000000000000000000000000000000000000000000000c0002001000000000000000000000000000000000000000050006f736600000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600053455400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00"/1306], 0x518) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f0000000b00)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYRES32=r3, @ANYPTR64=&(0x7f0000000c40)=ANY=[@ANYBLOB="61231142925f637737c61f9ab5ab60e59ff0d1c3a6eb649694948041636f9894daba05edab87bc099622f8b89131fca3f37e04cbbd71185e85ef9586eaed84dd2d9ef1f2be152b9ce020872d24a7380ffc6c4f7730e672c3d45e998fc1eb41d0dcbf6bfc28af", @ANYRESHEX=0x0, @ANYBLOB="b77975de8d", @ANYRES16=r4, @ANYRES64=r1, @ANYPTR64=&(0x7f0000000a00)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000a40)=ANY=[@ANYRESOCT, @ANYPTR64=&(0x7f0000002280)=ANY=[@ANYRES16, @ANYRESDEC=r2, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYBLOB="ee28058e167320d9eff13c57f77c7ce1fece019ea3abd23e9a9d440d99c8cc1ccf14ab750f29c773dc4ebc818bbe1e43e7c35324ab989bf3bec19765b2310330f97ee937a71cf0ed89ee926f8ca461689e26c0f6dbe278ad177d12ec1235e4c27f3b23e989ee517d77071c71", @ANYRESDEC, @ANYRESDEC=r3, @ANYBLOB="8c211c12abb7be7c789d17bc33b670aa5bd340ee4c49a622c861ec6a8cf57718762fe71b05542e7be28427e94967aa3a9144e394e7281f93dda907890c3d3f7a20eadc6afbfb44337bfadfacae337809438bfe03bd6e6886367fbf2ea14ba262c3389fcac254f712adcc3c9de8bda7000916bc390eb9211a280800c756e044d7d0534c4f596343f842d52bf8f5f4bc73b94aec47f3a04eebfcfb80ff9aab6f55a2d561ba872fc3c956fd6bf78ada4991108b70bfc937b96caef44e0e00c1b6a1f579dc1085c2b0067b225175d36354a2a256760e63c24b975345cefb0b2015f08e3d99cb4332d2a208d972a9cedd1c50b5a9b111bff7a87fb7926c73a3195cf9f0a99cb574fe873c9f4dbe07254dba13f37d5be4bf581c4d55cea6652c6cf2b85944125744de6fc136a28de248192f9b1b2dd09a7bd243806de5486a31aa34ab2460163c416a067abdb7098a61092fa74b69f0618d8177bf2e63a8265916220d58ddf0a5c272428bd5f64fa7a417b81c9b84480fcfb05f631c4f03e9d78be464ba2707b4aeafb1ff86664e08c67bd0b24a890e56e8ca40fa41ddd389dafc75947335135c9c198f96dd56bafb3ef08efefeffa0f88f6f8f8abcf6ab80950fc6f135bd52d9b9a7af09d99231b6cd0db0341237c2dda24126f0a78a0d40dfa7f85ea2c3c6742ffe186f8e9646a23e3177900e30a2f6e01bf4c631315902f674de4815c7058e75a8d397cefa3c7c720260be2c393dd78d874c20b722ff682a5463be2b15b964cee8759936a2b7cb6d936f48e293de6e37955d3284a66d6a793efb0d7872b04fea4914bbd04ef7bce5e7a131fd6b02301d7a267f1999311429c182bcc8687b9c194bfeef5d4620dbdcc9c17ee199cb3cee69940aedc260dc9c1b302e4b83a04d64fd2b41e744394c5082c576a99ebceeddce428fa88eef5b4606f6f09d27f30a512cfebbf4208982bd5305b8207239d1cb05a0c5159c855c46e05251379dca634c86823d57f994943d3d0fd008f2f76092dac2d711da59879711e481885e861c41e63a69c6d28302359c1ab1a88e0ab9157dea146b0e95e04dad871a666feb2925a4e44bc49d28e4dd3f05efd48586cfc52f15818c1c093d3e29a355370949c3993e8ec7430898d3cc7ff60515a1241c261a7fc9df049ec2eb8383fe857b5e22a10a38650bf64f3b47958eb0b62983704792c9cc4e3cc19ad542e192db9a20772ea4b7c6ccd7a05761e3d57639244c3bf5359853bd04ac4c48cf821ac2f4f0101b5e2acbac7ba4a8f5cbb64b5b1c1e1b20a77d992630ae6bf7852de9d6bfdafe59e349ff46b219516476ad41598e89818bc8ec2c1e9d46e299df615e961118fc430d9175bb65432973fffdeed680ad9913abe99f8d5ae36b1f22a2caf70fa6a51044d9483e60e2200367c42f0a96b46fe681e07b46995c5efeab308ee6bceba7d3a413c76b250ad4d1dbac851907677a99b52fa1416f1dbdf3a4313bac265e3f767538ee14bdd2d64bee5db68cfae7ec04c02f35525049787ac4dd99c9db15531b3f890e5f25a6ddf46314912f28713f3d96d1699765f945b026dea377bcb8f9181a2a97c68ab9349d35000ecb1871aeff7bc56ee9cc3fcbabc5a2008bf2881b236acfcef675cf19dfb81864ada16327a67990af711ae51ee6f1d92fbd0c6b086535634ee71eec945399b72a55d9f0f8787f62629978c64213e73276a9d52aa2cc89b84a733e7823ac5a5e42f7624d0665d8177e371b42e045a32d497276cd12973fedd0e4c6a734ede4984b68b4fe837453d382d72dbb2826f9576256fea0069ce43cd59cd01c19b103645101208db6ac736a2964f08251b4232de423e46ab4011cf2869ad5035afb0374392ea387f11a384c4ac86d456ae8306fe515131628d23f2af508d6527f1495758628d3942bd00553f41cf506f48b7c7d7a011b5297e422e19507bf49d785b615b328fe8b7d282e9bb7b4d0c8f75d418b381715dc0bed8d420877829f0c4aa2cab7a2b00faf35a233afd39538ba9d63b79edf0cc30432dede9ca6c1562cb475a18f58417cb29b2e01b18aa8b8c1d7352b92c576501f9c30462f3939cf2826e85d6c9bf6101fd865dc764e1f8bc1f32e742037e873696490a3c4f9dcc437acfcef89659192eeb915d8130092319fba1ace6f0b43b25767bd531a34f07f209fd43ab1f0df7f2cce88115a72e3b3b5f91362fa62191cd1c33ee8268fa819f550b2120364d17e7e60eabb7fe17e41237d9dcd6c48d5499735f4818aaaab8e48d1ad5f7a7cca83fda9b2ba708f6434512a44235b42137a67cfe4cdbf1a27c9d7d0380297826996eb4c13c32305247d3c7bb6f2c1d9873d02f2611caf7487a714e6baf71832fe01e1cc1cc29559c0fa1ad0283c9492b7032aeebfb093d47a722c1eb1f5e6c6514b009a03487601a00707529219194b103b95cdc6c6c83c44dd56f7d743f6ab36254f9a629e2ffc79057bedc8e8e95e2312338aa734d3eb1e396a790b9322c19a101ae2f54014dfdefaab29852bad95d199f8231d63c031ec27853871452348fb3b2bd7ca1fec92fb339207d14be4871b824cb587d38499eb065f0f57555a5daf2082a9dbbc2042d1895e997efb847932e316bd4dba9f4688b22f0716e836204759beeb087659b865d4b5412910b5781dd01fe1e5875641ab7de6548e95247cd0ca27db3a0e31af9c787efbfd1c257bec1d97083f9a5df8097f783ff0f020656079583a3fabe51dbaf18f4455a00d2c4926d320f611ca6bab3f0eaf45ae646727e3d43042b4cd88db6efda89b2cf60218e830227c984f354b778cbe68464217d68e64c3687d7a98053b3a9883105b0c884212dcdd6a15b19c85501eb8808a996ed348d6be56076823d9d6ce31a9732e859e42f9c191e7d6350bae20cb1483ee1284352624ceee69eaadfeba63040b9a991bd85b1df959266223597a643ee6db983b5ab192fd21a424acf98e84788d42d11985124c9fb6fc0609355b880761160c219d2b9661bb3277276c4ad685f479d29ec07b3e23ab49378673897cda0095f7499fa8f340fa39f46176f9b789f83d98a28d65c4609ddac992c8300e0181f7fa6b7d81c3bf7cdb3a2cfc150d5d39f6aff8ae4cbcc95590ac02c23da3cf1cd7af46d086da67a12f9ffc6a53d2a1f178e28fb2b8fd01cef452b33f36ab33ae5f98043544e69f9d74b288f343b02a1fc955d881c5e018f2013f1922f5909b42590d690e2e9f72c3d6acb655795a4c13429c98c10887512b82db50f788c31770c47a85394542379387dd3d5e4139e45f942aa751fbeded0b324641a5d6fd5ab042bfe9b53af94df6d22cdd1122634d9c0aeeccc502e566e83fdd8f260521a7392753ebfb7a53617e95f6b132ba86369d32af0444ba8f5692a75afd60dd8ffaceefb4fd768a9b2ab5a77cca8d45d561621c1743ff267b78dae5405471ce4f11e7a85e1a4b6822e4a26e63282b472b927ab4da1028cb3c6305058e693413fe437e804f6de3b7c31582bb646144eb4d594839a7ce28b50e31a84cac8651f8e9f71dc242096aecc62fb06b6dd0ae3d52d0af9b7d300c75de4398a6f32bc7e433d18f8043ad13c070c536acf2cf5e77959dc78b80e18905406add6f16ba659b27bfb43a2570c803bc55da07f0d8f892b4b91988adaaa8b5dd916ddeff69fbc6877cfc36228e6aba796785106e80d928e658673884d2c692a50fff92587cfbc9a2eee60bdd37a38358edce0c19b45e57ae95d5bec595e4bd0c3a38b4a1a5d2fdce0925afb7e52b69897ebf7d5558b7c3e29b94680b8d599484f45118cbd645f283bb3cfa5771f592249d1cff923ae3f546dc53b8c1e32d9808d8e1a9779883b44f8da987d5783cbe2cf8967d2dfab30a99f2bd501f0fe921db6f5fba42d8eac0c64eee3f8247771bf6086b9cae237f0882e135b564d06e2e4d64097afd3600bc3ed4c7a906fab2d0355b1fd2d2f040d5416cc73f78f2fad08ac656e2afb50d0247b17477d15067646ce1997d6c800d383c193796c9d829c6058b4a2cba300fa3c66219b28de3ee8e547b061f66f3acacf0a746510fa4534ad36b69c52a907669c328b275a29300650569e6ab48aef55616b53083a39f402ad5846fa95c103c216f1e595044ffdb26f49fc215f100e60ce22e9e4f5708e1185695b105befb2eb41e93dd5451c0c752e17ac77df5dcf8a83f20c62bc71d73dbf80cddfa8eb93f049c8003a6a3bd5d80fa876ed75baa5209eaecbf588b1a32cc14be9ff07a8dd8430467e2724e9599844c9016dc84cf1dc021286a0683826df393d0edacf11ff2ce19698993d0af399013efd26da2297d2c4fb989a2ba2ec6ee333b60ae3b06033f19bfed17ac5ba9bee60c82bb44f3a05a5b90ea1c45fa067595142e4603be79f73059db799f34c5f0f5b5f7b7fc686d617475fd96e29959cdd2ed21f94b2ed7e07d802789ff2365c41009185c9588080b068bb433562b9841d0e3d8fc65ae491d15caf056f46ca2fc80af8b608255a3f1db89a707fbedb4b8b8617dc27eecc66e88de65c1ddc1c25a80dca520869723150d85cb612617536d62e00d20faf1a69b96262ba3636aa0ccc8c618f6afed10ee99723ec83c887a69bb323b0f7d2da721130f9c773eb783bc4ad43cf5483151bade99d0edffa72a1e799ea9e1b2c9c1a07b5e23c27778149290b0cf80e6d41538aa6d214a76fd484169f4984a0625deccb9f8405e1af6edf2e6cab88da8ef119c31d6100c26957d842e46c7c4932fb367a94ad06d63bd15fc7e01b1dd6a83c6fbd8650f3f4a0e631254ff2ff4edfd25ab363c1e049194698e29f2bff4ea8b03184c45bf9f7bfaf4ef8b66ecc711a28a50bd7b028683be9004236961457d73e686364c60ba2e1d32a788cadb459091f86953f53b34ebea7c0934be81e3b52b98b715ce2f7565310c95c6eaa2d0b0fd00e73ebffa6ef5277d59d6498c55ceef47bd51c7a9ce42a394755138707406eb0e800df3c383c817af6f087e472c0f633a8950b15ff37f1fcfda52fbd9faf077e6704dbbed21aec6fa0b98411b9ebeab7201c0428aeadfeb530d9e6daa5e3926d9b1b8ae14c508d47e42c8d7ccf3f5592fc9b97951cc794dc202b186ba331b8032160413495fa2c01aca1544224b94b0efd48f145153efd1b0a9cd6bada2fc5c51e06462f9dfef839f7701276dd21e6b297465bfdfd93357839dc98aa0fbfbedca1dd8395c6cfb25b8dafc0d2130bbb2fde6e0a89748808a34261952b06403f66b16df12c600eef30e275d7f82d7aefef36dde518b1dce45b84ef655b8cc118c0b16383c572f98caf61c9fdf463758b9080773f2f251998e684d3caf45f203180d5d87411d9e3be5a01524dc98f3c9a9ddea09b5fbbe717cd067d18640c618d6d2c368b5733db5427a50b6f71b6091148df3f6191d133902345deca561159064470827ebe5ed5480b71cd3b7645a4b4a157324f777504d823e397503e649219c7a43d955f08f83fc0a0dd6ed7c03656c3b10afd5014806ccde9368be26d51555506a33b3d6c8cc0463405a9cec94771194fc4e86ad70dc38c5086b9a7173f8fd37e36da51ef9cf20496967821749ea0c8afcf4e846830279a9e621c4d2b55f6e19a631b015fb069686b227ca2f1ae7caf2437cef52100e520562278d746fd4d3aa29aafd551cb237d3e141b64aa25815a5585cf8dcd3298cba81828ba758d9e30ac6827579761029938cb69df4c365ea9e43a9e8fb4cbc6d8d28df00222984c21330df44e9e7a9ed8604265369f6f1b18ee791972a", @ANYRESDEC, @ANYRESDEC], @ANYRES64=0x0, @ANYRES32]]], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r2, @ANYRESOCT=0x0, @ANYRES64=0x0]], @ANYRES32=r2, @ANYRES32=0x0, @ANYRESDEC=0x0]], 0x1}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000200)=[@sack_perm, @timestamp, @window={0x3, 0x0, 0xfffe}, @mss={0x2, 0x3}], 0x4) sendmmsg(r5, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=ANY=[@ANYBLOB="160e90cb39bca59f8c4064ac6d7b242060a07bc4309e3eb79d87458c797b308edd84adef35ad9d8a17240f38f55f57c55f3875db81d255eea402e1c11ca7fc01964aeb9ed6ef4e80bc67cba7e7fe001fe5d921442b0a06b135f8a73b68dc904b436f256f50ae7cb9ff019e7580b9f11c6ede4210f23240559b8c427000d7ce7862417ab5a50e494b2a54e346d7ffa008ccef06813e235b446788ac0f1df3c65bc1fb53939d4832d6bd8e3b59a232364a2efd284640ec2c438ad2b24a69f1f9da000000000000000000000000989eee6a9283bf253ca4"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) dup2(0xffffffffffffffff, r7) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000010000108000000004016000000000000", @ANYRES32=0x0, @ANYBLOB="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"/288], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 20:06:06 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000200)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={r4, 0xe54, 0x7, 0x1, 0x3, 0x7, 0xff, 0x8, {0x0, @in6={{0xa, 0x4e23, 0xe28, @mcast2, 0x101}}, 0xb8a, 0x5000000, 0x7dbbaf85, 0xde15, 0x2}}, &(0x7f0000000140)=0xb0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x600, 0x0, 0x4b6ae4f95a5de35b) [ 203.738746] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 203.752215] syz-executor.5 (7818) used greatest stack depth: 23248 bytes left 20:06:06 executing program 0: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x43, 0x400000000000000}, 0x11288, 0x1, 0x0, 0x2, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x2}, @window, @mss={0x2, 0x91d}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="72617700000000010000000000000000000000000000000000000000000000000200000003000000b804000000000000000000000000000000030000000300002004000020040000945120040000200400002004000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000a00200030000000000000000000000000000000000000000300262706600000000000000000000000000000000000000000000000000000101000000000000002e2f66696c653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0002001000000000000000000000000000000000000000050006f736600000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600053455400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00"/1306], 