112e5f05a721a83b95c8e338cca136b015bdadeae4568a7279eecd7280fa40c7dec0b85e37bf2d3193fb2643f12b722dfdad9c110b64a0261fd51607f0c0c81c06b16ec01d02eb2d024eb1496a93f9803796614880800000000000000996c0bda74dd", 0x7b}], 0x5}, 0x0) 00:35:36 executing program 3: r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x292, 0x0) close(r0) 00:35:36 executing program 5: r0 = getpgrp(0x0) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setown(r1, 0x6, r0) r2 = getpgrp(0x0) fcntl$setown(r1, 0x6, r2) 00:35:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x90}}, 0x0) 00:35:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x3}, @NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x90}}, 0x0) 00:35:36 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 00:35:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) dup3(r1, r3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 00:35:37 executing program 2: mlock(&(0x7f0000ffa000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 00:35:37 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x2}) 00:35:37 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r1, 0xea543}) 00:35:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:37 executing program 5: r0 = userfaultfd(0x80801) ioctl$UFFDIO_CONTINUE(r0, 0xc0189436, 0x0) 00:35:37 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x2}) 00:35:37 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000140)) 00:35:37 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r1, 0xea543}) 00:35:37 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{}, {0x10}}) 00:35:37 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x2}) 00:35:37 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r1, 0xea543}) 00:35:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) dup3(r1, r3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5437, 0x0) 00:35:37 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r1, 0xea543}) 00:35:37 executing program 5: mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000000000000, &(0x7f0000000a00)=""/91) 00:35:37 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) 00:35:37 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x2}) 00:35:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:38 executing program 3: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0x2}) 00:35:38 executing program 2: ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, 0x0) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, 0x0) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000001ec0)=""/23) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000003240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1807, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x1f, {0x9, 0x21, 0x200, 0xd2, 0x1, {0x22, 0x5b7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xb7, 0x1, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x34, 0x3, 0x6f}}]}}}]}}]}}, &(0x7f0000003840)={0xa, &(0x7f0000003280)={0xa, 0x6, 0x250, 0x18, 0xf3, 0x8, 0x8, 0x1}, 0x12, &(0x7f00000032c0)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x2, 0x4, 0x401}, @ptm_cap={0x3}]}, 0xa, [{0x3f, &(0x7f0000003300)=@string={0x3f, 0x3, "54ca353dca992a7418559883f210dd5c802e8b6e4d7a10717b6279fa2a67bf003ea89cb0b11e500cf922ff4b314f70476b72f469a15f3f94b8b3faffc6"}}, {0x4, &(0x7f0000003340)=@lang_id={0x4, 0x3, 0x418}}, {0xef, &(0x7f0000003380)=@string={0xef, 0x3, "c90fc6142f7d4bf03c28f0d53386dcea088e87f0ed3b56f9a639f33d4e215452409589a1ee297b9f2e12446eb9691922640a162ad2fb31452e913b8a38237d87f0c8ed102e924d52a9323e0ae47a65ec69ad9d21b946fd9c06be6efbba0263abfebe513edacec6acb1ce2ee59b12d78815da8046bd9365754dfcfbd1228b2d0d12283eab13ca16faba8d8ecd23c9c27811190d67531c3be01f4a551638298f3b7d8bce26a9a16e543b4fe72070298cced9775d9b8e8803e918b741027f18640b56f3b96b025b9363886764e0cfaa2bbdd427dc606ecbb5d0f1a5b67801f0eee06cb584dede657edae29adb81ee"}}, {0xb3, &(0x7f0000003480)=@string={0xb3, 0x3, "926140f779983d5ac642639ee49dc88dd61d84d9c8e191aabe80964e32e6a9e5fab4afa32d2c76021524347b360dd211d2fe2d0fa1433369646499c6e52fbc966d2ce602cc34067e11415cedb376c07fdb9f9099f7b4a4e399bf9723dc476ab0a3d1df00a86da5dc80609ebd13263741e2c29d704f8bd386aca7d2b0d994c550d3c4b60a81c5b9072d11e2dae881436677d15a3c1c9d3982ee23e21d517526361a483bd12cfc1f65ec669f422e6b7b177d"}}, {0x4, &(0x7f0000003540)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000003580)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f00000035c0)=@lang_id={0x4, 0x3, 0x44f}}, {0xec, &(0x7f0000003600)=@string={0xec, 0x3, "6ac7f21cc6fe283c98a3e699729d158a376d4c8c3a3296c48666d3129868715d11f0abd3fb2018af7eb03f5128472292327900fe37643f48f402cfaf97af597a7e31e1fb3d23a68f6458f994360acc998f4504a2b52aab4f8be21cacc7e88819c1c34a3b4169edc58c00ad5b0170629e45edb2704b0bfc65ed0fdfecd0191682e9d2de52bbe29f7c574a38a7fae8b3a09c826c2aba7ea12a4859636132d7bad8cf0fa55730c5d34f2bf0e49695b2b4e67ba81bb4be32cffef36af6c4c7c3fac927031a2a4ff2c2ed32a9b0d7fd75e77bfbfc4c8b59914acc8c824b2f750c26465fa4423e134649da8824"}}, {0x8e, &(0x7f0000003700)=@string={0x8e, 0x3, "e1052e97191939370bde8c9d58544bc51eeeafe686a19cc2349b4048573a626b6a98f2ddcc9c0cbcbba20ef1e29443bfa0b8447f74cae64561db802060a1668b3a1f8901c5e0637435eb5ed089a73e7f4c216df68ccc5e0de1b6493e1e96b82082074d0a5958d8b12e924e71b0d5398ae4fd9a9bf85b212c06e2ef6a8410a8b733457f977117a2d8b87a5df1"}}, {0x71, &(0x7f00000037c0)=@string={0x71, 0x3, "8c255968f429ea62e4c7f179c85208687722e0b3e41c2297f5ef88926e3d4c5285394af900d8037bf32aeb0d1fb36e090ab5b88b52e575767c5766e6abbae7301d887a2c87bd5fde9f379d5f292b5dc0ae57bfb1977cd9c5b967b02ee93fd2d42e72bccc67f922e3c340262ec834a3"}}]}) 00:35:38 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 00:35:38 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0xea543}) 00:35:38 executing program 5: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x8c183) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x401, 0x0, 0x400, 0x8, 0x93, 0x1}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x200) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x100000001, 0x1010c0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0xfffe0000, 0xf1, 0x4, 0xffffffff, 0x1f}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000200)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000240)=0xffff) syz_usb_connect$cdc_ecm(0x3, 0x74, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0xba, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x31, 0x3, 0x2, 0x6, 0x0, 0xff, {{0x7, 0x24, 0x6, 0x0, 0x0, "b18d"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8001, 0x80}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x7f, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x77, 0x6, 0x2}, @dmm={0x7, 0x24, 0x14, 0x101, 0x41}, @ncm={0x6, 0x24, 0x1a, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x7, 0x1f}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xf, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x9, 0x3}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x3f, 0x1, 0x1, 0xff, 0x8}, 0x43, &(0x7f0000000340)={0x5, 0xf, 0x43, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "46d22dcf18149798b8f8dcbcfedf7445"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x5d, 0x9, 0x7fff, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x6, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x40, 0x5, 0xfffb, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xe, 0x1, 0x20}]}, 0xa, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x809}}, {0xd8, &(0x7f0000000480)=@string={0xd8, 0x3, "cd874e3c6f345b9e532b50631f891f2f34ad2612a2e08149afac753c929187f89b2038a0b6eac2f986a2415b83d2ac97156ed0c843d51225216ed1fcb576d078b86e689c4e276a12ee907d12385b9f2ea559ae3e7dcf6f1ef0213c948413c4a5ecc032fa257924425c676985c3878655232631397303beb77ad621a04c00e473352729ec7f30c93f139c10d11a9f2e8d051e2819f0daf27f275abcede89ea4f26bfff06de8a7ce3fda16afc465e44ba9e0aaf1af9442d19d6eccaf49c97a26b22da732de1c98e7782ec167fb841d663d65e937a2ec1a"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x443}}, {0x73, &(0x7f00000006c0)=@string={0x73, 0x3, "3d745a6dd0c3e54528cb8803a4a5e7ee452d38b784f7d508355161197bd9ae87b53268745aa779e0d78e9c8aa2212ad85c54605ac246b4c6583d2525670ab9e2458d5fcbcc09e1ca1d1898e315528eac09dab5cb73bfc732c60a12a6548ec43be61e56b98027116c240b5d93b616e5e5e1"}}]}) r2 = syz_open_dev$evdev(&(0x7f0000000800), 0x1, 0x103000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000840)={0x2, 0x14, 0x0, 0x7, "26ce403e925eb74ba236c12eabef5e2e41e6f3f871cc86e3c9889069ae3d27d3"}) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000880)=[0xffffffff, 0x66]) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000008c0)=""/191) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000980)=[0x0, 0x3]) r3 = syz_open_dev$evdev(&(0x7f00000009c0), 0x10001, 0x420100) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000a00)=""/38) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000a40)=""/178) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000b00)=0x4) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000b40)=0xfffffffe) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000b80)={0x4, 0x6, 0x80000000, 0x80, 0x6, 0xf3f}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000bc0)={0x7e, 0x9, 0x9, 0x9, 0x1f, 0x7}) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000c00)=0x7f) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000c40)=""/13) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000c80)=[0x3, 0x7f]) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000cc0)=""/251) write$char_usb(0xffffffffffffffff, &(0x7f0000000dc0)="85912bd089bb8b8e2761692f54d76fa17d1de8d78befb1b7ad662879a69e845e1c9a09fe6157d585a78864e7ea85864fcfefad93543ee98ab5352812755bdb26b0c757d11c843a7b3ced26adb5cad33ce30677767193502118d964a52880f40f25633f53c61094e3158b6e1a9019b31733092c95a3b1b1ddedaddcf7", 0x7c) r4 = syz_open_dev$evdev(&(0x7f0000000e40), 0x6, 