0x518) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f0000000b00)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYRES32=r3, @ANYPTR64=&(0x7f0000000c40)=ANY=[@ANYBLOB="61231142925f637737c61f9ab5ab60e59ff0d1c3a6eb649694948041636f9894daba05edab87bc099622f8b89131fca3f37e04cbbd71185e85ef9586eaed84dd2d9ef1f2be152b9ce020872d24a7380ffc6c4f7730e672c3d45e998fc1eb41d0dcbf6bfc28af", @ANYRESHEX=0x0, @ANYBLOB="b77975de8d", @ANYRES16=r4, @ANYRES64=r1, @ANYPTR64=&(0x7f0000000a00)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000a40)=ANY=[@ANYRESOCT, @ANYPTR64=&(0x7f0000002280)=ANY=[@ANYRES16, @ANYRESDEC=r2, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYBLOB="ee28058e167320d9eff13c57f77c7ce1fece019ea3abd23e9a9d440d99c8cc1ccf14ab750f29c773dc4ebc818bbe1e43e7c35324ab989bf3bec19765b2310330f97ee937a71cf0ed89ee926f8ca461689e26c0f6dbe278ad177d12ec1235e4c27f3b23e989ee517d77071c71", @ANYRESDEC, @ANYRESDEC=r3, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], @ANYRES64=0x0, @ANYRES32]]], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r2, @ANYRESOCT=0x0, @ANYRES64=0x0]], @ANYRES32=r2, @ANYRES32=0x0, @ANYRESDEC=0x0]], 0x1}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000200)=[@sack_perm, @timestamp, @window={0x3, 0x0, 0xfffe}, @mss={0x2, 0x3}], 0x4) sendmmsg(r5, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=ANY=[@ANYBLOB="160e90cb39bca59f8c4064ac6d7b242060a07bc4309e3eb79d87458c797b308edd84adef35ad9d8a17240f38f55f57c55f3875db81d255eea402e1c11ca7fc01964aeb9ed6ef4e80bc67cba7e7fe001fe5d921442b0a06b135f8a73b68dc904b436f256f50ae7cb9ff019e7580b9f11c6ede4210f23240559b8c427000d7ce7862417ab5a50e494b2a54e346d7ffa008ccef06813e235b446788ac0f1df3c65bc1fb53939d4832d6bd8e3b59a232364a2efd284640ec2c438ad2b24a69f1f9da000000000000000000000000989eee6a9283bf253ca4"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) dup2(0xffffffffffffffff, r7) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000010000108000000004016000000000000", @ANYRES32=0x0, @ANYBLOB="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"/288], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 203.800212] sctp: [Deprecated]: syz-executor.3 (pid 7838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.800212] Use struct sctp_sack_info instead [ 203.884416] sctp: [Deprecated]: syz-executor.1 (pid 7857) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.884416] Use struct sctp_sack_info instead 20:06:06 executing program 4: ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x9, 0x0, 0x1, 0x2, 0x2, 0xffffff80, 0x8, 0x5, 0x0, 0x4ac, 0x6, 0x6, 0x9, 0x2, 0xa, 0x33, {0x8001, 0x5}, 0x0, 0x1}}) accept$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000cede6299eb6284070000000000fd85d16e79bad40ac3794899000000000005000000000000000000d94bfeadbfce0d4ed61c01bb3c42000000ea0000000000000000000000000000000000000500000000000000000000000000000000000000ee010000000100000000402000"], 0xb8}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000200)={0xfffffff7, 0x2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0) 20:06:06 executing program 5: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x43, 0x400000000000000}, 0x11288, 0x1, 0x0, 0x2, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x2}, @window, @mss={0x2, 0x91d}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="72617700000000010000000000000000000000000000000000000000000000000200000003000000b804000000000000000000000000000000030000000300002004000020040000945120040000200400002004000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000a00200030000000000000000000000000000000000000000300262706600000000000000000000000000000000000000000000000000000101000000000000002e2f66696c653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0002001000000000000000000000000000000000000000050006f736600000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600053455400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00"/1306], 0x518) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f0000000b00)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYRES32=r3, @ANYPTR64=&(0x7f0000000c40)=ANY=[@ANYBLOB="61231142925f637737c61f9ab5ab60e59ff0d1c3a6eb649694948041636f9894daba05edab87bc099622f8b89131fca3f37e04cbbd71185e85ef9586eaed84dd2d9ef1f2be152b9ce020872d24a7380ffc6c4f7730e672c3d45e998fc1eb41d0dcbf6bfc28af", @ANYRESHEX=0x0, @ANYBLOB="b77975de8d", @ANYRES16=r4, @ANYRES64=r1, @ANYPTR64=&(0x7f0000000a00)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000a40)=ANY=[@ANYRESOCT, @ANYPTR64=&(0x7f0000002280)=ANY=[@ANYRES16, @ANYRESDEC=r2, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYBLOB="ee28058e167320d9eff13c57f77c7ce1fece019ea3abd23e9a9d440d99c8cc1ccf14ab750f29c773dc4ebc818bbe1e43e7c35324ab989bf3bec19765b2310330f97ee937a71cf0ed89ee926f8ca461689e26c0f6dbe278ad177d12ec1235e4c27f3b23e989ee517d77071c71", @ANYRESDEC, @ANYRESDEC=r3, @ANYBLOB="8c211c12abb7be7c789d17bc33b670aa5bd340ee4c49a622c861ec6a8cf57718762fe71b05542e7be28427e94967aa3a9144e394e7281f93dda907890c3d3f7a20eadc6afbfb44337bfadfacae337809438bfe03bd6e6886367fbf2ea14ba262c3389fcac254f712adcc3c9de8bda7000916bc390eb9211a280800c756e044d7d0534c4f596343f842d52bf8f5f4bc73b94aec47f3a04eebfcfb80ff9aab6f55a2d561ba872fc3c956fd6bf78ada4991108b70bfc937b96caef44e0e00c1b6a1f579dc1085c2b0067b225175d36354a2a256760e63c24b975345cefb0b2015f08e3d99cb4332d2a208d972a9cedd1c50b5a9b111bff7a87fb7926c73a3195cf9f0a99cb574fe873c9f4dbe07254dba13f37d5be4bf581c4d55cea6652c6cf2b85944125744de6fc136a28de248192f9b1b2dd09a7bd243806de5486a31aa34ab2460163c416a067abdb7098a61092fa74b69f0618d8177bf2e63a8265916220d58ddf0a5c272428bd5f64fa7a417b81c9b84480fcfb05f631c4f03e9d78be464ba2707b4aeafb1ff86664e08c67bd0b24a890e56e8ca40fa41ddd389dafc75947335135c9c198f96dd56bafb3ef08efefeffa0f88f6f8f8abcf6ab80950fc6f135bd52d9b9a7af09d99231b6cd0db0341237c2dda24126f0a78a0d40dfa7f85ea2c3c6742ffe186f8e9646a23e3177900e30a2f6e01bf4c631315902f674de4815c7058e75a8d397cefa3c7c720260be2c393dd78d874c20b722ff682a5463be2b15b964cee8759936a2b7cb6d936f48e293de6e37955d3284a66d6a793efb0d7872b04fea4914bbd04ef7bce5e7a131fd6b02301d7a267f1999311429c182bcc8687b9c194bfeef5d4620dbdcc9c17ee199cb3cee69940aedc260dc9c1b302e4b83a04d64fd2b41e744394c5082c576a99ebceeddce428fa88eef5b4606f6f09d27f30a512cfebbf4208982bd5305b8207239d1cb05a0c5159c855c46e05251379dca634c86823d57f994943d3d0fd008f2f76092dac2d711da59879711e481885e861c41e63a69c6d28302359c1ab1a88e0ab9157dea146b0e95e04dad871a666feb2925a4e44bc49d28e4dd3f05efd48586cfc52f15818c1c093d3e29a355370949c3993e8ec7430898d3cc7ff60515a1241c261a7fc9df049ec2eb8383fe857b5e22a10a38650bf64f3b47958eb0b62983704792c9cc4e3cc19ad542e192db9a20772ea4b7c6ccd7a05761e3d57639244c3bf5359853bd04ac4c48cf821ac2f4f0101b5e2acbac7ba4a8f5cbb64b5b1c1e1b20a77d992630ae6bf7852de9d6bfdafe59e349ff46b219516476ad41598e89818bc8ec2c1e9d46e299df615e961118fc430d9175bb65432973fffdeed680ad9913abe99f8d5ae36b1f22a2caf70fa6a51044d9483e60e2200367c42f0a96b46fe681e07b46995c5efeab308ee6bceba7d3a413c76b250ad4d1dbac851907677a99b52fa1416f1dbdf3a4313bac265e3f767538ee14bdd2d64bee5db68cfae7ec04c02f35525049787ac4dd99c9db15531b3f890e5f25a6ddf46314912f28713f3d96d1699765f945b026dea377bcb8f9181a2a97c68ab9349d35000ecb1871aeff7bc56ee9cc3fcbabc5a2008bf2881b236acfcef675cf19dfb81864ada16327a67990af711ae51ee6f1d92fbd0c6b086535634ee71eec945399b72a55d9f0f8787f62629978c64213e73276a9d52aa2cc89b84a733e7823ac5a5e42f7624d0665d8177e371b42e045a32d497276cd12973fedd0e4c6a734ede4984b68b4fe837453d382d72dbb2826f9576256fea0069ce43cd59cd01c19b103645101208db6ac736a2964f08251b4232de423e46ab4011cf2869ad5035afb0374392ea387f11a384c4ac86d456ae8306fe515131628d23f2af508d6527f1495758628d3942bd00553f41cf506f48b7c7d7a011b5297e422e19507bf49d785b615b328fe8b7d282e9bb7b4d0c8f75d418b381715dc0bed8d420877829f0c4aa2cab7a2b00faf35a233afd39538ba9d63b79edf0cc30432dede9ca6c1562cb475a18f58417cb29b2e01b18aa8b8c1d7352b92c576501f9c30462f3939cf2826e85d6c9bf6101fd865dc764e1f8bc1f32e742037e873696490a3c4f9dcc437acfcef89659192eeb915d8130092319fba1ace6f0b43b25767bd531a34f07f209fd43ab1f0df7f2cce88115a72e3b3b5f91362fa62191cd1c33ee8268fa819f550b2120364d17e7e60eabb7fe17e41237d9dcd6c48d5499735f4818aaaab8e48d1ad5f7a7cca83fda9b2ba708f6434512a44235b42137a67cfe4cdbf1a27c9d7d0380297826996eb4c13c32305247d3c7bb6f2c1d9873d02f2611caf7487a714e6baf71832fe01e1cc1cc29559c0fa1ad0283c9492b7032aeebfb093d47a722c1eb1f5e6c6514b009a03487601a00707529219194b103b95cdc6c6c83c44dd56f7d743f6ab36254f9a629e2ffc79057bedc8e8e95e2312338aa734d3eb1e396a790b9322c19a101ae2f54014dfdefaab29852bad95d199f8231d63c031ec27853871452348fb3b2bd7ca1fec92fb339207d14be4871b824cb587d38499eb065f0f57555a5daf2082a9dbbc2042d1895e997efb847932e316bd4dba9f4688b22f0716e836204759beeb087659b865d4b5412910b5781dd01fe1e5875641ab7de6548e95247cd0ca27db3a0e31af9c787efbfd1c257bec1d97083f9a5df8097f783ff0f020656079583a3fabe51dbaf18f4455a00d2c4926d320f611ca6bab3f0eaf45ae646727e3d43042b4cd88db6efda89b2cf60218e830227c984f354b778cbe68464217d68e64c3687d7a98053b3a9883105b0c884212dcdd6a15b19c85501eb8808a996ed348d6be56076823d9d6ce31a9732e859e42f9c191e7d6350bae20cb1483ee1284352624ceee69eaadfeba63040b9a991bd85b1df959266223597a643ee6db983b5ab192fd21a424acf98e84788d42d11985124c9fb6fc0609355b880761160c219d2b9661bb3277276c4ad685f479d29ec07b3e23ab49378673897cda0095f7499fa8f340fa39f46176f9b789f83d98a28d65c4609ddac992c8300e0181f7fa6b7d81c3bf7cdb3a2cfc150d5d39f6aff8ae4cbcc95590ac02c23da3cf1cd7af46d086da67a12f9ffc6a53d2a1f178e28fb2b8fd01cef452b33f36ab33ae5f98043544e69f9d74b288f343b02a1fc955d881c5e018f2013f1922f5909b42590d690e2e9f72c3d6acb655795a4c13429c98c10887512b82db50f788c31770c47a85394542379387dd3d5e4139e45f942aa751fbeded0b324641a5d6fd5ab042bfe9b53af94df6d22cdd1122634d9c0aeeccc502e566e83fdd8f260521a7392753ebfb7a53617e95f6b132ba86369d32af0444ba8f5692a75afd60dd8ffaceefb4fd768a9b2ab5a77cca8d45d561621c1743ff267b78dae5405471ce4f11e7a85e1a4b6822e4a26e63282b472b927ab4da1028cb3c6305058e693413fe437e804f6de3b7c31582bb646144eb4d594839a7ce28b50e31a84cac8651f8e9f71dc242096aecc62fb06b6dd0ae3d52d0af9b7d300c75de4398a6f32bc7e433d18f8043ad13c070c536acf2cf5e77959dc78b80e18905406add6f16ba659b27bfb43a2570c803bc55da07f0d8f892b4b91988adaaa8b5dd916ddeff69fbc6877cfc36228e6aba796785106e80d928e658673884d2c692a50fff92587cfbc9a2eee60bdd37a38358edce0c19b45e57ae95d5bec595e4bd0c3a38b4a1a5d2fdce0925afb7e52b69897ebf7d5558b7c3e29b94680b8d599484f45118cbd645f283bb3cfa5771f592249d1cff923ae3f546dc53b8c1e32d9808d8e1a9779883b44f8da987d5783cbe2cf8967d2dfab30a99f2bd501f0fe921db6f5fba42d8eac0c64eee3f8247771bf6086b9cae237f0882e135b564d06e2e4d64097afd3600bc3ed4c7a906fab2d0355b1fd2d2f040d5416cc73f78f2fad08ac656e2afb50d0247b17477d15067646ce1997d6c800d383c193796c9d829c6058b4a2cba300fa3c66219b28de3ee8e547b061f66f3acacf0a746510fa4534ad36b69c52a907669c328b275a29300650569e6ab48aef55616b53083a39f402ad5846fa95c103c216f1e595044ffdb26f49fc215f100e60ce22e9e4f5708e1185695b105befb2eb41e93dd5451c0c752e17ac77df5dcf8a83f20c62bc71d73dbf80cddfa8eb93f049c8003a6a3bd5d80fa876ed75baa5209eaecbf588b1a32cc14be9ff07a8dd8430467e2724e9599844c9016dc84cf1dc021286a0683826df393d0edacf11ff2ce19698993d0af399013efd26da2297d2c4fb989a2ba2ec6ee333b60ae3b06033f19bfed17ac5ba9bee60c82bb44f3a05a5b90ea1c45fa067595142e4603be79f73059db799f34c5f0f5b5f7b7fc686d617475fd96e29959cdd2ed21f94b2ed7e07d802789ff2365c41009185c9588080b068bb433562b9841d0e3d8fc65ae491d15caf056f46ca2fc80af8b608255a3f1db89a707fbedb4b8b8617dc27eecc66e88de65c1ddc1c25a80dca520869723150d85cb612617536d62e00d20faf1a69b96262ba3636aa0ccc8c618f6afed10ee99723ec83c887a69bb323b0f7d2da721130f9c773eb783bc4ad43cf5483151bade99d0edffa72a1e799ea9e1b2c9c1a07b5e23c27778149290b0cf80e6d41538aa6d214a76fd484169f4984a0625deccb9f8405e1af6edf2e6cab88da8ef119c31d6100c26957d842e46c7c4932fb367a94ad06d63bd15fc7e01b1dd6a83c6fbd8650f3f4a0e631254ff2ff4edfd25ab363c1e049194698e29f2bff4ea8b03184c45bf9f7bfaf4ef8b66ecc711a28a50bd7b028683be9004236961457d73e686364c60ba2e1d32a788cadb459091f86953f53b34ebea7c0934be81e3b52b98b715ce2f7565310c95c6eaa2d0b0fd00e73ebffa6ef5277d59d6498c55ceef47bd51c7a9ce42a394755138707406eb0e800df3c383c817af6f087e472c0f633a8950b15ff37f1fcfda52fbd9faf077e6704dbbed21aec6fa0b98411b9ebeab7201c0428aeadfeb530d9e6daa5e3926d9b1b8ae14c508d47e42c8d7ccf3f5592fc9b97951cc794dc202b186ba331b8032160413495fa2c01aca1544224b94b0efd48f145153efd1b0a9cd6bada2fc5c51e06462f9dfef839f7701276dd21e6b297465bfdfd93357839dc98aa0fbfbedca1dd8395c6cfb25b8dafc0d2130bbb2fde6e0a89748808a34261952b06403f66b16df12c600eef30e275d7f82d7aefef36dde518b1dce45b84ef655b8cc118c0b16383c572f98caf61c9fdf463758b9080773f2f251998e684d3caf45f203180d5d87411d9e3be5a01524dc98f3c9a9ddea09b5fbbe717cd067d18640c618d6d2c368b5733db5427a50b6f71b6091148df3f6191d133902345deca561159064470827ebe5ed5480b71cd3b7645a4b4a157324f777504d823e397503e649219c7a43d955f08f83fc0a0dd6ed7c03656c3b10afd5014806ccde9368be26d51555506a33b3d6c8cc0463405a9cec94771194fc4e86ad70dc38c5086b9a7173f8fd37e36da51ef9cf20496967821749ea0c8afcf4e846830279a9e621c4d2b55f6e19a631b015fb069686b227ca2f1ae7caf2437cef52100e520562278d746fd4d3aa29aafd551cb237d3e141b64aa25815a5585cf8dcd3298cba81828ba758d9e30ac6827579761029938cb69df4c365ea9e43a9e8fb4cbc6d8d28df00222984c21330df44e9e7a9ed8604265369f6f1b18ee791972a", @ANYRESDEC, @ANYRESDEC], @ANYRES64=0x0, @ANYRES32]]], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r2, @ANYRESOCT=0x0, @ANYRES64=0x0]], @ANYRES32=r2, @ANYRES32=0x0, @ANYRESDEC=0x0]], 