0x26400) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000e80)=""/166) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000f40)=""/115) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000fc0)={0xffff, 0x5, 0x4, 0x101, 0x596, 0x3ff}) 00:35:38 executing program 3: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0x2}) [ 3158.475013][T11198] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 3158.475174][T11676] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 3158.725023][T11676] usb 6-1: Using ep0 maxpacket: 16 [ 3158.845162][T11198] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 183, changing to 11 [ 3158.857433][T11198] usb 3-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3158.870905][T11198] usb 3-1: config 1 interface 0 has no altsetting 0 00:35:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:38 executing program 3: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0x2}) 00:35:38 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0xea543}) 00:35:38 executing program 1: syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 00:35:38 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x2}) [ 3158.925243][T11676] usb 6-1: config 1 interface 0 altsetting 49 bulk endpoint 0x82 has invalid maxpacket 16 [ 3158.936167][T11676] usb 6-1: config 1 interface 0 altsetting 49 bulk endpoint 0x3 has invalid maxpacket 1023 [ 3158.946530][T11676] usb 6-1: config 1 interface 0 has no altsetting 0 00:35:38 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0xea543}) 00:35:38 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x2}) [ 3159.035186][T11198] usb 3-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.40 [ 3159.044270][T11198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3159.056857][T11198] usb 3-1: Product: ࿉ᓆ累⠼헰蘳踈㯭稜㦦㷳ⅎ剔镀ꆉ⧮齻ሮ湄榹∙੤⨖﯒䔱鄮註⌸蝽죰ჭ鈮前㊩ਾ竤굩↝䚹鳽븆ﭮʺꭣ뻾㹑컚곆캱ኛ裗䚀鎽略ﱍ퇻謢ഭ⠒ꬾ쨓猪趺춎줣磂ᤑ服᱓䨟ᙕ⤸㮏譽⛎ꆩ呮伻⃧⥰캌矙魝袎뜘Ɂ᡿୤殹嬂掓枈꫏봫⟔惜쭮킵ꗱ碶땬旞髢臛 [ 3159.091528][T11198] usb 3-1: Manufacturer: И [ 3159.103377][T11198] usb 3-1: SerialNumber: 憒项娽䋆鹣鷤跈ᷖꪑ肾亖듺ꎯⰭɶ␕笴ശᇒﻒ༭䎡椳摤욙⿥隼Ɑ˦㓌縆䄑皳翀鿛馐듷뾙⎗䟜끪톣ß涨悀붞☓䄷싢炝譏蛓Ɡ냒铙僅쓓શ얁޹ᄭ臨晃텷㱚鴜船⏮ᷢ畑㘦䠚턻ﰬ攟曬䊟欮᝻ [ 3159.155942][T11676] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3159.167913][T11676] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3159.176665][T11676] usb 6-1: Product: ࠉ [ 3159.180837][T11676] usb 6-1: Manufacturer: ࠓ [ 3159.191308][T11676] usb 6-1: SerialNumber: 蟍㱎㑯鹛⭓捐褟⼟괴ሦ䦁겯㱵醒ₛꀸ蓼ꊆ孁튃鞬渕죐핃┒渡ﳑ皵磐溸鱨❎ቪ郮ች嬸⺟妥㺮콽ṯ⇰鐼ᎄꗄ샬免礥䈤杜蕩蟃喆☣㤱ͳ랾홺ꀡL珤✵み㿉鰓턐鼚贮ḅᤨ翲娧黨ｫ淰꟨㿎ᛚ쒯ꥋꫠ꿱䊔鷑챮䦯竉눦ꜭ頜磧섮ﭧᶄ㵦ꈷ᫬ [ 3159.245171][T11405] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 3159.255854][T27269] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3159.263107][T27269] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3159.485154][T11405] usb 2-1: Using ep0 maxpacket: 16 [ 3159.555182][T11198] usbhid 3-1:1.0: can't add hid device: -71 [ 3159.561151][T11198] usbhid: probe of 3-1:1.0 failed with error -71 [ 3159.571501][T11198] usb 3-1: USB disconnect, device number 44 [ 3159.576725][T11676] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 3159.591314][T11676] usb 6-1: USB disconnect, device number 25 [ 3159.605820][T11405] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 3159.775427][T11405] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3159.785578][T11405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3159.793614][T11405] usb 2-1: Product: syz [ 3159.797985][T11405] usb 2-1: Manufacturer: syz [ 3159.802657][T11405] usb 2-1: SerialNumber: syz 00:35:39 executing program 2: syz_open_dev$evdev(&(0x7f0000001c80), 0x7, 0x0) 00:35:39 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x2}) 00:35:39 executing program 4: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r0, 0xea543}) [ 3159.846509][T11405] cdc_ether: probe of 2-1:1.0 failed with error -22 00:35:39 executing program 4: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r0, 0xea543}) 00:35:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:39 executing program 3: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0x2}) 00:35:39 executing program 2: socketpair(0x1e, 0x0, 0x9, &(0x7f0000000400)) 00:35:39 executing program 5: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x8c183) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x401, 0x0, 0x400, 0x8, 0x93, 0x1}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x200) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x100000001, 0x1010c0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0xfffe0000, 0xf1, 0x4, 0xffffffff, 0x1f}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000200)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000240)=0xffff) syz_usb_connect$cdc_ecm(0x3, 0x74, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0xba, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x31, 0x3, 0x2, 0x6, 0x0, 0xff, {{0x7, 0x24, 0x6, 0x0, 0x0, "b18d"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8001, 0x80}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x7f, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x77, 0x6, 0x2}, @dmm={0x7, 0x24, 0x14, 0x101, 0x41}, @ncm={0x6, 0x24, 0x1a, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x7, 0x1f}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xf, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x9, 0x3}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x3f, 0x1, 0x1, 0xff, 0x8}, 0x43, &(0x7f0000000340)={0x5, 0xf, 0x43, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "46d22dcf18149798b8f8dcbcfedf7445"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x5d, 0x9, 0x7fff, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x6, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x40, 0x5, 0xfffb, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xe, 0x1, 0x20}]}, 0xa, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x809}}, {0xd8, &(0x7f0000000480)=@string={0xd8, 0x3, "cd874e3c6f345b9e532b50631f891f2f34ad2612a2e08149afac753c929187f89b2038a0b6eac2f986a2415b83d2ac97156ed0c843d51225216ed1fcb576d078b86e689c4e276a12ee907d12385b9f2ea559ae3e7dcf6f1ef0213c948413c4a5ecc032fa257924425c676985c3878655232631397303beb77ad621a04c00e473352729ec7f30c93f139c10d11a9f2e8d051e2819f0daf27f275abcede89ea4f26bfff06de8a7ce3fda16afc465e44ba9e0aaf1af9442d19d6eccaf49c97a26b22da732de1c98e7782ec167fb841d663d65e937a2ec1a"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x443}}, {0x73, &(0x7f00000006c0)=@string={0x73, 0x3, "3d745a6dd0c3e54528cb8803a4a5e7ee452d38b784f7d508355161197bd9ae87b53268745aa779e0d78e9c8aa2212ad85c54605ac246b4c6583d2525670ab9e2458d5fcbcc09e1ca1d1898e315528eac09dab5cb73bfc732c60a12a6548ec43be61e56b98027116c240b5d93b616e5e5e1"}}]}) r2 = syz_open_dev$evdev(&(0x7f0000000800), 0x1, 0x103000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000840)={0x2, 0x14, 0x0, 0x7, "26ce403e925eb74ba236c12eabef5e2e41e6f3f871cc86e3c9889069ae3d27d3"}) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000880)=[0xffffffff, 0x66]) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000008c0)=""/191) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000980)=[0x0, 0x3]) r3 = syz_open_dev$evdev(&(0x7f00000009c0), 0x10001, 0x420100) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000a00)=""/38) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000a40)=""/178) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000b00)=0x4) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000b40)=0xfffffffe) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000b80)={0x4, 0x6, 0x80000000, 0x80, 0x6, 0xf3f}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000bc0)={0x7e, 0x9, 0x9, 0x9, 0x1f, 0x7}) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000c00)=0x7f) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000c40)=""/13) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000c80)=[0x3, 0x7f]) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000cc0)=""/251) write$char_usb(0xffffffffffffffff, &(0x7f0000000dc0)="85912bd089bb8b8e2761692f54d76fa17d1de8d78befb1b7ad662879a69e845e1c9a09fe6157d585a78864e7ea85864fcfefad93543ee98ab5352812755bdb26b0c757d11c843a7b3ced26adb5cad33ce30677767193502118d964a52880f40f25633f53c61094e3158b6e1a9019b31733092c95a3b1b1ddedaddcf7", 0x7c) r4 = syz_open_dev$evdev(&(0x7f0000000e40), 0x6, 0x26400) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000e80)=""/166) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000f40)=""/115) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000fc0)={0xffff, 0x5, 0x4, 0x101, 0x596, 0x3ff}) [ 3160.053228][T11674] usb 2-1: USB disconnect, device number 13 [ 3160.345479][T11673] usb 6-1: new high-speed USB device number 26 using dummy_hcd 00:35:40 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, 0x0) 00:35:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{}, "db9366bf3ce7e41d", "996f1ba720cd9ed8492d00d7294c7e42", "0f8f5b0d", "5f15b0d64cf6fe22"}, 0x28) 00:35:40 executing program 4: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r0, 0xea543}) 00:35:40 executing program 3: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0x2}) 00:35:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:40 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r1, 0xea543}) 00:35:40 executing program 3: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0x2}) 00:35:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, 0x15, 0xa, 0x3}, 0x14}}, 0x0) [ 3160.595418][T11673] usb 6-1: Using ep0 maxpacket: 16 00:35:40 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r1, 0xea543}) 00:35:40 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x5, &(0x7f00000010c0)=@framed={{}, [@cb_func]}, &(0x7f0000001100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 00:35:40 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r1, 0xea543}) [ 3160.825504][T11673] usb 6-1: config 1 interface 0 altsetting 49 bulk endpoint 0x82 has invalid maxpacket 16 [ 3160.835483][T11673] usb 6-1: config 1 interface 0 altsetting 49 bulk endpoint 0x3 has invalid maxpacket 1023 [ 