0x1}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000200)=[@sack_perm, @timestamp, @window={0x3, 0x0, 0xfffe}, @mss={0x2, 0x3}], 0x4) sendmmsg(r5, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=ANY=[@ANYBLOB="160e90cb39bca59f8c4064ac6d7b242060a07bc4309e3eb79d87458c797b308edd84adef35ad9d8a17240f38f55f57c55f3875db81d255eea402e1c11ca7fc01964aeb9ed6ef4e80bc67cba7e7fe001fe5d921442b0a06b135f8a73b68dc904b436f256f50ae7cb9ff019e7580b9f11c6ede4210f23240559b8c427000d7ce7862417ab5a50e494b2a54e346d7ffa008ccef06813e235b446788ac0f1df3c65bc1fb53939d4832d6bd8e3b59a232364a2efd284640ec2c438ad2b24a69f1f9da000000000000000000000000989eee6a9283bf253ca4"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) dup2(0xffffffffffffffff, r7) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000010000108000000004016000000000000", @ANYRES32=0x0, @ANYBLOB="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"/288], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 204.067892] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 204.153481] netlink: 42059 bytes leftover after parsing attributes in process `syz-executor.1'. 20:06:06 executing program 5: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x43, 0x400000000000000}, 0x11288, 0x1, 0x0, 0x2, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x2}, @window, @mss={0x2, 0x91d}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="72617700000000010000000000000000000000000000000000000000000000000200000003000000b804000000000000000000000000000000030000000300002004000020040000945120040000200400002004000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000a00200030000000000000000000000000000000000000000300262706600000000000000000000000000000000000000000000000000000101000000000000002e2f66696c653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0002001000000000000000000000000000000000000000050006f736600000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600053455400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00"/1306], 0x518) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f0000000b00)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYRES32=r3, @ANYPTR64=&(0x7f0000000c40)=ANY=[@ANYBLOB="61231142925f637737c61f9ab5ab60e59ff0d1c3a6eb649694948041636f9894daba05edab87bc099622f8b89131fca3f37e04cbbd71185e85ef9586eaed84dd2d9ef1f2be152b9ce020872d24a7380ffc6c4f7730e672c3d45e998fc1eb41d0dcbf6bfc28af", @ANYRESHEX=0x0, @ANYBLOB="b77975de8d", @ANYRES16=r4, @ANYRES64=r1, @ANYPTR64=&(0x7f0000000a00)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000a40)=ANY=[@ANYRESOCT, @ANYPTR64=&(0x7f0000002280)=ANY=[@ANYRES16, @ANYRESDEC=r2, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYBLOB="ee28058e167320d9eff13c57f77c7ce1fece019ea3abd23e9a9d440d99c8cc1ccf14ab750f29c773dc4ebc818bbe1e43e7c35324ab989bf3bec19765b2310330f97ee937a71cf0ed89ee926f8ca461689e26c0f6dbe278ad177d12ec1235e4c27f3b23e989ee517d77071c71", @ANYRESDEC, @ANYRESDEC=r3, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], @ANYRES64=0x0, @ANYRES32]]], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r2, @ANYRESOCT=0x0, @ANYRES64=0x0]], @ANYRES32=r2, @ANYRES32=0x0, @ANYRESDEC=0x0]], 0x1}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000200)=[@sack_perm, @timestamp, @window={0x3, 0x0, 0xfffe}, @mss={0x2, 0x3}], 0x4) sendmmsg(r5, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=ANY=[@ANYBLOB="160e90cb39bca59f8c4064ac6d7b242060a07bc4309e3eb79d87458c797b308edd84adef35ad9d8a17240f38f55f57c55f3875db81d255eea402e1c11ca7fc01964aeb9ed6ef4e80bc67cba7e7fe001fe5d921442b0a06b135f8a73b68dc904b436f256f50ae7cb9ff019e7580b9f11c6ede4210f23240559b8c427000d7ce7862417ab5a50e494b2a54e346d7ffa008ccef06813e235b446788ac0f1df3c65bc1fb53939d4832d6bd8e3b59a232364a2efd284640ec2c438ad2b24a69f1f9da000000000000000000000000989eee6a9283bf253ca4"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) dup2(0xffffffffffffffff, r7) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000010000108000000004016000000000000", @ANYRES32=0x0, @ANYBLOB="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"/288], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 20:06:06 executing program 0: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x43, 0x400000000000000}, 0x11288, 0x1, 0x0, 0x2, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x2}, @window, @mss={0x2, 0x91d}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="72617700000000010000000000000000000000000000000000000000000000000200000003000000b804000000000000000000000000000000030000000300002004000020040000945120040000200400002004000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000a00200030000000000000000000000000000000000000000300262706600000000000000000000000000000000000000000000000000000101000000000000002e2f66696c653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0002001000000000000000000000000000000000000000050006f736600000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600053455400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00"/1306], 0x518) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f0000000b00)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYRES32=r3, @ANYPTR64=&(0x7f0000000c40)=ANY=[@ANYBLOB="61231142925f637737c61f9ab5ab60e59ff0d1c3a6eb649694948041636f9894daba05edab87bc099622f8b89131fca3f37e04cbbd71185e85ef9586eaed84dd2d9ef1f2be152b9ce020872d24a7380ffc6c4f7730e672c3d45e998fc1eb41d0dcbf6bfc28af", @ANYRESHEX=0x0, @ANYBLOB="b77975de8d", @ANYRES16=r4, @ANYRES64=r1, @ANYPTR64=&(0x7f0000000a00)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000a40)=ANY=[@ANYRESOCT, @ANYPTR64=&(0x7f0000002280)=ANY=[@ANYRES16, @ANYRESDEC=r2, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYBLOB="ee28058e167320d9eff13c57f77c7ce1fece019ea3abd23e9a9d440d99c8cc1ccf14ab750f29c773dc4ebc818bbe1e43e7c35324ab989bf3bec19765b2310330f97ee937a71cf0ed89ee926f8ca461689e26c0f6dbe278ad177d12ec1235e4c27f3b23e989ee517d77071c71", @ANYRESDEC, @ANYRESDEC=r3, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], @ANYRES64=0x0, @ANYRES32]]], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r2, @ANYRESOCT=0x0, @ANYRES64=0x0]], @ANYRES32=r2, @ANYRES32=0x0, @ANYRESDEC=0x0]], 0x1}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000200)=[@sack_perm, @timestamp, @window={0x3, 0x0, 0xfffe}, @mss={0x2, 0x3}], 0x4) sendmmsg(r5, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=ANY=[@ANYBLOB="160e90cb39bca59f8c4064ac6d7b242060a07bc4309e3eb79d87458c797b308edd84adef35ad9d8a17240f38f55f57c55f3875db81d255eea402e1c11ca7fc01964aeb9ed6ef4e80bc67cba7e7fe001fe5d921442b0a06b135f8a73b68dc904b436f256f50ae7cb9ff019e7580b9f11c6ede4210f23240559b8c427000d7ce7862417ab5a50e494b2a54e346d7ffa008ccef06813e235b446788ac0f1df3c65bc1fb53939d4832d6bd8e3b59a232364a2efd284640ec2c438ad2b24a69f1f9da000000000000000000000000989eee6a9283bf253ca4"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) dup2(0xffffffffffffffff, r7) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000010000108000000004016000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008000400000000004258bd6b2203910e8a050631c2fd5c9fa09365e1ae9a9f9a704f0d16d3eb5d4ea4c2a7e75ec028adb85fbe4ff3f63b85828eb77de72fd69849d1397f65a904c51d741072973700fa393f73c7668c1f1c1ad85fc392abd066bb9edb2685a09332522b0881b7b5c5c715cc3c9b079a43c30c267b85474c4e78788c74aabe86160154f322f6aec2f2f6e182e69530ae66bf88d2e72d8911a9b418d293a8c30132403f2bc3c621c69bb2eb3d9560471646727a22cd73dae081a3c9c8e7b321372c7db521116eb6b0b78e504374d6d5545c844e8b93c8959e8223b57c659e59cae4f1d7de8a8d5a3433ec36947be72fdbbbfea661f90706ad59c800"/288], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 204.189515] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. 20:06:06 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) recvfrom(r1, &(0x7f0000000180)=""/125, 0x7d, 0x101, &(0x7f0000000200)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x7, @remote}}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r5, &(0x7f0000000280)=""/4096, 0x1000) 20:06:06 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) recvfrom(r1, &(0x7f0000000180)=""/125, 0x7d, 0x101, &(0x7f0000000200)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x7, @remote}}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r5, &(0x7f0000000280)=""/4096, 0x1000) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000001300)={0xf000000, 0x80000001, 0x7, r5, 0x0, &(0x7f00000012c0)={0x990a2e, 0x2, [], @string=&(0x7f0000001280)=0x7}}) [ 205.902234] Bluetooth: hci0 command 0x1003 tx timeout [ 205.908640] Bluetooth: hci0 sending frame failed (-49) [ 207.946473] Bluetooth: hci0 command 0x1001 tx timeout [ 207.951780] Bluetooth: hci0 sending frame failed (-49) [ 210.026286] Bluetooth: hci0 command 0x1009 tx timeout 20:06:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000002280)=""/4100, 0x1004) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000001c0)) getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) r3 = accept4(r1, 0x0, &(0x7f00000000c0), 0x1800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r5, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000100)={r6, 0x1, 0x200, 0x5, 0x1, 0x4}, 0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:06:16 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') sendfile(r0, r1, 0x0, 0x1) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x20}, 0x2160, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffff7ffffffff, r1, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f00000000c0)='./bus\x00', 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r6, &(0x7f0000008880), 0x40000000000045c, 0x44000102, 0x0) setsockopt$inet6_int(r6, 0x29, 0x13, &(0x7f0000000080)=0x81, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 20:06:16 executing program 0: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x43, 0x400000000000000}, 0x11288, 0x1, 0x0, 0x2, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x2}, @window, @mss={0x2, 0x91d}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="72617700000000010000000000000000000000000000000000000000000000000200000003000000b804000000000000000000000000000000030000000300002004000020040000945120040000200400002004000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000a00200030000000000000000000000000000000000000000300262706600000000000000000000000000000000000000000000000000000101000000000000002e2f66696c653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0002001000000000000000000000000000000000000000050006f736600000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600053455400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00"/1306], 0x518) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f0000000b00)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYRES32=r3, @ANYPTR64=&(0x7f0000000c40)=ANY=[@ANYBLOB="61231142925f637737c61f9ab5ab60e59ff0d1c3a6eb649694948041636f9894daba05edab87bc099622f8b89131fca3f37e04cbbd71185e85ef9586eaed84dd2d9ef1f2be152b9ce020872d24a7380ffc6c4f7730e672c3d45e998fc1eb41d0dcbf6bfc28af", @ANYRESHEX=0x0, @ANYBLOB="b77975de8d", @ANYRES16=r4, @ANYRES64=r1, @ANYPTR64=&(0x7f0000000a00)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000a40)=ANY=[@ANYRESOCT, @ANYPTR64=&(0x7f0000002280)=ANY=[@ANYRES16, @ANYRESDEC=r2, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYBLOB="ee28058e167320d9eff13c57f77c7ce1fece019ea3abd23e9a9d440d99c8cc1ccf14ab750f29c773dc4ebc818bbe1e43e7c35324ab989bf3bec19765b2310330f97ee937a71cf0ed89ee926f8ca461689e26c0f6dbe278ad177d12ec1235e4c27f3b23e989ee517d77071c71", @ANYRESDEC, @ANYRESDEC=r3, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], @ANYRES64=0x0, @ANYRES32]]], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r2, @ANYRESOCT=0x0, @ANYRES64=0x0]], @ANYRES32=r2, @ANYRES32=0x0, @ANYRESDEC=0x0]], 0x1}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000200)=[@sack_perm, @timestamp, @window={0x3, 0x0, 0xfffe}, @mss={0x2, 0x3}], 0x4) sendmmsg(r5, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=ANY=[@ANYBLOB="160e90cb39bca59f8c4064ac6d7b242060a07bc4309e3eb79d87458c797b308edd84adef35ad9d8a17240f38f55f57c55f3875db81d255eea402e1c11ca7fc01964aeb9ed6ef4e80bc67cba7e7fe001fe5d921442b0a06b135f8a73b68dc904b436f256f50ae7cb9ff019e7580b9f11c6ede4210f23240559b8c427000d7ce7862417ab5a50e494b2a54e346d7ffa008ccef06813e235b446788ac0f1df3c65bc1fb53939d4832d6bd8e3b59a232364a2efd284640ec2c438ad2b24a69f1f9da000000000000000000000000989eee6a9283bf253ca4"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) dup2(0xffffffffffffffff, r7) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000010000108000000004016000000000000", @ANYRES32=0x0, @ANYBLOB="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"/288], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 20:06:16 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) recvfrom(r1, &(0x7f0000000180)=""/125, 0x7d, 0x101, &(0x7f0000000200)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x7, @remote}}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r5, &(0x7f0000000280)=""/4096, 0x1000) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000001300)={0xf000000, 0x80000001, 0x7, r5, 0x0, &(0x7f00000012c0)={0x990a2e, 0x2, [], @string=&(0x7f0000001280)=0x7}}) 20:06:16 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) recvfrom(r1, &(0x7f0000000180)=""/125, 0x7d, 0x101, &(0x7f0000000200)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x7, @remote}}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 20:06:16 executing program 4: keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x0, 0x40000000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000680)="ff5b93baf4715971ba778a4091bf32a5307d1aad95db841680c544d506ab1c3405176a92ebe5ce0025e269e33dba850c0edff31990e83f65d40e8aec1f8801132a4088456b3f9166215a20ce4113818fe8668752a06696602189d19eb27eeb7c7a8fe69d0e65a052a93b5c4cf71bc11c4bc0bc7fbc5637850e7cf553dc9683e2a77d09196b818171d8e2b85add4e45494bc588edfedd7bd8045fa963bdd79c6885fb32e67153a5050367a53907b55917d7f298c40364e253", 0xffffffe1) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x1, 0x2000, 0xfffffffffffffffe}, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r4 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r4, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d2267958d4c5320b836f26e80fff0f48", 0x53) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) sendfile(r2, r4, &(0x7f0000000200)=0x2, 0xff8) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='Z\x00') 20:06:16 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) recvfrom(r1, &(0x7f0000000180)=""/125, 0x7d, 0x101, &(0x7f0000000200)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x7, @remote}}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r5, &(0x7f0000000280)=""/4096, 0x1000) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000001300)={0xf000000, 0x80000001, 0x7, r5, 0x0, &(0x7f00000012c0)={0x990a2e, 0x2, [], @string=&(0x7f0000001280)=0x7}}) 20:06:16 executing program 0: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x43, 0x400000000000000}, 0x11288, 0x1, 0x0, 0x2, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x2}, @window, @mss={0x2, 0x91d}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="72617700000000010000000000000000000000000000000000000000000000000200000003000000b804000000000000000000000000000000030000000300002004000020040000945120040000200400002004000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000a00200030000000000000000000000000000000000000000300262706600000000000000000000000000000000000000000000000000000101000000000000002e2f66696c653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0002001000000000000000000000000000000000000000050006f736600000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600053455400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00"/1306], 0x518) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f0000000b00)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYRES32=r3, @ANYPTR64=&(0x7f0000000c40)=ANY=[@ANYBLOB="61231142925f637737c61f9ab5ab60e59ff0d1c3a6eb649694948041636f9894daba05edab87bc099622f8b89131fca3f37e04cbbd71185e85ef9586eaed84dd2d9ef1f2be152b9ce020872d24a7380ffc6c4f7730e672c3d45e998fc1eb41d0dcbf6bfc28af", @ANYRESHEX=0x0, @ANYBLOB="b77975de8d", @ANYRES16=r4, @ANYRES64=r1, @ANYPTR64=&(0x7f0000000a00)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000a40)=ANY=[@ANYRESOCT, @ANYPTR64=&(0x7f0000002280)=ANY=[@ANYRES16, @ANYRESDEC=r2, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYBLOB="ee28058e167320d9eff13c57f77c7ce1fece019ea3abd23e9a9d440d99c8cc1ccf14ab750f29c773dc4ebc818bbe1e43e7c35324ab989bf3bec19765b2310330f97ee937a71cf0ed89ee926f8ca461689e26c0f6dbe278ad177d12ec1235e4c27f3b23e989ee517d77071c71", @ANYRESDEC, @ANYRESDEC=r3, @ANYBLOB="8c211c12abb7be7c789d17bc33b670aa5bd340ee4c49a622c861ec6a8cf57718762fe71b05542e7be28427e94967aa3a9144e394e7281f93dda907890c3d3f7a20eadc6afbfb44337bfadfacae337809438bfe03bd6e6886367fbf2ea14ba262c3389fcac254f712adcc3c9de8bda7000916bc390eb9211a280800c756e044d7d0534c4f596343f842d52bf8f5f4bc73b94aec47f3a04eebfcfb80ff9aab6f55a2d561ba872fc3c956fd6bf78ada4991108b70bfc937b96caef44e0e00c1b6a1f579dc1085c2b0067b225175d36354a2a256760e63c24b975345cefb0b2015f08e3d99cb4332d2a208d972a9cedd1c50b5a9b111bff7a87fb7926c73a3195cf9f0a99cb574fe873c9f4dbe07254dba13f37d5be4bf581c4d55cea6652c6cf2b85944125744de6fc136a28de248192f9b1b2dd09a7bd243806de5486a31aa34ab2460163c416a067abdb7098a61092fa74b69f0618d8177bf2e63a8265916220d58ddf0a5c272428bd5f64fa7a417b81c9b84480fcfb05f631c4f03e9d78be464ba2707b4aeafb1ff86664e08c67bd0b24a890e56e8ca40fa41ddd389dafc75947335135c9c198f96dd56bafb3ef08efefeffa0f88f6f8f8abcf6ab80950fc6f135bd52d9b9a7af09d99231b6cd0db0341237c2dda24126f0a78a0d40dfa7f85ea2c3c6742ffe186f8e9646a23e3177900e30a2f6e01bf4c631315902f674de4815c7058e75a8d397cefa3c7c720260be2c393dd78d874c20b722ff682a5463be2b15b964cee8759936a2b7cb6d936f48e293de6e37955d3284a66d6a793efb0d7872b04fea4914bbd04ef7bce5e7a131fd6b02301d7a267f1999311429c182bcc8687b9c194bfeef5d4620dbdcc9c17ee199cb3cee69940aedc260dc9c1b302e4b83a04d64fd2b41e744394c5082c576a99ebceeddce428fa88eef5b4606f6f09d27f30a512cfebbf4208982bd5305b8207239d1cb05a0c5159c855c46e05251379dca634c86823d57f994943d3d0fd008f2f76092dac2d711da59879711e481885e861c41e63a69c6d28302359c1ab1a88e0ab9157dea146b0e95e04dad871a666feb2925a4e44bc49d28e4dd3f05efd48586cfc52f15818c1c093d3e29a355370949c3993e8ec7430898d3cc7ff60515a1241c261a7fc9df049ec2eb8383fe857b5e22a10a38650bf64f3b47958eb0b62983704792c9cc4e3cc19ad542e192db9a20772ea4b7c6ccd7a05761e3d57639244c3bf5359853bd04ac4c48cf821ac2f4f0101b5e2acbac7ba4a8f5cbb64b5b1c1e1b20a77d992630ae6bf7852de9d6bfdafe59e349ff46b219516476ad41598e89818bc8ec2c1e9d46e299df615e961118fc430d9175bb65432973fffdeed680ad9913abe99f8d5ae36b1f22a2caf70fa6a51044d9483e60e2200367c42f0a96b46fe681e07b46995c5efeab308ee6bceba7d3a413c76b250ad4d1dbac851907677a99b52fa1416f1dbdf3a4313bac265e3f767538ee14bdd2d64bee5db68cfae7ec04c02f35525049787ac4dd99c9db15531b3f890e5f25a6ddf46314912f28713f3d96d1699765f945b026dea377bcb8f9181a2a97c68ab9349d35000ecb1871aeff7bc56ee9cc3fcbabc5a2008bf2881b236acfcef675cf19dfb81864ada16327a67990af711ae51ee6f1d92fbd0c6b086535634ee71eec945399b72a55d9f0f8787f62629978c64213e73276a9d52aa2cc89b84a733e7823ac5a5e42f7624d0665d8177e371b42e045a32d497276cd12973fedd0e4c6a734ede4984b68b4fe837453d382d72dbb2826f9576256fea0069ce43cd59cd01c19b103645101208db6ac736a2964f08251b4232de423e46ab4011cf2869ad5035afb0374392ea387f11a384c4ac86d456ae8306fe515131628d23f2af508d6527f1495758628d3942bd00553f41cf506f48b7c7d7a011b5297e422e19507bf49d785b615b328fe8b7d282e9bb7b4d0c8f75d418b381715dc0bed8d420877829f0c4aa2cab7a2b00faf35a233afd39538ba9d63b79edf0cc30432dede9ca6c1562cb475a18f58417cb29b2e01b18aa8b8c1d7352b92c576501f9c30462f3939cf2826e85d6c9bf6101fd865dc764e1f8bc1f32e742037e873696490a3c4f9dcc437acfcef89659192eeb915d8130092319fba1ace6f0b43b25767bd531a34f07f209fd43ab1f0df7f2cce88115a72e3b3b5f91362fa62191cd1c33ee8268fa819f550b2120364d17e7e60eabb7fe17e41237d9dcd6c48d5499735f4818aaaab8e48d1ad5f7a7cca83fda9b2ba708f6434512a44235b42137a67cfe4cdbf1a27c9d7d0380297826996eb4c13c32305247d3c7bb6f2c1d9873d02f2611caf7487a714e6baf71832fe01e1cc1cc29559c0fa1ad0283c9492b7032aeebfb093d47a722c1eb1f5e6c6514b009a03487601a00707529219194b103b95cdc6c6c83c44dd56f7d743f6ab36254f9a629e2ffc79057bedc8e8e95e2312338aa734d3eb1e396a790b9322c19a101ae2f54014dfdefaab29852bad95d199f8231d63c031ec27853871452348fb3b2bd7ca1fec92fb339207d14be4871b824cb587d38499eb065f0f57555a5daf2082a9dbbc2042d1895e997efb847932e316bd4dba9f4688b22f0716e836204759beeb087659b865d4b5412910b5781dd01fe1e5875641ab7de6548e95247cd0ca27db3a0e31af9c787efbfd1c257bec1d97083f9a5df8097f783ff0f020656079583a3fabe51dbaf18f4455a00d2c4926d320f611ca6bab3f0eaf45ae646727e3d43042b4cd88db6efda89b2cf60218e830227c984f354b778cbe68464217d68e64c3687d7a98053b3a9883105b0c884212dcdd6a15b19c85501eb8808a996ed348d6be56076823d9d6ce31a9732e859e42f9c191e7d6350bae20cb1483ee1284352624ceee69eaadfeba63040b9a991bd85b1df959266223597a643ee6db983b5ab192fd21a424acf98e84788d42d11985124c9fb6fc0609355b880761160c219d2b9661bb3277276c4ad685f479d29ec07b3e23ab49378673897cda0095f7499fa8f340fa39f46176f9b789f83d98a28d65c4609ddac992c8300e0181f7fa6b7d81c3bf7cdb3a2cfc150d5d39f6aff8ae4cbcc95590ac02c23da3cf1cd7af46d086da67a12f9ffc6a53d2a1f178e28fb2b8fd01cef452b33f36ab33ae5f98043544e69f9d74b288f343b02a1fc955d881c5e018f2013f1922f5909b42590d690e2e9f72c3d6acb655795a4c13429c98c10887512b82db50f788c31770c47a85394542379387dd3d5e4139e45f942aa751fbeded0b324641a5d6fd5ab042bfe9b53af94df6d22cdd1122634d9c0aeeccc502e566e83fdd8f260521a7392753ebfb7a53617e95f6b132ba86369d32af0444ba8f5692a75afd60dd8ffaceefb4fd768a9b2ab5a77cca8d45d561621c1743ff267b78dae5405471ce4f11e7a85e1a4b6822e4a26e63282b472b927ab4da1028cb3c6305058e693413fe437e804f6de3b7c31582bb646144eb4d594839a7ce28b50e31a84cac8651f8e9f71dc242096aecc62fb06b6dd0ae3d52d0af9b7d300c75de4398a6f32bc7e433d18f8043ad13c070c536acf2cf5e77959dc78b80e18905406add6f16ba659b27bfb43a2570c803bc55da07f0d8f892b4b91988adaaa8b5dd916ddeff69fbc6877cfc36228e6aba796785106e80d928e658673884d2c692a50fff92587cfbc9a2eee60bdd37a38358edce0c19b45e57ae95d5bec595e4bd0c3a38b4a1a5d2fdce0925afb7e52b69897ebf7d5558b7c3e29b94680b8d599484f45118cbd645f283bb3cfa5771f592249d1cff923ae3f546dc53b8c1e32d9808d8e1a9779883b44f8da987d5783cbe2cf8967d2dfab30a99f2bd501f0fe921db6f5fba42d8eac0c64eee3f8247771bf6086b9cae237f0882e135b564d06e2e4d64097afd3600bc3ed4c7a906fab2d0355b1fd2d2f040d5416cc73f78f2fad08ac656e2afb50d0247b17477d15067646ce1997d6c800d383c193796c9d829c6058b4a2cba300fa3c66219b28de3ee8e547b061f66f3acacf0a746510fa4534ad36b69c52a907669c328b275a29300650569e6ab48aef55616b53083a39f402ad5846