3160.847179][T11673] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3161.016554][T11673] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3161.026743][T11673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3161.035091][T11673] usb 6-1: Product: ࠉ [ 3161.039488][T11673] usb 6-1: Manufacturer: ࠓ [ 3161.044082][T11673] usb 6-1: SerialNumber: 蟍㱎㑯鹛⭓捐褟⼟괴ሦ䦁겯㱵醒ₛꀸ蓼ꊆ孁튃鞬渕죐핃┒渡ﳑ皵磐溸鱨❎ቪ郮ች嬸⺟妥㺮콽ṯ⇰鐼ᎄꗄ샬免礥䈤杜蕩蟃喆☣㤱ͳ랾홺ꀡL珤✵み㿉鰓턐鼚贮ḅᤨ翲娧黨ｫ淰꟨㿎ᛚ쒯ꥋꫠ꿱䊔鷑챮䦯竉눦ꜭ頜磧섮ﭧᶄ㵦ꈷ᫬ [ 3161.106478][T27300] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3161.113782][T27300] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3161.425425][T11673] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 3161.435072][T11673] usb 6-1: USB disconnect, device number 26 00:35:41 executing program 5: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x8c183) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x401, 0x0, 0x400, 0x8, 0x93, 0x1}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x200) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x100000001, 0x1010c0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0xfffe0000, 0xf1, 0x4, 0xffffffff, 0x1f}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000200)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000240)=0xffff) syz_usb_connect$cdc_ecm(0x3, 0x74, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0xba, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x31, 0x3, 0x2, 0x6, 0x0, 0xff, {{0x7, 0x24, 0x6, 0x0, 0x0, "b18d"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8001, 0x80}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x7f, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x77, 0x6, 0x2}, @dmm={0x7, 0x24, 0x14, 0x101, 0x41}, @ncm={0x6, 0x24, 0x1a, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x7, 0x1f}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xf, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x9, 0x3}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x3f, 0x1, 0x1, 0xff, 0x8}, 0x43, &(0x7f0000000340)={0x5, 0xf, 0x43, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "46d22dcf18149798b8f8dcbcfedf7445"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x5d, 0x9, 0x7fff, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x6, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x40, 0x5, 0xfffb, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xe, 0x1, 0x20}]}, 0xa, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x809}}, {0xd8, &(0x7f0000000480)=@string={0xd8, 0x3, "cd874e3c6f345b9e532b50631f891f2f34ad2612a2e08149afac753c929187f89b2038a0b6eac2f986a2415b83d2ac97156ed0c843d51225216ed1fcb576d078b86e689c4e276a12ee907d12385b9f2ea559ae3e7dcf6f1ef0213c948413c4a5ecc032fa257924425c676985c3878655232631397303beb77ad621a04c00e473352729ec7f30c93f139c10d11a9f2e8d051e2819f0daf27f275abcede89ea4f26bfff06de8a7ce3fda16afc465e44ba9e0aaf1af9442d19d6eccaf49c97a26b22da732de1c98e7782ec167fb841d663d65e937a2ec1a"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x443}}, {0x73, &(0x7f00000006c0)=@string={0x73, 0x3, "3d745a6dd0c3e54528cb8803a4a5e7ee452d38b784f7d508355161197bd9ae87b53268745aa779e0d78e9c8aa2212ad85c54605ac246b4c6583d2525670ab9e2458d5fcbcc09e1ca1d1898e315528eac09dab5cb73bfc732c60a12a6548ec43be61e56b98027116c240b5d93b616e5e5e1"}}]}) r2 = syz_open_dev$evdev(&(0x7f0000000800), 0x1, 0x103000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000840)={0x2, 0x14, 0x0, 0x7, "26ce403e925eb74ba236c12eabef5e2e41e6f3f871cc86e3c9889069ae3d27d3"}) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000880)=[0xffffffff, 0x66]) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000008c0)=""/191) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000980)=[0x0, 0x3]) r3 = syz_open_dev$evdev(&(0x7f00000009c0), 0x10001, 0x420100) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000a00)=""/38) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000a40)=""/178) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000b00)=0x4) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000b40)=0xfffffffe) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000b80)={0x4, 0x6, 0x80000000, 0x80, 0x6, 0xf3f}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000bc0)={0x7e, 0x9, 0x9, 0x9, 0x1f, 0x7}) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000c00)=0x7f) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000c40)=""/13) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000c80)=[0x3, 0x7f]) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000cc0)=""/251) write$char_usb(0xffffffffffffffff, &(0x7f0000000dc0)="85912bd089bb8b8e2761692f54d76fa17d1de8d78befb1b7ad662879a69e845e1c9a09fe6157d585a78864e7ea85864fcfefad93543ee98ab5352812755bdb26b0c757d11c843a7b3ced26adb5cad33ce30677767193502118d964a52880f40f25633f53c61094e3158b6e1a9019b31733092c95a3b1b1ddedaddcf7", 0x7c) r4 = syz_open_dev$evdev(&(0x7f0000000e40), 0x6, 0x26400) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000e80)=""/166) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000f40)=""/115) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000fc0)={0xffff, 0x5, 0x4, 0x101, 0x596, 0x3ff}) 00:35:41 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f00000018c0)="d3", 0x1}, {0x0}], 0x3, &(0x7f0000001ac0)="5efadaa1cb2e231d6ad7bb640f79ec194c37e23b610beaf04e3d68fe66909082a05c63ffdc", 0x25}, 0x10000840) 00:35:41 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r1, 0xea543}) 00:35:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001240)={0x34, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_SYNPROXY={0x4}, @CTA_ID={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x111c}, @CTA_MARK_MASK={0x8}, @CTA_LABELS={0x4}]}, 0x34}}, 0x0) 00:35:41 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) 00:35:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:41 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) 00:35:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0xfc, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x94, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'macvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWFLOWTABLE={0x7c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}]}]}]}, @NFT_MSG_NEWRULE={0xc28, 0x6, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0xc04, 0x7, 0x1, 0x0, "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"}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x301}, @NFT_MSG_DELRULE={0x94, 0x8, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5e, 0x7, 0x1, 0x0, "f99d888b579d5f4daccd2a923dcf86803f6767603fa10b866b23b0f828b5cf26ee5d16185fa23a63e4215ec4cf7bffacd221eee181e4d1598cf60a46e15bf3e120d818ac801e2ab9fce62b28440ef8717d7e7111dc04687eacbc"}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_HANDLE={0xc}}], {0x14}}, 0xec4}}, 0x0) 00:35:41 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r1, 0xea543}) 00:35:41 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) 00:35:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)={0x4bc, 0x0, 0x5, 0x3, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "54fc8956696c35cf7f8cf9fd31ff81768abd99ef77ddc7cc19a92d7d0d539670", "e498c2ff10e4194d7351b14924e131c4d4079ab747b0c603a17b8590142e8e4a"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "ac7efe6b59d76e7b5460c37dc757a856f841092724df85e7a05038d86dffca55", "26d1b2e3f9fb5c893b15ab739e768985a30773ed78586374dded31c6f94e6d53"}}}]}, 0x4bc}}, 0x0) 00:35:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000004480)={&(0x7f0000004440)={0x14, 0x5, 0x6, 0x905}, 0x14}}, 0x0) [ 3162.155506][T11405] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 3162.425595][T11405] usb 6-1: Using ep0 maxpacket: 16 [ 3162.665594][T11405] usb 6-1: config 1 interface 0 altsetting 49 bulk endpoint 0x82 has invalid maxpacket 16 [ 3162.675728][T11405] usb 6-1: config 1 interface 0 altsetting 49 bulk endpoint 0x3 has invalid maxpacket 1023 [ 3162.687286][T11405] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3162.845552][T11405] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3162.854614][T11405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3162.862751][T11405] usb 6-1: Product: ࠉ [ 3162.868447][T11405] usb 6-1: Manufacturer: ࠓ [ 3162.873052][T11405] usb 6-1: SerialNumber: 蟍㱎㑯鹛⭓捐褟⼟괴ሦ䦁겯㱵醒ₛꀸ蓼ꊆ孁튃鞬渕죐핃┒渡ﳑ皵磐溸鱨❎ቪ郮ች嬸⺟妥㺮콽ṯ⇰鐼ᎄꗄ샬免礥䈤杜蕩蟃喆☣㤱ͳ랾홺ꀡL珤✵み㿉鰓턐鼚贮ḅᤨ翲娧黨ｫ淰꟨㿎ᛚ쒯ꥋꫠ꿱䊔鷑챮䦯竉눦ꜭ頜磧섮ﭧᶄ㵦ꈷ᫬ [ 3162.925842][T27333] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3162.933069][T27333] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3163.245635][T11405] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 3163.266263][T11405] usb 6-1: USB disconnect, device number 27 00:35:43 executing program 5: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x8c183) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x401, 0x0, 0x400, 0x8, 0x93, 0x1}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x200) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x100000001, 0x1010c0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0xfffe0000, 0xf1, 0x4, 0xffffffff, 0x1f}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000200)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000240)=0xffff) syz_usb_connect$cdc_ecm(0x3, 0x74, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0xba, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x31, 0x3, 0x2, 0x6, 0x0, 0xff, {{0x7, 0x24, 0x6, 0x0, 0x0, "b18d"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8001, 0x80}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x7f, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x77, 0x6, 0x2}, @dmm={0x7, 0x24, 0x14, 0x101, 0x41}, @ncm={0x6, 0x24, 0x1a, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x7, 0x1f}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xf, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x9, 0x3}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x3f, 0x1, 0x1, 0xff, 0x8}, 0x43, &(0x7f0000000340)={0x5, 0xf, 