fa95c103c216f1e595044ffdb26f49fc215f100e60ce22e9e4f5708e1185695b105befb2eb41e93dd5451c0c752e17ac77df5dcf8a83f20c62bc71d73dbf80cddfa8eb93f049c8003a6a3bd5d80fa876ed75baa5209eaecbf588b1a32cc14be9ff07a8dd8430467e2724e9599844c9016dc84cf1dc021286a0683826df393d0edacf11ff2ce19698993d0af399013efd26da2297d2c4fb989a2ba2ec6ee333b60ae3b06033f19bfed17ac5ba9bee60c82bb44f3a05a5b90ea1c45fa067595142e4603be79f73059db799f34c5f0f5b5f7b7fc686d617475fd96e29959cdd2ed21f94b2ed7e07d802789ff2365c41009185c9588080b068bb433562b9841d0e3d8fc65ae491d15caf056f46ca2fc80af8b608255a3f1db89a707fbedb4b8b8617dc27eecc66e88de65c1ddc1c25a80dca520869723150d85cb612617536d62e00d20faf1a69b96262ba3636aa0ccc8c618f6afed10ee99723ec83c887a69bb323b0f7d2da721130f9c773eb783bc4ad43cf5483151bade99d0edffa72a1e799ea9e1b2c9c1a07b5e23c27778149290b0cf80e6d41538aa6d214a76fd484169f4984a0625deccb9f8405e1af6edf2e6cab88da8ef119c31d6100c26957d842e46c7c4932fb367a94ad06d63bd15fc7e01b1dd6a83c6fbd8650f3f4a0e631254ff2ff4edfd25ab363c1e049194698e29f2bff4ea8b03184c45bf9f7bfaf4ef8b66ecc711a28a50bd7b028683be9004236961457d73e686364c60ba2e1d32a788cadb459091f86953f53b34ebea7c0934be81e3b52b98b715ce2f7565310c95c6eaa2d0b0fd00e73ebffa6ef5277d59d6498c55ceef47bd51c7a9ce42a394755138707406eb0e800df3c383c817af6f087e472c0f633a8950b15ff37f1fcfda52fbd9faf077e6704dbbed21aec6fa0b98411b9ebeab7201c0428aeadfeb530d9e6daa5e3926d9b1b8ae14c508d47e42c8d7ccf3f5592fc9b97951cc794dc202b186ba331b8032160413495fa2c01aca1544224b94b0efd48f145153efd1b0a9cd6bada2fc5c51e06462f9dfef839f7701276dd21e6b297465bfdfd93357839dc98aa0fbfbedca1dd8395c6cfb25b8dafc0d2130bbb2fde6e0a89748808a34261952b06403f66b16df12c600eef30e275d7f82d7aefef36dde518b1dce45b84ef655b8cc118c0b16383c572f98caf61c9fdf463758b9080773f2f251998e684d3caf45f203180d5d87411d9e3be5a01524dc98f3c9a9ddea09b5fbbe717cd067d18640c618d6d2c368b5733db5427a50b6f71b6091148df3f6191d133902345deca561159064470827ebe5ed5480b71cd3b7645a4b4a157324f777504d823e397503e649219c7a43d955f08f83fc0a0dd6ed7c03656c3b10afd5014806ccde9368be26d51555506a33b3d6c8cc0463405a9cec94771194fc4e86ad70dc38c5086b9a7173f8fd37e36da51ef9cf20496967821749ea0c8afcf4e846830279a9e621c4d2b55f6e19a631b015fb069686b227ca2f1ae7caf2437cef52100e520562278d746fd4d3aa29aafd551cb237d3e141b64aa25815a5585cf8dcd3298cba81828ba758d9e30ac6827579761029938cb69df4c365ea9e43a9e8fb4cbc6d8d28df00222984c21330df44e9e7a9ed8604265369f6f1b18ee791972a", @ANYRESDEC, @ANYRESDEC], @ANYRES64=0x0, @ANYRES32]]], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r2, @ANYRESOCT=0x0, @ANYRES64=0x0]], @ANYRES32=r2, @ANYRES32=0x0, @ANYRESDEC=0x0]], 0x1}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000200)=[@sack_perm, @timestamp, @window={0x3, 0x0, 0xfffe}, @mss={0x2, 0x3}], 0x4) sendmmsg(r5, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=ANY=[@ANYBLOB="160e90cb39bca59f8c4064ac6d7b242060a07bc4309e3eb79d87458c797b308edd84adef35ad9d8a17240f38f55f57c55f3875db81d255eea402e1c11ca7fc01964aeb9ed6ef4e80bc67cba7e7fe001fe5d921442b0a06b135f8a73b68dc904b436f256f50ae7cb9ff019e7580b9f11c6ede4210f23240559b8c427000d7ce7862417ab5a50e494b2a54e346d7ffa008ccef06813e235b446788ac0f1df3c65bc1fb53939d4832d6bd8e3b59a232364a2efd284640ec2c438ad2b24a69f1f9da000000000000000000000000989eee6a9283bf253ca4"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) dup2(0xffffffffffffffff, r7) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000010000108000000004016000000000000", @ANYRES32=0x0, @ANYBLOB="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"/288], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') [ 214.536680] Bluetooth: Error in BCSP hdr checksum 20:06:16 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0xe00) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) ioctl$void(r2, 0x5450) fallocate(r0, 0x11, 0x0, 0x10000) sendfile(r0, r1, 0x0, 0x14000) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 214.561339] sctp: [Deprecated]: syz-executor.3 (pid 7906) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.561339] Use struct sctp_sack_info instead 20:06:16 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x343) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x8) ftruncate(r1, 0x2008001) dup3(0xffffffffffffffff, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) io_destroy(r2) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000000080)={0x6, 0x5, 0x2, 0x11, 0xffff4a7f, 0x9}) 20:06:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x54103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) read(r0, &(0x7f0000000180)=""/19, 0xfffffe47) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)={r1, r2+10000000}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x1) 20:06:16 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) recvfrom(r1, &(0x7f0000000180)=""/125, 0x7d, 0x101, &(0x7f0000000200)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x7, @remote}}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) [ 214.701779] audit: type=1800 audit(1585944376.927:9): pid=7928 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=15791 res=0 [ 214.794769] audit: type=1804 audit(1585944376.957:10): pid=7930 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir476170561/syzkaller.lSIuwh/8/file0" dev="sda1" ino=15791 res=1 [ 214.913702] audit: type=1804 audit(1585944376.997:11): pid=7934 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir531473529/syzkaller.kcAFKg/8/bus" dev="sda1" ino=15789 res=1 [ 214.944828] overlayfs: filesystem on './file0' not supported as upperdir [ 215.383577] audit: type=1804 audit(1585944377.607:12): pid=7940 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir531473529/syzkaller.kcAFKg/8/bus" dev="sda1" ino=15789 res=1 [ 216.345096] Bluetooth: hci0 command 0x1003 tx timeout [ 216.350389] Bluetooth: hci0 sending frame failed (-49) [ 218.424798] Bluetooth: hci0 command 0x1001 tx timeout [ 218.431763] Bluetooth: hci0 sending frame failed (-49) [ 220.504430] Bluetooth: hci0 command 0x1009 tx timeout 20:06:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) connect$inet(r3, &(0x7f0000000540)={0x2, 0x0, @multicast2}, 0x10) sendto(r3, &(0x7f00000003c0)="879d0ebf9cbb63fd9adcbe51b07b0429c3178dcd0c7a3926a73ce84de28ab0", 0xffc7, 0x8000, 0x0, 0x188) sendto$inet(r3, &(0x7f0000000100)="00dd", 0x2, 0x0, 0x0, 0x0) 20:06:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x54103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) read(r0, &(0x7f0000000180)=""/19, 0xfffffe47) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140)={r1, r2+10000000}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x1) 20:06:26 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) recvfrom(r1, &(0x7f0000000180)=""/125, 0x7d, 0x101, &(0x7f0000000200)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x7, @remote}}, 0x80) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 20:06:26 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x28d, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x6, 0x0, 0x400000000, 0x0, 0x200000000000200, 0x0, 0x4ca, 0x0, 0x0, 0x0, 0x43]}) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x8108551b, &(0x7f0000000100)={0x0, 0x5516}) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000200)={0x8, "5a3a73bb4b8f1cc8d741a52bd0d4495fe58652d0056497f16d2c57b7a280cba3", 0x1, 0x1}) add_key(&(0x7f0000000300)='pkcs7_test\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0x0) 20:06:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000002280)=""/4100, 0x1004) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000001c0)) getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) r3 = accept4(r1, 0x0, &(0x7f00000000c0), 0x1800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r5, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000100)={r6, 0x1, 0x200, 0x5, 0x1, 0x4}, 0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:06:26 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe", 0x6}], 0x1, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/6, 0x6}], 0x1) [ 224.561289] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 20:06:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x21e800, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000000)={0x10001}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) [ 224.619805] sctp: [Deprecated]: syz-executor.3 (pid 7974) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.619805] Use struct sctp_sack_info instead [ 224.821765] kvm: emulating exchange as write 20:06:27 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40500000000000061105000000000003d000000000000009500000000000000f0eeedbaec49c511370f71f8b50f9a262fb08e92a5d6c58430dc6b966a65263c3878d45896b1eddd2b24e94f6ce8a7ba2fbe46ec4eb280ba7af529f422"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) accept$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 20:06:27 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) write(r1, &(0x7f0000000140)="7ffbf4694ec4f4407bff9bbb9c391b369449b7d0ca53fe8ac26584a35fa21b2fa8054296a8171cbded09eb0160c255788014cf9052aada141ffd7f4baddaf7bbc7a17df7d3fe1ed887c5fbbd7ac85961b6a749396e5f53654e", 0x59) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', r2}) tkill(r0, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) set_mempolicy(0x2, &(0x7f0000000300)=0x75f, 0x9) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)) 20:06:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTAT(r0, &(0x7f0000000240)=ANY=[], 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0}, &(0x7f0000cab000)=0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe97}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000300)=0xc) setreuid(0x0, r3) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setreuid(0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000280)={'wg2\x00', {0x2, 0x4e23, @broadcast}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000300)=0xc) setreuid(0x0, r6) mount$bpf(0x0, 0x0, &(0x7f0000000200)='bpf\x00', 0x1000000, &(0x7f0000000600)=ANY=[@ANYBLOB='mode=00000000000000000152314,uid<', @ANYRESDEC=r3, @ANYBLOB="01797e3e2d645b9c4133c10f373a62a2f2f9ce440ad6dfd4e746e0c0727a01ef7c96ef2b5fa7b42149404e13497eeb8dd92d8c363b0056d2278288bc74424386b8a9fe0767c9b76b4e37c626af60c9077122abb48e6000da3c6d640000008beb6dcab936de02301f8aad37ccd553edc225a379defa92e93f41674bdbdb224b6645c7d9c0cd19de02dc75e163d5895a24b6c028f5b3bf642b", @ANYRESDEC, @ANYBLOB="2c9e128998fc354e", @ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB=',measure,obj_type=/selinux/enfqrce\x00,defcontext=staff_u,\x00']) 20:06:27 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) recvfrom(r1, &(0x7f0000000180)=""/125, 0x7d, 0x101, &(0x7f0000000200)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x7, @remote}}, 0x80) 20:06:27 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ctr-cast6-avx,ghash-clmulni)\x00'}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) readlinkat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/231, 0xe7) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x40, 0x0) close(r3) 20:06:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000180)="cd6966d9274eb1b5db6003048efb4711c21f09d630ab198a24ee1c86231940b985db38a98845bb118deaa6ccb8d6a9633001949d509238df78d29ad9bd9848a0d9e95d54a19a3089c087195ac8b1717a8b58", &(0x7f0000001280)=""/119, &(0x7f0000001300)="69bf9728a534642740541fcb0522a8d88ab6961e86e5aba78b67629ae04ea5e590272f3e9d28941a906b5d85109b73b5a75cbdfb9c1913d508db8d79941edcc4be8fab7c9a7ff3b097a96dfd008d292c06cac7cc98636a", &(0x7f0000001380)="0cb47a706e26c43a146840cb9f29d77a107b895a54faea12b30e1de520ecf21434615ca8289a83f56faffbb4a3ee2e7bb2718866f5b661e1ddb6990ec221c58512ea1f0241abc50b590c8d1c466ea7a3ffcf81a6667bb3d8395e2b9c225deee59c41663e7ad098627e74dfdcef4d38742ca6d3241a992b1f77c0a9a988ff6be3a7767183ecb87cee3f4f860f700c54105c1e910a9b04e84b05866c16b38078a3507b1d2391aa2eb50cd28b5d96ea845636758b1b6059b54607737eb2a6eaaf300c4750a12d6300700d131d997296b31f87a586877394b6796685", 0x22580eda, r0}, 