0x43, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "46d22dcf18149798b8f8dcbcfedf7445"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x5d, 0x9, 0x7fff, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x6, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x40, 0x5, 0xfffb, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xe, 0x1, 0x20}]}, 0xa, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x809}}, {0xd8, &(0x7f0000000480)=@string={0xd8, 0x3, "cd874e3c6f345b9e532b50631f891f2f34ad2612a2e08149afac753c929187f89b2038a0b6eac2f986a2415b83d2ac97156ed0c843d51225216ed1fcb576d078b86e689c4e276a12ee907d12385b9f2ea559ae3e7dcf6f1ef0213c948413c4a5ecc032fa257924425c676985c3878655232631397303beb77ad621a04c00e473352729ec7f30c93f139c10d11a9f2e8d051e2819f0daf27f275abcede89ea4f26bfff06de8a7ce3fda16afc465e44ba9e0aaf1af9442d19d6eccaf49c97a26b22da732de1c98e7782ec167fb841d663d65e937a2ec1a"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x443}}, {0x73, &(0x7f00000006c0)=@string={0x73, 0x3, "3d745a6dd0c3e54528cb8803a4a5e7ee452d38b784f7d508355161197bd9ae87b53268745aa779e0d78e9c8aa2212ad85c54605ac246b4c6583d2525670ab9e2458d5fcbcc09e1ca1d1898e315528eac09dab5cb73bfc732c60a12a6548ec43be61e56b98027116c240b5d93b616e5e5e1"}}]}) r2 = syz_open_dev$evdev(&(0x7f0000000800), 0x1, 0x103000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000840)={0x2, 0x14, 0x0, 0x7, "26ce403e925eb74ba236c12eabef5e2e41e6f3f871cc86e3c9889069ae3d27d3"}) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000880)=[0xffffffff, 0x66]) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000008c0)=""/191) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000980)=[0x0, 0x3]) r3 = syz_open_dev$evdev(&(0x7f00000009c0), 0x10001, 0x420100) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000a00)=""/38) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000a40)=""/178) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000b00)=0x4) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000b40)=0xfffffffe) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000b80)={0x4, 0x6, 0x80000000, 0x80, 0x6, 0xf3f}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000bc0)={0x7e, 0x9, 0x9, 0x9, 0x1f, 0x7}) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000c00)=0x7f) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000c40)=""/13) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000c80)=[0x3, 0x7f]) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000cc0)=""/251) write$char_usb(0xffffffffffffffff, &(0x7f0000000dc0)="85912bd089bb8b8e2761692f54d76fa17d1de8d78befb1b7ad662879a69e845e1c9a09fe6157d585a78864e7ea85864fcfefad93543ee98ab5352812755bdb26b0c757d11c843a7b3ced26adb5cad33ce30677767193502118d964a52880f40f25633f53c61094e3158b6e1a9019b31733092c95a3b1b1ddedaddcf7", 0x7c) r4 = syz_open_dev$evdev(&(0x7f0000000e40), 0x6, 0x26400) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000e80)=""/166) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000f40)=""/115) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000fc0)={0xffff, 0x5, 0x4, 0x101, 0x596, 0x3ff}) 00:35:43 executing program 2: r0 = io_uring_setup(0x163c, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x2, 0x0) 00:35:43 executing program 1: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000140)) 00:35:43 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r1, 0xea543}) 00:35:43 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x20240, 0x0) 00:35:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:43 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@multicast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @broadcast, @link_local, @local}}}}, 0x0) 00:35:43 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f00000001c0)="b8010000000f01d90f01c4b805000000b9d6e51ba10f01c10f49b04998218fc42259454600440f30430f01a78a000000b805000000b96e0000000f01c1400f78d4440f1010", 0x45}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:43 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0xea543}) 00:35:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x144}}, 0x0) 00:35:43 executing program 3: socketpair(0x18, 0x0, 0xfa4c, &(0x7f0000000000)) 00:35:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 3164.025573][T11673] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 3164.265543][T11673] usb 6-1: Using ep0 maxpacket: 16 [ 3164.465691][T11673] usb 6-1: config 1 interface 0 altsetting 49 bulk endpoint 0x82 has invalid maxpacket 16 [ 3164.475716][T11673] usb 6-1: config 1 interface 0 altsetting 49 bulk endpoint 0x3 has invalid maxpacket 1023 [ 3164.487510][T11673] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3164.645753][T11673] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3164.654824][T11673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3164.662914][T11673] usb 6-1: Product: ࠉ [ 3164.667192][T11673] usb 6-1: Manufacturer: ࠓ [ 3164.671832][T11673] usb 6-1: SerialNumber: 蟍㱎㑯鹛⭓捐褟⼟괴ሦ䦁겯㱵醒ₛꀸ蓼ꊆ孁튃鞬渕죐핃┒渡ﳑ皵磐溸鱨❎ቪ郮ች嬸⺟妥㺮콽ṯ⇰鐼ᎄꗄ샬免礥䈤杜蕩蟃喆☣㤱ͳ랾홺ꀡL珤✵み㿉鰓턐鼚贮ḅᤨ翲娧黨ｫ淰꟨㿎ᛚ쒯ꥋꫠ꿱䊔鷑챮䦯竉눦ꜭ頜磧섮ﭧᶄ㵦ꈷ᫬ [ 3164.726156][T27369] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3164.733929][T27369] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3165.045695][T11673] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 3165.058992][T11673] usb 6-1: USB disconnect, device number 28 00:35:45 executing program 5: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x8c183) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x401, 0x0, 0x400, 0x8, 0x93, 0x1}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x200) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x100000001, 0x1010c0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0xfffe0000, 0xf1, 0x4, 0xffffffff, 0x1f}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000200)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000240)=0xffff) syz_usb_connect$cdc_ecm(0x3, 0x74, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0xba, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x31, 0x3, 0x2, 0x6, 0x0, 0xff, {{0x7, 0x24, 0x6, 0x0, 0x0, "b18d"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8001, 0x80}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x7f, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x77, 0x6, 0x2}, @dmm={0x7, 0x24, 0x14, 0x101, 0x41}, @ncm={0x6, 0x24, 0x1a, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x7, 0x1f}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xf, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x9, 0x3}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x3f, 0x1, 0x1, 0xff, 0x8}, 0x43, &(0x7f0000000340)={0x5, 0xf, 0x43, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "46d22dcf18149798b8f8dcbcfedf7445"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x5d, 0x9, 0x7fff, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x6, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x40, 0x5, 0xfffb, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xe, 0x1, 0x20}]}, 0xa, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x809}}, {0xd8, &(0x7f0000000480)=@string={0xd8, 0x3, "cd874e3c6f345b9e532b50631f891f2f34ad2612a2e08149afac753c929187f89b2038a0b6eac2f986a2415b83d2ac97156ed0c843d51225216ed1fcb576d078b86e689c4e276a12ee907d12385b9f2ea559ae3e7dcf6f1ef0213c948413c4a5ecc032fa257924425c676985c3878655232631397303beb77ad621a04c00e473352729ec7f30c93f139c10d11a9f2e8d051e2819f0daf27f275abcede89ea4f26bfff06de8a7ce3fda16afc465e44ba9e0aaf1af9442d19d6eccaf49c97a26b22da732de1c98e7782ec167fb841d663d65e937a2ec1a"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x443}}, {0x73, &(0x7f00000006c0)=@string={0x73, 0x3, "3d745a6dd0c3e54528cb8803a4a5e7ee452d38b784f7d508355161197bd9ae87b53268745aa779e0d78e9c8aa2212ad85c54605ac246b4c6583d2525670ab9e2458d5fcbcc09e1ca1d1898e315528eac09dab5cb73bfc732c60a12a6548ec43be61e56b98027116c240b5d93b616e5e5e1"}}]}) r2 = syz_open_dev$evdev(&(0x7f0000000800), 0x1, 0x103000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000840)={0x2, 0x14, 0x0, 0x7, "26ce403e925eb74ba236c12eabef5e2e41e6f3f871cc86e3c9889069ae3d27d3"}) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000880)=[0xffffffff, 0x66]) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000008c0)=""/191) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000980)=[0x0, 0x3]) r3 = syz_open_dev$evdev(&(0x7f00000009c0), 0x10001, 0x420100) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000a00)=""/38) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000a40)=""/178) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000b00)=0x4) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000b40)=0xfffffffe) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000b80)={0x4, 0x6, 0x80000000, 0x80, 0x6, 0xf3f}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000bc0)={0x7e, 0x9, 0x9, 0x9, 0x1f, 0x7}) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000c00)=0x7f) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000c40)=""/13) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000c80)=[0x3, 0x7f]) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000cc0)=""/251) write$char_usb(0xffffffffffffffff, &(0x7f0000000dc0)="85912bd089bb8b8e2761692f54d76fa17d1de8d78befb1b7ad662879a69e845e1c9a09fe6157d585a78864e7ea85864fcfefad93543ee98ab5352812755bdb26b0c757d11c843a7b3ced26adb5cad33ce30677767193502118d964a52880f40f25633f53c61094e3158b6e1a9019b31733092c95a3b1b1ddedaddcf7", 0x7c) r4 = syz_open_dev$evdev(&(0x7f0000000e40), 0x6, 0x26400) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000e80)=""/166) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000f40)=""/115) 00:35:45 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001840)='2', 0x1}, {&(0x7f00000018c0)="d3", 0x1}, {0x0}], 0x3, &(0x7f0000001ac0)="5efadaa1cb2e231d6ad7bb640f79ec194c37e23b610beaf04e3d68fe66909082a05c63ffdc", 0x25}, 0x10000840) 00:35:45 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sync() 00:35:45 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0xea543}) 00:35:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:45 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f00000001c0)="b8010000000f01d90f01c4b805000000b9d6e51ba10f01c10f49b04998218fc42259454600440f30430f01a78a000000b805000000b96e0000000f01c1400f78d4440f1010", 0x45}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:45 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0xea543}) 00:35:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002800)={0x0, 0x0, 0x0}, 0x0) 00:35:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:35:45 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r1, 0xea543}) 00:35:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @broadcast}}}]}]}, 0x2c}}, 0x0) 00:35:45 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f00000001c0)="b8010000000f01d90f01c4b805000000b9d6e51ba10f01c10f49b04998218fc42259454600440f30430f01a78a000000b805000000b96e0000000f01c1400f78d4440f1010", 0x45}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3165.702096][T27412] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 3165.765832][ T4443] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 3166.025653][ T4443] usb 6-1: Using ep0 maxpacket: 16 [ 3166.225817][ T4443] usb 6-1: config 1 interface 0 altsetting 49 bulk endpoint 0x82 has invalid maxpacket 16 [ 3166.235895][ T4443] usb 6-1: config 1 interface 0 altsetting 49 bulk endpoint 0x3 has invalid maxpacket 1023 [ 3166.247605][ T4443] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3166.405844][ T4443] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3166.414996][ T4443] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3166.423260][ T4443] usb 6-1: Product: ࠉ [ 3166.428357][ T4443] usb 6-1: Manufacturer: ࠓ [ 3166.432979][ T4443] usb 6-1: SerialNumber: 蟍㱎㑯鹛⭓捐褟⼟괴ሦ䦁겯㱵醒ₛꀸ蓼ꊆ孁튃鞬渕죐핃┒渡ﳑ皵磐溸鱨❎ቪ郮ች嬸⺟妥㺮콽ṯ⇰鐼ᎄꗄ샬免礥䈤杜蕩蟃喆☣㤱ͳ랾홺ꀡL珤✵み㿉鰓턐鼚贮ḅᤨ翲娧黨ｫ淰꟨㿎ᛚ쒯ꥋꫠ꿱䊔鷑챮䦯竉눦ꜭ頜磧섮ﭧᶄ㵦ꈷ᫬ [ 3166.486339][T27388] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3166.493569][T27388] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3166.805878][ T4443] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 3166.819317][ T4443] usb 6-1: USB disconnect, device number 29 00:35:47 executing program 5: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x8c183) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x401, 0x0, 0x400, 0x8, 0x93, 0x1}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x200) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x100000001, 0x1010c0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0xfffe0000, 0xf1, 0x4, 0xffffffff, 0x1f}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000200)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000240)=0xffff) syz_usb_connect$cdc_ecm(0x3, 0x74, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0xba, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x31, 0x3, 0x2, 0x6, 0x0, 0xff, {{0x7, 0x24, 0x6, 0x0, 0x0, "b18d"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8001, 0x80}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x7f, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x77, 0x6, 0x2}, @dmm={0x7, 0x24, 0x14, 0x101, 0x41}, @ncm={0x6, 0x24, 0x1a, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x7, 0x1f}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xf, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x9, 0x3}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x3f, 0x1, 0x1, 0xff, 0x8}, 0x43, &(0x7f0000000340)={0x5, 0xf, 0x43, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "46d22dcf18149798b8f8dcbcfedf7445"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x5d, 0x9, 0x7fff, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x6, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x40, 0x5, 0xfffb, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xe, 0x1, 0x20}]}, 0xa, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x809}}, {0xd8, &(0x7f0000000480)=@string={0xd8, 0x3, "cd874e3c6f345b9e532b50631f891f2f34ad2612a2e08149afac753c929187f89b2038a0b6eac2f986a2415b83d2ac97156ed0c843d51225216ed1fcb576d078b86e689c4e276a12ee907d12385b9f2ea559ae3e7dcf6f1ef0213c948413c4a5ecc032fa257924425c676985c3878655232631397303beb77ad621a04c00e473352729ec7f30c93f139c10d11a9f2e8d051e2819f0daf27f275abcede89ea4f26bfff06de8a7ce3fda16afc465e44ba9e0aaf1af9442d19d6eccaf49c97a26b22da732de1c98e7782ec167fb841d663d65e937a2ec1a"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x443}}, {0x73, &(0x7f00000006c0)=@string={0x73, 0x3, "3d745a6dd0c3e54528cb8803a4a5e7ee452d38b784f7d508355161197bd9ae87b53268745aa779e0d78e9c8aa2212ad85c54605ac246b4c6583d2525670ab9e2458d5fcbcc09e1ca1d1898e315528eac09dab5cb73bfc732c60a12a6548ec43be61e56b98027116c240b5d93b616e5e5e1"}}]}) r2 = syz_open_dev$evdev(&(0x7f0000000800), 0x1, 0x103000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000840)={0x2, 0x14, 0x0, 0x7, "26ce403e925eb74ba236c12eabef5e2e41e6f3f871cc86e3c9889069ae3d27d3"}) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000880)=[0xffffffff, 0x66]) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000008c0)=""/191) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000980)=[0x0, 0x3]) r3 = syz_open_dev$evdev(&(0x7f00000009c0), 0x10001, 0x420100) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000a00)=""/38) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000a40)=""/178) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000b00)=0x4) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000b40)=0xfffffffe) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000b80)={0x4, 0x6, 0x80000000, 0x80, 0x6, 0xf3f}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000bc0)={0x7e, 0x9, 0x9, 0x9, 0x1f, 0x7}) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000c00)=0x7f) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000c40)=""/13) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000c80)=[0x3, 0x7f]) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000cc0)=""/251) write$char_usb(0xffffffffffffffff, &(0x7f0000000dc0)="85912bd089bb8b8e2761692f54d76fa17d1de8d78befb1b7ad662879a69e845e1c9a09fe6157d585a78864e7ea85864fcfefad93543ee98ab5352812755bdb26b0c757d11c843a7b3ced26adb5cad33ce30677767193502118d964a52880f40f25633f53c61094e3158b6e1a9019b31733092c95a3b1b1ddedaddcf7", 0x7c) syz_open_dev$evdev(&(0x7f0000000e40), 0x6, 0x26400) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000f40)=""/115) 00:35:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r1, 0xea543}) 00:35:47 executing program 2: kexec_load(0x0, 0x0, 0x0, 0x200000) 00:35:47 executing program 3: ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000040)={{}, 'port0\x00', 0x48, 0x0, 0x0, 0xf04}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 00:35:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:35:47 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f00000001c0)="b8010000000f01d90f01c4b805000000b9d6e51ba10f01c10f49b04998218fc42259454600440f30430f01a78a000000b805000000b96e0000000f01c1400f78d4440f1010", 0x45}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x6, 0x101}, 0x14}}, 0x0) 00:35:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "9beb7a", 0x3f}) 00:35:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r1, 0xea543}) 00:35:47 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, 0x0) 00:35:47 executing program 2: read$nci(0xffffffffffffffff, 0x0, 0x0) 00:35:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 3167.535951][ T4443] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 3167.795862][ T4443] usb 6-1: Using ep0 maxpacket: 16 [ 3168.006527][ T4443] usb 6-1: config 1 interface 0 altsetting 49 bulk endpoint 0x82 has invalid maxpacket 16 [ 3168.018164][ T4443] usb 6-1: config 1 interface 0 altsetting 49 bulk endpoint 0x3 has invalid maxpacket 1023 [ 3168.030937][ T4443] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3168.196014][ T4443] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3168.205091][ T4443] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3168.213121][ T4443] usb 6-1: Product: ࠉ [ 3168.218896][ T4443] usb 6-1: Manufacturer: ࠓ [ 3168.223586][ T4443] usb 6-1: SerialNumber: 蟍㱎㑯鹛⭓捐褟⼟괴ሦ䦁겯㱵醒ₛꀸ蓼ꊆ孁튃鞬渕죐핃┒渡ﳑ皵磐溸鱨❎ቪ郮ች嬸⺟妥㺮콽ṯ⇰鐼ᎄꗄ샬免礥䈤杜蕩蟃喆☣㤱ͳ랾홺ꀡL珤✵み㿉鰓턐鼚贮ḅᤨ翲娧黨ｫ淰꟨㿎ᛚ쒯ꥋꫠ꿱䊔鷑챮䦯竉눦ꜭ頜磧섮ﭧᶄ㵦ꈷ᫬ [ 3168.277320][T27421] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3168.284737][T27421] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3168.596024][ T4443] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 3168.605149][ T4443] usb 6-1: USB disconnect, device number 30 00:35:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "9beb7a", 0x3f}) 00:35:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "9beb7a", 0x3f}) 00:35:48 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, 0x0) 00:35:48 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:35:48 executing program 5: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x8c183) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x401, 0x0, 0x400, 0x8, 0x93, 0x1}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x200) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x100000001, 0x1010c0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0xfffe0000, 0xf1, 0x4, 0xffffffff, 0x1f}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000200)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000240)=0xffff) syz_usb_connect$cdc_ecm(0x3, 0x74, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0xba, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x31, 0x3, 0x2, 0x6, 0x0, 0xff, {{0x7, 0x24, 0x6, 0x0, 0x0, "b18d"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8001, 0x80}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x7f, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x77, 0x6, 0x2}, @dmm={0x7, 0x24, 0x14, 0x101, 0x41}, @ncm={0x6, 0x24, 0x1a, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x7, 0x1f}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xf, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x9, 