0x38) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x9) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) bind$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x3ff, @any, 0x7}, 0xe) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), &(0x7f00000000c0)=0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001540)='net/llc/socket\x00') getdents64(r5, &(0x7f0000000280)=""/4096, 0x1000) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000001500)={0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r6, &(0x7f0000000280)=""/4096, 0x1000) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000001580)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001480)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000080000000800141026ed3bf24e9625e4acddc4dffd43c4e87af25ac73b6e4ae5f5e7e062ef31ef189f6b186a301cbf608e49ede3a2aa2b755ab95daa26c7e85ab7a9b051da35ef60bcc5ae92fd7dda8325c9d0f3", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) [ 225.168385] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 226.583425] Bluetooth: hci0 command 0x1003 tx timeout [ 226.589335] Bluetooth: hci0 sending frame failed (-49) [ 228.663161] Bluetooth: hci0 command 0x1001 tx timeout [ 228.669059] Bluetooth: hci0 sending frame failed (-49) [ 230.742926] Bluetooth: hci0 command 0x1009 tx timeout 20:06:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000002280)=""/4100, 0x1004) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000001c0)) getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) r3 = accept4(r1, 0x0, &(0x7f00000000c0), 0x1800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r5, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000100)={r6, 0x1, 0x200, 0x5, 0x1, 0x4}, 0x14) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:06:36 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:06:36 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'erspan0\x00', {0x2, 0x4e20, @broadcast}}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000001380), &(0x7f00000013c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r5, &(0x7f0000000280)=""/4096, 0x1000) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r6, &(0x7f0000000280)=""/4096, 0x1000) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000001280)=""/236, 0xec, 0x1, &(0x7f0000000200)={0x23, 0x7e, 0xb8, 0x40}, 0x10) openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x40500, 0x0) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f00000000c0)={0x3, 0x8, 0x4, 0x40, 0x100, {0x0, 0x2710}, {0x1, 0x1, 0xf7, 0xff, 0x48, 0x2, "2963d371"}, 0x5, 0x4, @userptr=0x7f, 0x10, 0x0, r6}) ioctl$TIOCGPKT(r7, 0x80045438, &(0x7f0000000000)) connect$l2tp6(r5, &(0x7f0000000240)={0xa, 0x0, 0x8000, @rand_addr="55c25bccad5497c5377ac3c7b800c255", 0x65, 0x3}, 0x20) 20:06:36 executing program 5: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYRES32=r9, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYRESHEX], 0x5}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007250000004007a2a30005000003", @ANYRES32=r9, @ANYBLOB="00000021ffffffff010000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8040}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x54}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x30}}, 0x2000c050) 20:06:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x21e800, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000000)={0x10001}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 20:06:36 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTAT(r0, &(0x7f0000000240)=ANY=[], 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0}, &(0x7f0000cab000)=0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe97}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000300)=0xc) setreuid(0x0, r3) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setreuid(0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000280)={'wg2\x00', {0x2, 0x4e23, @broadcast}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000300)=0xc) setreuid(0x0, r6) mount$bpf(0x0, 0x0, &(0x7f0000000200)='bpf\x00', 0x1000000, &(0x7f0000000600)=ANY=[@ANYBLOB='mode=00000000000000000152314,uid<', @ANYRESDEC=r3, @ANYBLOB="01797e3e2d645b9c4133c10f373a62a2f2f9ce440ad6dfd4e746e0c0727a01ef7c96ef2b5fa7b42149404e13497eeb8dd92d8c363b0056d2278288bc74424386b8a9fe0767c9b76b4e37c626af60c9077122abb48e6000da3c6d640000008beb6dcab936de02301f8aad37ccd553edc225a379defa92e93f41674bdbdb224b6645c7d9c0cd19de02dc75e163d5895a24b6c028f5b3bf642b", @ANYRESDEC, @ANYBLOB="2c9e128998fc354e", @ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB=',measure,obj_type=/selinux/enfqrce\x00,defcontext=staff_u,\x00']) [ 234.766097] sctp: [Deprecated]: syz-executor.1 (pid 8079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.766097] Use struct sctp_sack_info instead [ 234.825901] sctp: [Deprecated]: syz-executor.3 (pid 8077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.825901] Use struct sctp_sack_info instead 20:06:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) writev(r1, &(0x7f0000000040), 0x0) [ 234.959902] sctp: [Deprecated]: syz-executor.1 (pid 8093) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.959902] Use struct sctp_sack_info instead 20:06:37 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) sendfile(r1, r0, 0x0, 0x200086) 20:06:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) dup2(r3, r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r5, &(0x7f0000000280)=""/4096, 0x1000) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r6, &(0x7f0000000280)=""/4096, 0x1000) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r7, &(0x7f0000000280)=""/4096, 0x1000) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r8, &(0x7f0000000280)=""/4096, 0x1000) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r9, &(0x7f0000000280)=""/4096, 0x1000) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="46643def64e7e3614c5bcbac9a3f71efb7d733fc8f45185172f62e8a3a3d30b68e4fae", @ANYRES32=r4, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYPTR64=&(0x7f0000001340)=ANY=[@ANYBLOB="bb72afeb48c626dcbfcbdac44d15292d7d72b1aa150d8719e548671ded6e49", @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYPTR, @ANYRESHEX=r5, @ANYRES64=r6, @ANYPTR64], @ANYRESDEC, @ANYBLOB="501015a9135557f754b39e04c9d8bb83d21d3d3cd20b1d361bf93eb6aed28e3841080b1a280191bb7f88f4eedc8ffaa486ebcc884fa524da19579257e2f6558092c3736a7accb40afdd3f14988803bf0088232db2b32e555a7d7cce96bcfa86bf8cb3d51c62c52772dc9ad7c83d592a59c0f14834a6f763b0b9a5c6494d03758c3f1d92087f74950935e1e5bac74355f873061bf8f86eebe49ef407256566fc1b10d55415b73336276349239b93629b6e26d2ea4f1346c653c2a8835ab57136439b1d168106e4f76f269b05d79b443022edea83bf4d05028a78fd37c9d5ddca34a64df4190d7afeebeadfbcdf19ec38654a74bb9a4642c2821aee78e3ae80c80d6b0f33d47f70f3d8c1d4b5b4d6d2d58182655234a96e2baa7102359586d0217c8fa56aec804adf8862c0931e62386de85d63a0e4d10c7b41b65c2caaa0f1ac706c9e7676fd387920543e6cc3ae45b6980dbf037390952d6e9a67b17607805cd0ec60fdf160d79a8d7faa08ed3d191c34b2226dcd08f6623f367956490607ef822ae4105d1a15c406b5ddebadff8269cd258aa0edc3ffa7796895811292c1dd999b40d9965d710e55de92af77af17e56620cc4fac2e3502be2efd938867e6952818195becd8524287c542f4015668d259e11df8ab2f6cdf73051319ad1d7eb13b830722de1024691cdb9637e79a45e20853818002387fde6150f76a5e234f9d676adec7a91e4fa6364c956e8452222610168da7c558cb48ba13846258439abe542596968d634fcde42b41652aaf65cd41ea58b802d8fe0e891921d52300c891352a1d336cd18bfcc3f985bf049f12b889b81c13015431679b05bf6983df61bac7a9685048d9101a78988ab44f01cfbd8ea4b03e2eb344494a216b04e606209d2cc573d4ede614ae6abe85571f48a0404e4ee3691abf57c7597feb5c1b13478b95f46c324db9149f84a87d3e091641d255ccb9038cc4a2db7bd29d296c7225c76219f5e8b26155a7ef4906c5d0e192305629505df2d43c130c3d8b8c4114cbe501778316682fc4761554eadde0e0736734319ef02b4cfc190810e2cb9d5e866102dda7a747457e9731ba74830db0ceadb43a452ddaefe49378eecfe014059865c13d2d1eaeba502a6f45296c0dac83cd9c4eb945d38275da46e1631b4af869aa639fee61b58dd7e9e968d5f0ef0f493ddba9e5a779afa41e17a272796d9567101398fbf08272481a297fbb743066a4f33d3cfb9cf9b704ba8b7ade104b2f333c4d241facce7982ccac1ab479672e7408fa807668a5fa515654b6eb200810e520bcecb56a664338882b97dcbf0a50c9ef995507efc2d2e68339ec69f345997322bec6caba64645f305b15db7a66758e5a899487c2e1a8d384ee589f5fdbe8c1146b4a39bd6818a832d8da19398bc38e891a8c1860ea67c73ddebad5fd70a2ce1cf2750b355d9c4b51e79ac05a6ab543fc81cf2d53c57c482cc63f4e0cfae445f6b5dd8621f63d327c68bbd2d1367cd7e246df35d83e1b99c33f826ec6797c5dbf40a371976607fb82b5ed195aa590ea61fdf51ff0aa255c393ad0c324143eaca098ba718ec5b955ea6aad1106cb8fbb8726a130c1594dcb023dbde213c7db150918c3c389004984e8e5dceff8bfb0fc752695dc2285cc781bd5cdefe78a3fbfa93307c3d34a31f7255fea75ffcf1ac97ed8c8ffc6ce97aad38deaf1608e6c0b9188f1a550b8d2ed5f2bb4a0b9050546f1d77f04e96da8ada951b62ac1808712bb100d6975a906473e4363bfbe987c291f635eb3447cbfe001a2c426244cd35f248d76be6629fef74bd65be8ef13b28523d9ab7897f9f077b72484c42cdc907ca61687b7efc52b243775ccf52efe8d14ac10162b890622403ea9f44823f60251e969c9f5adf80291af282a604fb6ece381f0efa39cd4521103a398a8a6a93bf1ed4fa59c573618cc9de3bf63c0e4e2dc60eaddd84c7eba4cdec92a9d250c53e57cc453bfef7ba9782a575719efb05b98b157d219a71b7623cbca48e82af1295b5015050791b05da65174abbedee6c36d8b5318bf3d82ee401ed7c253d385363add07d4c9823916a1d443496f31c7335f38ce849eaf07cd9d78c9f9c4ebd838319415f72bc362f07549c4062f81e004801d4b96660f600a5cabe52e93b7df8dace60c18b91987a5381b998f73208516b2f8798556814900722138404f2e7886d543faa465ecfc5920c2dd000f2aa26afaf64a9e4a999898a00280151cc107cfa18fe649d383a1be651918b32dd3f7748b7c65723ad005bf306069fe27d0f284f9d606fc14f1391fa408ae63f3136bfd2883bc7cf961c38e3592cd31bc5eb53ad9923e710fce79b126a59aac0bd3a1e4463c4bfa2bfdfb057cb7bcb62d836c0e0ae954c9697faf1708d9b8d3939dbbeb9b49452505a1c71c96e13247dfd31d93740635c4a784f6e8c8bacbe8c92f5330cd618e389612dff418df82256d270cdc4c77fc820d9ee88ca67355b9f2849cd4bd6829f219a19fdb0c5b07b3edb9b19fadb3150f69b031672fbc966b1e52d298fc75bf0bdf77a13278c5f69aeff19c80a83bea2ee61f64365f9de5d8f95433cf88acb2ff8dc3959a028278f7c19fa1b5161af3a403e39fefc6e3763fc3b54d30df04dea99e403391b017dd4ee76aa746a908e323d864df0cfb16cc52ed3b9387b8d3817f841ef1a0c6d88d6280cfa3d8a33f0b646cbe8ce7b5bb5fc250badbd9d6e9b85a0a15f0c9efc099d2cff1d603cda006419813f09cb4a4d22d05e4704f9ffbc908563dc1b01aac62518a4cd9bdc8eaeed17c3bba93aa7a909618b4b5e9f45ee41e11163f43b781d5691dd58348bd81b53e2811cc582e7036ac151d72a58d944a162929051c5870cc3dd4e3adf824c27d2183da0f463c8106c682d47d2f2b00cbc44cfc9e8185f77efa3ea3990d75f45a788e189e5316bc1f55ccb734fbc966b088cdeddcf1af1997aac4c19c65539ea3dec2e0b40ad3c688a889b19421c251a169b373fdfc9bbc1209f79332ea16eb1d97b315e57bad5997507f6c716a3f129e49b51165513e23571b8155c278cba377e76c80782263a3d89c9d232a9edeeddd55fdf5472cfa35c07c93687a7d59cd338bedabc455d30883c7b6b776617033223121add330fd2e92fa0e08796a2596f7edf98f4d75c8b9006564e63a02418567e8334fc9f02677bc5ce4cdef8f8c22dfe3dc9ac755f9523de14ccfb9c975098be13c2327390feb36642f712b8d8ee25da385d8400de601545fdb90df493179f772d35ae696277ec8d6a99077e12560d5634933e5674c41e0481991e4567ef43ce08b6e1ca73298e17c8cd9837163c5f8ce17b67a8374f4d38a2f61a659dd8d90bd8052cbc065eb7a76523b5141e4e7611b19f4eb1da92217306cda3c2f6fd5e6fd1f64586e41a3e487420bfd2996293184591957b4ff140c406fb5254b258e9305baf21a7aa4ecabaa2c3ee840a9c281d1499de51e1060759421d09959723866c1dc114d846db0476b225e0e1f7a6366fa95f0aace57c9718035a180223db7168bfcfb30144e562b813508cedd414ce9c496c0277fab864a1d07c097b679448cda09dd54b7169334fde322c387797b4b24053cbfebedd2183c489fc0cb8957eab3e147986aaa5862ee9ca55ea834205b73be8dee9110b804d18b5f8a6c40097ef6898877acf921bafe1d9cda91e82432550257b64b177934f69a0f7f1105bddc21f72cc2d2f43132a87ddd59cb1c4aaf24879f98f8416ca20d5adf6a8c42b0bbae07b8866115281c55d3f5d7b223ba4e6515adc76f1a5109a13e76f7b68056a20f62261b06de86bec1120c2a88e9c96d65f66f0cfe313d85256bc060baa24b3c4555379a70ca327a6d3764cab0349fd029e7c19ceade0500b6d7a3b83d3218ad2c1c0b51d8f1bed502d5f81a5bc5a59e730c651da3c826e2b8b46fa79dbb1ea2e7c9edfd11b56c02dd75723df183acd06a85de2337bf9a5aeba5598443ba9bbc7cc1d87dbd0a70dc1634b209f6527135e4433ecd5113babdd7d4d6a7902