0x3}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x3f, 0x1, 0x1, 0xff, 0x8}, 0x43, &(0x7f0000000340)={0x5, 0xf, 0x43, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "46d22dcf18149798b8f8dcbcfedf7445"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x5d, 0x9, 0x7fff, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x6, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x40, 0x5, 0xfffb, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xe, 0x1, 0x20}]}, 0xa, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x809}}, {0xd8, &(0x7f0000000480)=@string={0xd8, 0x3, "cd874e3c6f345b9e532b50631f891f2f34ad2612a2e08149afac753c929187f89b2038a0b6eac2f986a2415b83d2ac97156ed0c843d51225216ed1fcb576d078b86e689c4e276a12ee907d12385b9f2ea559ae3e7dcf6f1ef0213c948413c4a5ecc032fa257924425c676985c3878655232631397303beb77ad621a04c00e473352729ec7f30c93f139c10d11a9f2e8d051e2819f0daf27f275abcede89ea4f26bfff06de8a7ce3fda16afc465e44ba9e0aaf1af9442d19d6eccaf49c97a26b22da732de1c98e7782ec167fb841d663d65e937a2ec1a"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x443}}, {0x73, &(0x7f00000006c0)=@string={0x73, 0x3, "3d745a6dd0c3e54528cb8803a4a5e7ee452d38b784f7d508355161197bd9ae87b53268745aa779e0d78e9c8aa2212ad85c54605ac246b4c6583d2525670ab9e2458d5fcbcc09e1ca1d1898e315528eac09dab5cb73bfc732c60a12a6548ec43be61e56b98027116c240b5d93b616e5e5e1"}}]}) r2 = syz_open_dev$evdev(&(0x7f0000000800), 0x1, 0x103000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000840)={0x2, 0x14, 0x0, 0x7, "26ce403e925eb74ba236c12eabef5e2e41e6f3f871cc86e3c9889069ae3d27d3"}) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000880)=[0xffffffff, 0x66]) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000008c0)=""/191) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000980)=[0x0, 0x3]) r3 = syz_open_dev$evdev(&(0x7f00000009c0), 0x10001, 0x420100) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000a00)=""/38) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000a40)=""/178) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000b00)=0x4) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000b40)=0xfffffffe) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000b80)={0x4, 0x6, 0x80000000, 0x80, 0x6, 0xf3f}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000bc0)={0x7e, 0x9, 0x9, 0x9, 0x1f, 0x7}) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000c00)=0x7f) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000c40)=""/13) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000c80)=[0x3, 0x7f]) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000cc0)=""/251) write$char_usb(0xffffffffffffffff, &(0x7f0000000dc0)="85912bd089bb8b8e2761692f54d76fa17d1de8d78befb1b7ad662879a69e845e1c9a09fe6157d585a78864e7ea85864fcfefad93543ee98ab5352812755bdb26b0c757d11c843a7b3ced26adb5cad33ce30677767193502118d964a52880f40f25633f53c61094e3158b6e1a9019b31733092c95a3b1b1ddedaddcf7", 0x7c) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000f40)=""/115) 00:35:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "9beb7a", 0x3f}) 00:35:48 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, 0x0) 00:35:48 executing program 2: rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x77359400}, 0x8) 00:35:49 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0xea543}) 00:35:49 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0xea543}) 00:35:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "9beb7a", 0x3f}) 00:35:49 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, 0xea543}) 00:35:49 executing program 3: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "9beb7a", 0x3f}) 00:35:49 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x8200) socket$inet6_tcp(0xa, 0x1, 0x0) 00:35:49 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:49 executing program 3: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "9beb7a", 0x3f}) [ 3169.337901][ T4443] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 3169.585998][ T4443] usb 6-1: Using ep0 maxpacket: 16 [ 3169.786077][ T4443] usb 6-1: config 1 interface 0 altsetting 49 bulk endpoint 0x82 has invalid maxpacket 16 [ 3169.797951][ T4443] usb 6-1: config 1 interface 0 altsetting 49 bulk endpoint 0x3 has invalid maxpacket 1023 [ 3169.808925][ T4443] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3169.967816][ T4443] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3169.978458][ T4443] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3169.986627][ T4443] usb 6-1: Product: ࠉ [ 3169.990790][ T4443] usb 6-1: Manufacturer: ࠓ [ 3169.995373][ T4443] usb 6-1: SerialNumber: 蟍㱎㑯鹛⭓捐褟⼟괴ሦ䦁겯㱵醒ₛꀸ蓼ꊆ孁튃鞬渕죐핃┒渡ﳑ皵磐溸鱨❎ቪ郮ች嬸⺟妥㺮콽ṯ⇰鐼ᎄꗄ샬免礥䈤杜蕩蟃喆☣㤱ͳ랾홺ꀡL珤✵み㿉鰓턐鼚贮ḅᤨ翲娧黨ｫ淰꟨㿎ᛚ쒯ꥋꫠ꿱䊔鷑챮䦯竉눦ꜭ頜磧섮ﭧᶄ㵦ꈷ᫬ [ 3170.046317][T27461] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3170.053516][T27461] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3170.367378][ T4443] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 3170.380901][ T4443] usb 6-1: USB disconnect, device number 31 00:35:50 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) 00:35:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r1}) 00:35:50 executing program 3: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "9beb7a", 0x3f}) 00:35:50 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:35:50 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)="5efadaa1cb2e231d6ad7bb640f79ec194c37e23b610beaf04e3d68fe66909082a05c63ffdc", 0x25}, 0x0) 00:35:50 executing program 5: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x8c183) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x401, 0x0, 0x400, 0x8, 0x93, 0x1}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x200) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x100000001, 0x1010c0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0xfffe0000, 0xf1, 0x4, 0xffffffff, 0x1f}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000200)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000240)=0xffff) syz_usb_connect$cdc_ecm(0x3, 0x74, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0xba, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x31, 0x3, 0x2, 0x6, 0x0, 0xff, {{0x7, 0x24, 0x6, 0x0, 0x0, "b18d"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8001, 0x80}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x7f, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x77, 0x6, 0x2}, @dmm={0x7, 0x24, 0x14, 0x101, 0x41}, @ncm={0x6, 0x24, 0x1a, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x7, 0x1f}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xf, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x9, 0x3}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x3f, 0x1, 0x1, 0xff, 0x8}, 0x43, &(0x7f0000000340)={0x5, 0xf, 0x43, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "46d22dcf18149798b8f8dcbcfedf7445"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x5d, 0x9, 0x7fff, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x6, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x40, 0x5, 0xfffb, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xe, 0x1, 0x20}]}, 0xa, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x809}}, {0xd8, &(0x7f0000000480)=@string={0xd8, 0x3, "cd874e3c6f345b9e532b50631f891f2f34ad2612a2e08149afac753c929187f89b2038a0b6eac2f986a2415b83d2ac97156ed0c843d51225216ed1fcb576d078b86e689c4e276a12ee907d12385b9f2ea559ae3e7dcf6f1ef0213c948413c4a5ecc032fa257924425c676985c3878655232631397303beb77ad621a04c00e473352729ec7f30c93f139c10d11a9f2e8d051e2819f0daf27f275abcede89ea4f26bfff06de8a7ce3fda16afc465e44ba9e0aaf1af9442d19d6eccaf49c97a26b22da732de1c98e7782ec167fb841d663d65e937a2ec1a"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x443}}, {0x73, &(0x7f00000006c0)=@string={0x73, 0x3, "3d745a6dd0c3e54528cb8803a4a5e7ee452d38b784f7d508355161197bd9ae87b53268745aa779e0d78e9c8aa2212ad85c54605ac246b4c6583d2525670ab9e2458d5fcbcc09e1ca1d1898e315528eac09dab5cb73bfc732c60a12a6548ec43be61e56b98027116c240b5d93b616e5e5e1"}}]}) r2 = syz_open_dev$evdev(&(0x7f0000000800), 0x1, 0x103000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000840)={0x2, 0x14, 0x0, 0x7, "26ce403e925eb74ba236c12eabef5e2e41e6f3f871cc86e3c9889069ae3d27d3"}) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000880)=[0xffffffff, 0x66]) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000008c0)=""/191) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000980)=[0x0, 0x3]) r3 = syz_open_dev$evdev(&(0x7f00000009c0), 0x10001, 0x420100) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000a00)=""/38) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000a40)=""/178) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000b00)=0x4) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000b40)=0xfffffffe) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000b80)={0x4, 0x6, 0x80000000, 0x80, 0x6, 0xf3f}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000bc0)={0x7e, 0x9, 0x9, 0x9, 0x1f, 0x7}) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000c00)=0x7f) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000c40)=""/13) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000c80)=[0x3, 0x7f]) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000cc0)=""/251) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000f40)=""/115) 00:35:50 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={0xffffffffffffffff, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d40)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0], 0x0, 0x8, &(0x7f0000000e00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000f00)}}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001680)=@deltaction={0x2c, 0x31, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x2c}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f00000017c0)) connect$inet6(r0, &(0x7f0000001800)={0xa, 0x4e20, 0x3, @private1}, 0x1c) socket$inet6(0xa, 0x80000, 0x1) 00:35:50 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "9beb7a", 0x3f}) 00:35:50 executing program 0: r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x0) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f00000002c0)) 00:35:50 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "9beb7a", 0x3f}) 00:35:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r1}) 00:35:50 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "9beb7a", 0x3f}) 00:35:50 executing program 4: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x0, 0x0, r1}) 00:35:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4040040) 00:35:50 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f00000001c0)="b8010000000f01d90f01c4b805000000b9d6e51ba10f01c10f49b04998218fc42259454600440f30430f01a78a000000b805000000b96e0000000f01c1400f78d4440f1010", 0x45}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:35:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:35:50 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000180), &(0x7f00000001c0)=0x4) [ 3171.016300][T27525] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 3171.108993][T11673] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 3171.356136][T11673] usb 6-1: Using ep0 maxpacket: 16 [ 3171.556455][T11673] usb 6-1: config 1 interface 0 altsetting 49 bulk endpoint 0x82 has invalid maxpacket 16 [ 3171.566465][T11673] usb 6-1: config 1 interface 0 altsetting 49 bulk endpoint 0x3 has invalid maxpacket 1023 [ 3171.576543][T11673] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3171.736696][T11673] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3171.745828][T11673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3171.754333][T11673] usb 6-1: Product: ࠉ [ 3171.758689][T11673] usb 6-1: Manufacturer: ࠓ [ 3171.763375][T11673] usb 6-1: SerialNumber: 蟍㱎㑯鹛⭓捐褟⼟괴ሦ䦁겯㱵醒ₛꀸ蓼ꊆ孁튃鞬渕죐핃┒渡ﳑ皵磐溸鱨❎ቪ郮ች嬸⺟妥㺮콽ṯ⇰鐼ᎄꗄ샬免礥䈤杜蕩蟃喆☣㤱ͳ랾홺ꀡL珤✵み㿉鰓턐鼚贮ḅᤨ翲娧黨ｫ淰꟨㿎ᛚ쒯ꥋꫠ꿱䊔鷑챮䦯竉눦ꜭ頜磧섮ﭧᶄ㵦ꈷ᫬ [ 3171.817431][T27499] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3171.824800][T27499] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3172.136475][T11673] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 3172.146518][T11673] usb 6-1: USB disconnect, device number 32 00:35:52 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) 00:35:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:35:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)={0x5}) 00:35:52 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f00000001c0)="b8010000000f01d90f01c4b805000000b9d6e51ba10f01c10f49b04998218fc42259454600440f30430f01a78a000000b805000000b96e0000000f01c1400f78d4440f1010", 0x45}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:35:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000044c0)={&(0x7f0000004400), 0xc, &(0x7f0000004480)={&(0x7f0000004440)={0x14}, 0x14}}, 0x0) 00:35:52 executing program 5: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/148) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x8c183) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x401, 0x0, 0x400, 0x8, 0x93, 0x1}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x200) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x100000001, 0x1010c0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x1ff, 0xfffe0000, 0xf1, 0x4, 0xffffffff, 0x1f}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000200)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000240)=0xffff) syz_usb_connect$cdc_ecm(0x3, 0x74, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0xba, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x31, 0x3, 0x2, 0x6, 0x0, 0xff, {{0x7, 0x24, 0x6, 0x0, 0x0, "b18d"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8001, 0x80}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x7f, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x77, 0x6, 0x2}, @dmm={0x7, 0x24, 0x14, 0x101, 0x41}, @ncm={0x6, 0x24, 0x1a, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x7, 0x1f}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xf, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x9, 0x3}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x3f, 0x1, 0x1, 0xff, 0x8}, 0x43, &(0x7f0000000340)={0x5, 0xf, 0x43, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "46d22dcf18149798b8f8dcbcfedf7445"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x5d, 0x9, 0x7fff, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x6, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x40, 0x5, 0xfffb, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xe, 0x1, 0x20}]}, 0xa, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x809}}, {0xd8, &(0x7f0000000480)=@string={0xd8, 0x3, "cd874e3c6f345b9e532b50631f891f2f34ad2612a2e08149afac753c929187f89b2038a0b6eac2f986a2415b83d2ac97156ed0c843d51225216ed1fcb576d078b86e689c4e276a12ee907d12385b9f2ea559ae3e7dcf6f1ef0213c948413c4a5ecc032fa257924425c676985c3878655232631397303beb77ad621a04c00e473352729ec7f30c93f139c10d11a9f2e8d051e2819f0daf27f275abcede89ea4f26bfff06de8a7ce3fda16afc465e44ba9e0aaf1af9442d19d6eccaf49c97a26b22da732de1c98e7782ec167fb841d663d65e937a2ec1a"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x443}}, {0x73, &(0x7f00000006c0)=@string={0x73, 0x3, "3d745a6dd0c3e54528cb8803a4a5e7ee452d38b784f7d508355161197bd9ae87b53268745aa779e0d78e9c8aa2212ad85c54605ac246b4c6583d2525670ab9e2458d5fcbcc09e1ca1d1898e315528eac09dab5cb73bfc732c60a12a6548ec43be61e56b98027116c240b5d93b616e5e5e1"}}]}) r2 = syz_open_dev$evdev(&(0x7f0000000800), 0x1, 0x103000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000840)={0x2, 0x14, 0x0, 0x7, "26ce403e925eb74ba236c12eabef5e2e41e6f3f871cc86e3c9889069ae3d27d3"}) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000880)=[0xffffffff, 0x66]) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000008c0)=""/191) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000980)=[0x0, 0x3]) r3 = syz_open_dev$evdev(&(0x7f00000009c0), 0x10001, 0x420100) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000a00)=""/38) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000a40)=""/178) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000b00)=0x4) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000b40)=0xfffffffe) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000b80)={0x4, 0x6, 0x80000000, 0x80, 0x6, 0xf3f}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000bc0)={0x7e, 0x9, 0x9, 0x9, 0x1f, 0x7}) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000c00)=0x7f) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000c40)=""/13) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000c80)=[0x3, 0x7f]) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000f40)=""/115) 00:35:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)={0x5}) 00:35:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 00:35:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000400)) 00:35:52 executing program 4: clock_settime(0x0, &(0x7f0000000140)={0x77359400}) 00:35:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "9beb7a"}) 00:35:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003580), 0x0, 0x0) syz_open_pts(r0, 0x20002) 00:35:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)={0x5}) 00:35:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)={0x5}) 03:33:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x0, 0x0, "9beb7a"}) [ 3277.786120][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 3277.793103][ C1] rcu: 0-...!: (1 GPs behind) idle=c61c/1/0x4000000000000000 softirq=193019/193045 fqs=1 [ 3277.803112][ C1] rcu: (detected by 1, t=10506 jiffies, g=260341, q=395 ncpus=2) [ 3277.811090][ C1] Sending NMI from CPU 1 to CPUs 0: [ 3277.816292][ C0] NMI backtrace for cpu 0 [ 3277.816301][ C0] CPU: 0 PID: 15332 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-11275-gdb906f0ca6bb #0 [ 3277.816318][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3277.816327][ C0] RIP: 0010:_raw_spin_lock_irq+0x9c/0x120 [ 3277.816419][ C0] Code: 3c 3b 00 74 08 4c 89 f7 e8 f1 77 15 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 42 80 3c 3b 00 74 08 4c 89 f7 e8 34 77 15 f7 <8b> 44 24 20 fa a9 00 02 00 00 74 05 e8 23 58 c2 f6 bf 01 00 00 00 [ 3277.816432][ C0] RSP: 0018:ffffc90000007cc0 EFLAGS: 00000046 [ 3277.816446][ C0] RAX: f3f3f300f1f1f1f1 RBX: 1ffff92000000f9c RCX: ffff8880931d8000 [ 3277.816458][ C0] RDX: 0000000000010002 RSI: ffffffff8b597480 RDI: ffff8880b982b840 [ 3277.816469][ C0] RBP: ffffc90000007d50 R08: ffffffff817cc6d8 R09: 1ffffffff1d346dd [ 3277.816480][ C0] R10: dffffc0000000000 R11: fffffbfff1d346de R12: ffff8880b982b840 [ 3277.816491][ C0] R13: 1ffff92000000f98 R14: ffffc90000007ce0 R15: dffffc0000000000 [ 3277.816503][ C0] FS: 0000555555dbe480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 3277.816516][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3277.816527][ C0] CR2: 00007f37f82c56be CR3: 0000000094a22000 CR4: 00000000003526f0 [ 3277.816541][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3277.816550][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3277.816559][ C0] Call Trace: [ 3277.816565][ C0] [ 3277.816572][ C0] ? nmi_cpu_backtrace+0x3be/0x4d0 [ 3277.816609][ C0] ? nmi_trigger_cpumask_backtrace+0x310/0x310 [ 3277.816633][ C0] ? _raw_spin_lock_irq+0x9c/0x120 [ 3277.816649][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 3277.816678][ C0] ? nmi_handle+0x125/0x530 [ 3277.816699][ C0] ? _raw_spin_lock_irq+0x9c/0x120 [ 3277.816712][ C0] ? default_do_nmi+0x62/0x150 [ 3277.816731][ C0] ? exc_nmi+0x11e/0x1f0 [ 3277.816748][ C0] ? end_repeat_nmi+0x16/0x31 [ 3277.816813][ C0] ? __hrtimer_run_queues+0x628/0xd10 [ 3277.816836][ C0] ? _raw_spin_lock_irq+0x9c/0x120 [ 3277.816851][ C0] ? _raw_spin_lock_irq+0x9c/0x120 [ 3277.816866][ C0] ? _raw_spin_lock_irq+0x9c/0x120 [ 3277.816880][ C0] [ 3277.816885][ C0] [ 3277.816890][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 3277.816909][ C0] __hrtimer_run_queues+0x66c/0xd10 [ 3277.816939][ C0] ? hrtimer_interrupt+0x980/0x980 [ 