d9c089eb3788e0518dd04f9af6aef169f1ffd5b8140de60ff2702f7cdd7665fab64156e782980b6364ddd6477c58d0e03636151fa372aa8e458910e494d269b4513bd727f7e35c0671a335badc2b08fed282404e1fd1fc2b2f56035f7b84c56a650aad9d33254fa080bdd867ac1e86b7c7924c9b5dca9900ba210ee32b855f8067a86fdc8b22f62d9bba3e750bd0255920356463a304543a2e162d73763843a861b9cef8e302fde8eb29c52c2c4cd5e66639cf63573b040ecfe0f44b80b334fda68bb496516dfb28063c11ef79ca041604cffec85bf0c0d822af024be0ecbb029fa6eac8bc35290e807058d39a3690ea72196527d7ca6c5768c0101b7c4d447ad790d22df73431ba74f3bf2e093a3e8ed1760af5eeaf8299b52ea0cba3721685b1bf9f728d5f7f4f42414e61a815eefcaf6982aab28057e984e8a160448810665ee1742a98291d4f147372db3a7e55abba0877c005e0f46787bfbcebb383f00996c1ead8d599a08e46df38dd2d25a348ad8b5ad21897d7c734cf27785f9e2fe1958ab1be678afadd13e5a9ecb9c837242b59f1e8d61ba70cf8bb90eb6bb3945064db16dfec0916a7bbf4746dd1f15a7f4d480b29d55af4a3f9853dad9ca8b5db518730f2c507a8ec7abcf2140e2842d1937cea1b8620510e015892cdf5847428c9c924514102fc64ffc98278988cf004ffa14467e28be20a5f8bddd30f1e09b17444db25dcf45a8844b8ee709d210a9fd4bec0997ed270b3299f7f05288316ef78fff2a9d4c0cad859e305f7ef828b5052b867fc55c0db79f4f0fca3faec5198b77635a0318d51fff7454ced80e3ee3879bc26a7166d3b58fbf2f1c045b4812e6c43f4ae48e6328237d759b399a5ece1086b79ffe6bca893fe755b1554921f59890472dd6b24fa3ba40b17a3d12f7e6517aaa955311218406624ca3ebe227d885f0380e8cb322218b02d766d1774b266d3a52935b1e83445fdbe53f0f2975cc08afbe63e4e25fa7461d1edeacb22607d6d9e228ebd5e07630e899f1e996da9a9790358753e7d4eedc940ce9e9d1bde955e2e2cc755953c2b7b2d3df9b1db3552bece9a2869e074cd3324b80a1fe40570eb44a83260e0032a6839046e23d21fb02a8955120779fb77ef3b8ef9cf2d991abe76c84e999598ec885c2ee6e4aa852af73d8024327ecf5be94dc497da8ad7c4b11d9d0c6b9ee5b9bf0761c83ac55ec5c94cea1edc4728af4cba20fafa844252a47739e25dcb7fe7b0d8a2fd26b02a9ea0a8de075f650cebd44dd7042b428fcec30bae255dc20e7f24456b5b2ce295dd478cd4417f4e622db4d9ff04bd14ce3791d7c386c9c099a9d76c1829f0077d4827bd7dffce52777a25369b811595df0a4be4cefed625ec2f43884a4c88fb04f5071f5d8a19b73b1b48b77558e7d091d4036beb2e90e58946a8592c3a52326b4371740e19d16b3cf81fef9b0feb0c5a829bc9f870825d836d5371d154b2d5bf57f71b366d3909cd7de75b4d129766a3b32c14a5dc335887fdcf8208847e445663e3e3c7095096fa98b60bd5c772d4af85cc3ca462af14892ee7c720d3b6e33c4b088d427a01c5262a71ad77ffea4464328489e668f04dfb524fcbbf497d1073bb5297210ea328a3d9cbb5d0927fb1017d5608a533c73ade01dcd1f1d1f17cda4744f9abdfb3aec105c57033ec3e1b1b0f9a6d34ebafbaa75e1fa59945b83e423b7b85860c6dfb42d181301fb2cedde986b4a1", @ANYRES16=r7, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES64=r8, @ANYRESOCT=0x0, @ANYPTR, @ANYPTR64, @ANYRESHEX=r9, @ANYRESDEC, @ANYRES32=r1], @ANYPTR=&(0x7f0000001280)=ANY=[@ANYRESDEC=r10, @ANYRES64=r3, @ANYBLOB="baed134d862528a4ea577b64861cbbd0cbf84cf102ccb705c82da3f2f8349a0da78fda01e781adfa5bff99bc140332ea518cb927cce6cb159c5b55eac9b542fdf4697d6cc19f1aac60f9896024e552ae11557f08a63c069fff5fbf7a2a80cabdef573ae1b6d5530017e28db2b8", @ANYPTR64, @ANYBLOB="50a170638ade7f4e26533bc2cba996670a5a277871f4fea90eb66aceadfac0711416ed6e", @ANYPTR]], @ANYBLOB=',default_permissions,\x00']) 20:06:37 executing program 5: r0 = creat(&(0x7f0000001280)='./bus\x00', 0x1) fcntl$setstatus(r0, 0x4, 0x4000) kcmp(0x0, 0x0, 0x0, r0, 0xffffffffffffffff) io_setup(0x2, &(0x7f0000000100)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) epoll_wait(r3, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x101) fallocate(r2, 0x0, 0x0, 0x8020001) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') accept4$rose(r4, 0x0, &(0x7f0000000240), 0x0) getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r4, 0x10f, 0x84, &(0x7f0000000140), &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r6, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$rose(r6, 0x104, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 20:06:37 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) sendfile(r1, r0, 0x0, 0x200086) 20:06:37 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 236.742050] Bluetooth: hci0 command 0x1003 tx timeout [ 236.748087] Bluetooth: hci0 sending frame failed (-49) [ 238.821789] Bluetooth: hci0 command 0x1001 tx timeout [ 238.827802] Bluetooth: hci0 sending frame failed (-49) [ 240.901534] Bluetooth: hci0 command 0x1009 tx timeout 20:06:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000002280)=""/4100, 0x1004) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000001c0)) getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) accept4(r1, 0x0, &(0x7f00000000c0), 0x1800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r5}, 0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:06:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTAT(r0, &(0x7f0000000240)=ANY=[], 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0}, &(0x7f0000cab000)=0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe97}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000300)=0xc) setreuid(0x0, r3) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setreuid(0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000280)={'wg2\x00', {0x2, 0x4e23, @broadcast}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000300)=0xc) setreuid(0x0, r6) mount$bpf(0x0, 0x0, &(0x7f0000000200)='bpf\x00', 0x1000000, &(0x7f0000000600)=ANY=[@ANYBLOB='mode=00000000000000000152314,uid<', @ANYRESDEC=r3, @ANYBLOB="01797e3e2d645b9c4133c10f373a62a2f2f9ce440ad6dfd4e746e0c0727a01ef7c96ef2b5fa7b42149404e13497eeb8dd92d8c363b0056d2278288bc74424386b8a9fe0767c9b76b4e37c626af60c9077122abb48e6000da3c6d640000008beb6dcab936de02301f8aad37ccd553edc225a379defa92e93f41674bdbdb224b6645c7d9c0cd19de02dc75e163d5895a24b6c028f5b3bf642b", @ANYRESDEC, @ANYBLOB="2c9e128998fc354e", @ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB=',measure,obj_type=/selinux/enfqrce\x00,defcontext=staff_u,\x00']) 20:06:47 executing program 5: r0 = creat(&(0x7f0000001280)='./bus\x00', 0x1) fcntl$setstatus(r0, 0x4, 0x4000) kcmp(0x0, 0x0, 0x0, r0, 0xffffffffffffffff) io_setup(0x2, &(0x7f0000000100)=0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) epoll_wait(r3, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x101) fallocate(r2, 0x0, 0x0, 0x8020001) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') accept4$rose(r4, 0x0, &(0x7f0000000240), 0x0) getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r4, 0x10f, 0x84, &(0x7f0000000140), &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r6, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$rose(r6, 0x104, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00, 0x600}]) 20:06:47 executing program 0: clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={'ip6_vti0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, r4, 0xf01, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0f080000", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf250d00000008000500010000001800028014000100ac14142100000000000000000000000008000600a1090000"], 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x48004) open(0x0, 0x0, 0x0) 20:06:47 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) sendfile(r1, r0, 0x0, 0x200086) 20:06:47 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:06:47 executing program 0: pipe2(&(0x7f0000000100), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000001300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000013c0)=ANY=[@ANYBLOB="68000000010a010300000000000000000a0004030c00044000000000000000010901010073797a30000000000c0004400000009dbece23185cc6a0dfe7055171efc69e0000004326e3372800050c00044000000000000000020c00044000000000000000010c0004a0a35f0c50851e065377f0ebe05f72997aef755652b47dd36be1d3b73c51cb32d30f00652adccdbe6a9b9f85e9582d383ba12d075f32faf0d08fc606f190e6ad31211c13dcd79ab74c467a651a565ee8df97e14368cf1a19e10cfc2cfc3fe2bb9761"], 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x845) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000cfb7bd5fcf86947a25fb50450104", @ANYRES32=0x0, @ANYBLOB="000000a5fea087001c0012800b0001006d616373656300000c000280050009000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="48e70f2a8b8bf4e77d610d5128e4c2bb75800e8195b4bf7b59041da46c060d45dcab56bc7d48b4"], 0x4c}}, 0x4004) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r7, &(0x7f0000000280)=""/4096, 0x1000) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) tkill(r8, 0x20) r9 = syz_open_procfs(0x0, &(0x7f0000001380)='statm\x00') getdents64(r9, &(0x7f0000000280)=""/4096, 0x1000) ioctl$SIOCX25SCUDMATCHLEN(r9, 0x89e7, &(0x7f0000000000)={0x4e}) [ 245.048663] sctp: [Deprecated]: syz-executor.3 (pid 8162) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.048663] Use struct sctp_sack_info instead 20:06:47 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r2}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KIOCSOUND(r4, 0x4b2f, 0x862d) write$P9_RRENAME(r3, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="33000000180081ae08060c04000f000480207f03fe0200058701546f170003000800000000006596bc014e18bbdfede6efb408", 0x33}], 0x1, 0x0, 0x0, 0xf00}, 0x0) 20:06:47 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:06:47 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:06:47 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:06:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x8001a0, 0xe80, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a8ffffffff00000000122e25d386dd", 0x0, 0x3b, 0x0, 0x22d}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0xe1, 0x0, 0x0, 0x41100, 0xa, [], 0x0, 0x17, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0x2, 0x4, 0x8}, 0x10, 0xffffffffffffffff, r0}, 0x78) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) r5 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x10001, 0x201242) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000040)=[0x6, 0x0], 0x2, 0x80000, r4, r5}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000004c0)={r4}) accept4(r3, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f00000003c0)=0x80, 0x80000) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000040)) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000500)) [ 247.060756] Bluetooth: hci0 command 0x1003 tx timeout [ 247.066892] Bluetooth: hci0 sending frame failed (-49) [ 249.140531] Bluetooth: hci0 command 0x1001 tx timeout [ 249.145866] Bluetooth: hci0 sending frame failed (-49) [ 251.220302] Bluetooth: hci0 command 0x1009 tx timeout 20:06:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000002280)=""/4100, 0x1004) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000001c0)) getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) accept4(r1, 0x0, &(0x7f00000000c0), 0x1800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:06:57 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) sendfile(r1, r0, 0x0, 0x200086) 20:06:57 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000000)=0x3) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x8c220200, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03c50000000000006c00128009000100766c616e000000005c0002800600010014000000040003804c0003800c000100ffffffff090000000c0001007f000000020000000c00010002000000070000000c00010000000000030000000c00010009000000fc0200000c00010004000000fabffffd08000500", @ANYRES32=r4, @ANYBLOB="6650e756c283ec7d1feb5e885869ce7667c57b760e4af93c00d41b36ab806faeccc5f24a6728f5e7c186a453188d8783388c4c01c165f78de44ea6331c147aa2826f", @ANYRES32=r4, @ANYBLOB], 0x9c}}, 0x0) 20:06:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTAT(r0, &(0x7f0000000240)=ANY=[], 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0}, &(0x7f0000cab000)=0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe97}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000300)=0xc) setreuid(0x0, r3) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setreuid(0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000280)={'wg2\x00', {0x2, 0x4e23, @broadcast}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000300)=0xc) setreuid(0x0, r6) mount$bpf(0x0, 