3277.816959][ C0] ? ktime_get_update_offsets_now+0x40b/0x420 [ 3277.816979][ C0] hrtimer_interrupt+0x396/0x980 [ 3277.817011][ C0] __sysvec_apic_timer_interrupt+0x104/0x390 [ 3277.817032][ C0] sysvec_apic_timer_interrupt+0x90/0xb0 [ 3277.817053][ C0] [ 3277.817057][ C0] [ 3277.817062][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3277.817081][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x36/0x60 [ 3277.817098][ C0] Code: f0 2a 76 7e 65 8b 15 f1 2a 76 7e f7 c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 04 16 00 00 00 74 2c 8b 91 e0 15 00 00 <83> fa 02 75 21 48 8b 91 e8 15 00 00 48 8b 32 48 8d 7e 01 8b 89 e4 [ 3277.817111][ C0] RSP: 0018:ffffc9000344f260 EFLAGS: 00000246 [ 3277.817124][ C0] RAX: ffffffff81f2ac5e RBX: ffffea0000a30b80 RCX: ffff8880931d8000 [ 3277.817135][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0000a30b80 [ 3277.817145][ C0] RBP: ffffea0000000000 R08: ffffffff81f2bf5e R09: 1ffffd4000146170 [ 3277.817156][ C0] R10: dffffc0000000000 R11: fffff94000146171 R12: 0000000000000001 [ 3277.817167][ C0] R13: 0000000000000001 R14: ffff88813fff9000 R15: ffffea0000a30b80 [ 3277.817181][ C0] ? page_table_check_set+0x15e/0x860 [ 3277.817230][ C0] ? rcu_lock_acquire+0xe/0x40 [ 3277.817249][ C0] rcu_lock_acquire+0xe/0x40 [ 3277.817265][ C0] page_ext_get+0x1c/0x270 [ 3277.817282][ C0] page_table_check_set+0x1fd/0x860 [ 3277.817302][ C0] __page_table_check_ptes_set+0x220/0x280 [ 3277.817323][ C0] ? __page_table_check_pud_clear+0xb0/0xb0 [ 3277.817346][ C0] copy_page_range+0x2bdd/0x4270 [ 3277.817419][ C0] ? pfn_valid+0x1d0/0x1d0 [ 3277.817441][ C0] ? mas_wr_walk_descend+0x55b/0x830 [ 3277.817463][ C0] ? mas_wr_walk+0x58a/0x5d0 [ 3277.817476][ C0] ? mas_wr_end_piv+0x298/0x8f0 [ 3277.817499][ C0] ? mas_store+0x3a3/0x580 [ 3277.817516][ C0] ? mas_empty_area_rev+0x1950/0x1950 [ 3277.817530][ C0] ? up_write+0x1a9/0x580 [ 3277.817551][ C0] ? __up_read+0x690/0x690 [ 3277.817567][ C0] ? __asan_memset+0x23/0x40 [ 3277.817611][ C0] ? anon_vma_interval_tree_verify+0x150/0x150 [ 3277.817629][ C0] ? vma_interval_tree_insert_after+0x262/0x2c0 [ 3277.817658][ C0] copy_mm+0x1207/0x1f10 [ 3277.817692][ C0] ? copy_signal+0x670/0x670 [ 3277.817707][ C0] ? lockdep_init_map_type+0xa1/0x910 [ 3277.817736][ C0] ? __init_rwsem+0x122/0x160 [ 3277.817753][ C0] ? copy_signal+0x548/0x670 [ 3277.817770][ C0] copy_process+0x1a0f/0x4290 [ 3277.817800][ C0] ? __pidfd_prepare+0x140/0x140 [ 3277.817819][ C0] ? numa_migrate_prep+0x380/0x380 [ 3277.817832][ C0] ? rcu_is_watching+0x15/0xb0 [ 3277.817851][ C0] kernel_clone+0x22d/0x7b0 [ 3277.817868][ C0] ? mtree_range_walk+0x6a0/0x7e0 [ 3277.817883][ C0] ? create_io_thread+0x1d0/0x1d0 [ 3277.817903][ C0] ? rcu_is_watching+0x15/0xb0 [ 3277.817923][ C0] __x64_sys_clone+0x258/0x2a0 [ 3277.817941][ C0] ? __do_sys_vfork+0x120/0x120 [ 3277.817956][ C0] ? __up_read+0x2bd/0x690 [ 3277.817979][ C0] ? rcu_is_watching+0x15/0xb0 [ 3277.817996][ C0] ? syscall_enter_from_user_mode+0x32/0x230 [ 3277.818018][ C0] do_syscall_64+0x41/0xc0 [ 3277.818035][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3277.818053][ C0] RIP: 0033:0x7f37f7679b13 [ 3277.818072][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 3277.818085][ C0] RSP: 002b:00007ffe57088f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3277.818099][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f37f7679b13 [ 3277.818110][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3277.818119][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3277.818128][ C0] R10: 0000555555dbe750 R11: 0000000000000246 R12: 0000000000000000 [ 3277.818138][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 3277.818154][ C0] [ 3277.818287][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g260341 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 3278.443957][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 3278.454120][ C1] rcu: RCU grace-period kthread stack dump: [ 3278.460012][ C1] task:rcu_preempt state:R running task stack:27024 pid:17 ppid:2 flags:0x00004000 [ 3278.470879][ C1] Call Trace: [ 3278.474166][ C1] [ 3278.477100][ C1] __schedule+0x1873/0x48f0 [ 3278.481619][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3278.487522][ C1] ? release_firmware_map_entry+0x190/0x190 [ 3278.493474][ C1] ? __asan_memset+0x23/0x40 [ 3278.498076][ C1] ? _raw_spin_unlock+0x40/0x40 [ 3278.503817][ C1] schedule+0xc3/0x180 [ 3278.508342][ C1] schedule_timeout+0x1bd/0x310 [ 3278.514192][ C1] ? console_conditional_schedule+0x40/0x40 [ 3278.520732][ C1] ? update_process_times+0x1b0/0x1b0 [ 3278.526301][ C1] ? prepare_to_swait_event+0x329/0x350 [ 3278.531867][ C1] rcu_gp_fqs_loop+0x2c6/0x1010 [ 3278.536821][ C1] ? dump_blkd_tasks+0x810/0x810 [ 3278.541767][ C1] ? rcu_gp_init+0x15d0/0x15d0 [ 3278.546540][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3278.552437][ C1] ? finish_swait+0xcd/0x1e0 [ 3278.557035][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 3278.561638][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 3278.566758][ C1] ? __kthread_parkme+0x164/0x1c0 [ 3278.571873][ C1] kthread+0x2b8/0x350 [ 3278.575943][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 3278.581057][ C1] ? kthread_blkcg+0xd0/0xd0 [ 3278.585685][ C1] ret_from_fork+0x48/0x80 [ 3278.590106][ C1] ? kthread_blkcg+0xd0/0xd0 [ 3278.594702][ C1] ret_from_fork_asm+0x11/0x20 [ 3278.599507][ C1] [ 3278.603915][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 3278.610252][ C1] CPU: 1 PID: 27536 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-11275-gdb906f0ca6bb #0 [ 3278.620496][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 3278.630634][ C1] RIP: 0010:smp_call_function_many_cond+0x180a/0x2890 [ 3278.637401][ C1] Code: 89 e6 83 e6 01 31 ff e8 c4 43 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 ff 3f 0b 00 eb 38 f3 90 42 0f b6 04 23 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e3 3f 0b 00 eb e4 44 [ 3278.657094][ C1] RSP: 0018:ffffc9000d91f9c0 EFLAGS: 00000293 [ 3278.663164][ C1] RAX: 0000000000000000 RBX: 1ffff110173087b9 RCX: ffff88802f685940 [ 3278.671135][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 3278.679106][ C1] RBP: ffffc9000d91fbc0 R08: ffffffff81824dac R09: 1ffffffff1d346dd [ 3278.687081][ C1] R10: dffffc0000000000 R11: fffffbfff1d346de R12: dffffc0000000000 [ 3278.695052][ C1] R13: ffff8880b9843dc8 R14: ffff8880b993d440 R15: 0000000000000000 [ 3278.703026][ C1] FS: 00005555563df480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 3278.711959][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3278.718638][ C1] CR2: 0000559919905600 CR3: 000000003c22d000 CR4: 00000000003526e0 [ 3278.729060][ C1] Call Trace: [ 3278.732347][ C1] [ 3278.735198][ C1] ? rcu_check_gp_kthread_starvation+0x1b8/0x220 [ 3278.741655][ C1] ? print_other_cpu_stall+0x1407/0x1540 [ 3278.747307][ C1] ? rcu_stall_kick_kthreads+0x230/0x230 [ 3278.752954][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 3278.759206][ C1] ? rcu_sched_clock_irq+0x989/0x17f0 [ 3278.764588][ C1] ? rcu_gp_set_torture_wait+0x10/0x10 [ 3278.770050][ C1] ? hrtimer_run_queues+0x167/0x450 [ 3278.775252][ C1] ? acct_account_cputime+0xd3/0x210 [ 3278.780546][ C1] ? update_process_times+0x14b/0x1b0 [ 3278.785928][ C1] ? tick_sched_timer+0x379/0x550 [ 3278.790958][ C1] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 3278.796518][ C1] ? __hrtimer_run_queues+0x562/0xd10 [ 3278.801909][ C1] ? hrtimer_interrupt+0x980/0x980 [ 3278.807116][ C1] ? ktime_get_update_offsets_now+0x40b/0x420 [ 3278.813275][ C1] ? hrtimer_interrupt+0x396/0x980 [ 3278.819020][ C1] ? __sysvec_apic_timer_interrupt+0x104/0x390 [ 3278.825178][ C1] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 3278.830995][ C1] [ 3278.833928][ C1] [ 3278.836863][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3278.843028][ C1] ? smp_call_function_many_cond+0x17ec/0x2890 [ 3278.849186][ C1] ? smp_call_function_many_cond+0x180a/0x2890 [ 3278.855347][ C1] ? __schedule+0x108a/0x48f0 [ 3278.860030][ C1] ? text_poke_sync+0x30/0x30 [ 3278.864714][ C1] ? text_poke+0xc0/0xc0 [ 3278.868967][ C1] ? smp_call_function_many+0x40/0x40 [ 3278.874861][ C1] ? __might_sleep+0xc0/0xc0 [ 3278.879462][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 3278.886108][ C1] ? text_poke_sync+0x30/0x30 [ 3278.890904][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 3278.896043][ C1] text_poke_bp_batch+0x350/0xb20 [ 3278.901095][ C1] ? mutex_unlock+0x10/0x10 [ 3278.905612][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 3278.911776][ C1] ? text_poke_loc_init+0x860/0x860 [ 3278.916995][ C1] ? arch_jump_label_transform_queue+0x97/0xf0 [ 3278.923155][ C1] ? __jump_label_update+0x371/0x3a0 [ 3278.928503][ C1] text_poke_finish+0x30/0x50 [ 3278.933204][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 3278.939203][ C1] __static_key_slow_dec_cpuslocked+0x107/0x160 [ 3278.945462][ C1] static_key_slow_dec+0x51/0xa0 [ 3278.950410][ C1] kvm_put_kvm+0x1173/0x15e0 [ 3278.955017][ C1] kvm_vm_release+0x46/0x50 [ 3278.959521][ C1] ? kvm_vm_compat_ioctl+0x5a0/0x5a0 [ 3278.964810][ C1] __fput+0x3f8/0x910 [ 3278.968879][ C1] __se_sys_close+0x15f/0x220 [ 3278.973561][ C1] do_syscall_64+0x41/0xc0 [ 3278.977982][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3278.983878][ C1] RIP: 0033:0x7f2f41e7b9da [ 3278.988305][ C1] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 3279.009900][ C1] RSP: 002b:00007fff8a9225b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 3279.018325][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f2f41e7b9da [ 3279.026334][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 3279.034321][ C1] RBP: 0000000000000032 R08: 0000001b32620000 R09: 0000000000000000 [ 3279.042295][ C1] R10: 0000000081336e36 R11: 0000000000000293 R12: 00007f2f41a00520 [ 3279.050271][ C1] R13: ffffffffffffffff R14: 00007f2f41a00000 R15: 0000000000306832 [ 3279.058256][ C1]