0x0, &(0x7f0000000200)='bpf\x00', 0x1000000, &(0x7f0000000600)=ANY=[@ANYBLOB='mode=00000000000000000152314,uid<', @ANYRESDEC=r3, @ANYBLOB="01797e3e2d645b9c4133c10f373a62a2f2f9ce440ad6dfd4e746e0c0727a01ef7c96ef2b5fa7b42149404e13497eeb8dd92d8c363b0056d2278288bc74424386b8a9fe0767c9b76b4e37c626af60c9077122abb48e6000da3c6d640000008beb6dcab936de02301f8aad37ccd553edc225a379defa92e93f41674bdbdb224b6645c7d9c0cd19de02dc75e163d5895a24b6c028f5b3bf642b", @ANYRESDEC, @ANYBLOB="2c9e128998fc354e", @ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB=',measure,obj_type=/selinux/enfqrce\x00,defcontext=staff_u,\x00']) 20:06:57 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:06:57 executing program 0: syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@uid={'uid'}}]}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000001400)={0xfff, 0x9, 0xfc, &(0x7f0000001300)="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"}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x2c, r3, 0xc694d42685586125, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x2c}}, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40000) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000001280)={0x3, [0x0, 0x0, 0x0]}) [ 255.211519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 255.283707] ISOFS: Unable to identify CD-ROM format. [ 255.331369] device vlan2 entered promiscuous mode 20:06:57 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) sendfile(r1, r0, 0x0, 0x200086) 20:06:57 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 255.477735] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 20:06:57 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 255.540738] device vlan2 entered promiscuous mode 20:06:57 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:06:57 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) sendfile(r1, r0, 0x0, 0x200086) 20:06:57 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 255.932185] ISOFS: Unable to identify CD-ROM format. [ 257.299666] Bluetooth: hci0 command 0x1003 tx timeout [ 257.305534] Bluetooth: hci0 sending frame failed (-49) [ 259.379544] Bluetooth: hci0 command 0x1001 tx timeout [ 259.384927] Bluetooth: hci0 sending frame failed (-49) [ 261.459255] Bluetooth: hci0 command 0x1009 tx timeout 20:07:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000002280)=""/4100, 0x1004) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000001c0)) getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) accept4(r1, 0x0, &(0x7f00000000c0), 0x1800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:07:07 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:07 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:07 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) sendfile(r1, r0, 0x0, 0x200086) 20:07:07 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="6d2989a8c919442abc16859144cfa58735c7b3", 0x13}], 0x1, 0x100) sendfile(r1, r0, 0x0, 0x200086) 20:07:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x640002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000000b030000000000000008000340000028a409000100242f4025000013000800024000"/48], 0x1}, 0x1, 0x0, 0x0, 0x8040002}, 0x0) 20:07:07 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007250000004007a2a30005000003", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@deltaction={0x1e4, 0x31, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdf}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xfba, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}]}]}, 0x1e4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@can_delroute={0x0, 0x19, 0x200, 0x70bd2d, 0x25dfdbfc, {0x1d, 0x1, 0x6}, [@CGW_DST_IF={0x0, 0xa, r7}, @CGW_FILTER={0x0, 0xb, {{0x4, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}}, @CGW_MOD_AND={0x0, 0x1, {{{0x1, 0x0, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "1179f08c501f7cfb"}, 0x2}}, @CGW_MOD_OR={0x0, 0x2, {{{0x1}, 0x2, 0x0, 0x0, 0x0, "3725e9ef44d6ebc1"}, 0x1}}, @CGW_DST_IF, @CGW_FILTER={0x0, 0xb, {{0x4}, {0x1, 0x0, 0x0, 0x1}}}]}, 0x34}}, 0x40011) 20:07:07 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:07 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x401) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x100000000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f00000005c0)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000340)='./file0\x00', 0x14107e, 0x145) write$binfmt_aout(r5, &(0x7f0000000800)=ANY=[@ANYBLOB="a4bca4dddf9ce544fb925d7db99eef2e1259ffac68c378518b2987010000001a3ed6dfa983d16a01eb010001000000000097ce4b29ef3a71de3e0553cd80fcfe397cb18bb9923878673c8f65cc207d650978a5183d2600d3d2a6b2a3a4bea14bf4a2b781029c6ad93bad9cd9d8a4b14b361ce3683b380463dce798e6ced7b1501464d8d2452d95dd8223fc4b570975d001b45222d337e5e09e7b37ee5ce7abc079af2fc048e2e4d46c7620f39aca4ef8d941c615a2c271107d65b5224d18ffcd8a1d00"], 0xc3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040854, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYRES32=0x0], &(0x7f0000a8a000)=0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, &(0x7f000059aff8), 0x0) recvmsg(r4, &(0x7f0000000240)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000400)=""/230, 0xe6}], 0x1, &(0x7f0000000700)=""/238, 0xee}, 0x1) sendfile(r5, r5, &(0x7f00000001c0), 0x8080fffffffe) 20:07:07 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 265.923729] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 970769) [ 265.932593] FAT-fs (loop0): Filesystem has been set read-only [ 265.938806] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 970769) [ 267.538532] Bluetooth: hci0 command 0x1003 tx timeout [ 267.543929] Bluetooth: hci0 sending frame failed (-49) [ 269.618327] Bluetooth: hci0 command 0x1001 tx timeout [ 269.623635] Bluetooth: hci0 sending frame failed (-49) [ 271.698224] Bluetooth: hci0 command 0x1009 tx timeout [ 274.339779] NOHZ: local_softirq_pending 08 20:07:17 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000200)={0x0, &(0x7f0000001280)=""/173}) getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) r3 = accept$inet(r2, &(0x7f0000000180)={0x2, 0x0, @empty}, &(0x7f00000001c0)=0x10) r4 = dup3(r3, r3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0xac, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x7c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3bf}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0xac}}, 0x0) 20:07:17 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) close(0xffffffffffffffff) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) sendfile(0xffffffffffffffff, r0, 0x0, 0x200086) 20:07:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000002280)=""/4100, 0x1004) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000001c0)) getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) accept4(r1, 0x0, &(0x7f00000000c0), 0x1800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:07:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r2 = socket(0x28, 0x5, 0x10001) sendfile(r2, r1, &(0x7f0000000000)=0x12c, 0xddf5) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="602100003e77b2895e9051e7b5156b3f7beea08aa448142b175a715c2985ca494a2d75084fe077c908900b035121ebc3b952014065a49ec23b4c702f6aea3c800badce35114fc11da1526fddce697635364e4638cb73ac96c889fa8818a0c97ab4f91d3894af8b7c243a811a211cfffcab0a8127d55400b50fd2ee42a28e7cdaac01970400000099c2ec0e68399af4c1300dffc499302da9e1701c1604eef146b45f", @ANYRES16=r3, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x24000080}, 0x4044005) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84000810}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="c420f501", @ANYRES16=r3, @ANYBLOB="000125bd7000fbdbdf256b00000008000100010000000a001a00ffffffffffff0000080001000000000008000100040000000a0006000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4400}, 0x4004) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000001280)={0x72, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000012c0)={0x80000001, r5}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r6, &(0x7f0000000280)=""/4096, 0x1000) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) r7 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000ac00e0a1f000008001008000800080012000000", 0x24}], 0x1}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r8, &(0x7f0000000280)=""/4096, 0x1000) ioctl$ASHMEM_SET_PROT_MASK(r8, 0x40087705, &(0x7f0000000040)={0x1643, 0x80}) 20:07:17 executing program 0: setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000001280)='./file0\x00', 0x2, 0x108) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x400, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000100)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x210000, 0x10) syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24040811) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xaf93010e, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff0000268f00872d2b0100caec", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a0036459cdb26cd03ccb7e638a66c866a951362d3fa985503f8f45bfb4e9240b985dda11bde27881f17233d3ad01f2177b1a53e51397d581d1549a05c1955f5d2a27a54f154dfab0a4d6a66872083c18972c13e068508685eb082db85be8bcf0074dd91f31c0bc042060d00"/148, @ANYRES32, @ANYBLOB="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"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000440)) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007250000004007a2a30005000003", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=@newtaction={0x43ec, 0x30, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [{0x584, 0x1, [@m_skbedit={0x70, 0x8, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x800, 0x10000000, 0x9, 0x8}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x9}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x7, 0x5, 0x6, 0x38}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x9}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x11, 0x6, "0001ec930c2916f5db9d263a7e"}}}, @m_simple={0x110, 0xa, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x0, 0x2, 0x5a, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x4, 0x6, 0xca, 0x2}}]}, {0xca, 0x6, "4978ac65eaf5afadc698d75ac98092bd55441c9affd1e9f8ca014b2fe5e40a70fb880081e3ba562fa9169cf1374902006fd8d4a33319523b62bd0fd409312d3d90ad5162cc0c632e6d7c8dee21d6c3d9a0f2d181cae858d1e804aef3d728e05f4996f23ca00d8470dc7f5e357a0a39903a377c54f123de4ab82dcffb5fe62fbd40de4cefa3dfabe35f4ca0c12ac1b56b4a0e2f9f1fc032d1f02136332fa13fabb0f156cd1dd457959548388e24bd544f413f1418db190659e8a21802a89c8b71d14267c62cc2"}}}, @m_ipt={0x310, 0x3, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x2bc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa9, 0x6, {0x80, 'security\x00', 0x6, 0x2, "8414c69389dbb218efe08647f85e23751727dae8aab78d5edc08f67bd89945a05407ef81829bc0b4fff2a0f05d833c82d2ae8ed0d47bcd967ebacdcee38c185a91710e384e35be1e4598016a380a10cb950528d012cfe4311a90cfd82e2ea6fab79d470855e9d2350fd53f0bcd9a37d3982ff8013380d4f2ac0e41d28febf3"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10000}, @TCA_IPT_INDEX={0x8, 0x3, 0x7fffffff}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x6}, @TCA_IPT_TARG={0xd7, 0x6, {0x400, 'filter\x00', 0x2, 0x4, "2e39ed21c7491e53d0b6674ea6993ff4c632a8811385f20dfaa966ddb9956899e64916c5476f5e5d0b206ea7b992d21a056e52d52fdb075157d0e1e90f92e5ca9c82a70b3c1a476df05f1e889f4a0a068454f85f10092350f1dd8655b4985ad8629499af8330a9a18bc646a45dd726834be2eebfe16ed44e4739501d537453f980f76db98058cbebfbc4a4974f65568297401d9efc59ad38dca47d9ceaa17d49fed9c96ea89cab01e6ce9f627f"}}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0xdf, 0x6, {0x7, 'raw\x00', 0xff, 0x20, "3cba02a12a05f868b8383debc138736ca887d02645b8b363f31d7ac04d5ab4df9278c970938740093c82d71ebe9818bc93653ae74b5c771579a4309d0598c25900e2dd01329e166c80fdc4288c61f09fcbfb8a63d311ebd5500fe4d93db7ea442aa8384745c9a8626509991f12766b7cd659b1934dd65f740c630ba9910380d340ddb0ba213218f043cb3e04c13fa15e9cb826240cde3d9b7812b2bfdb62afc9bd7ac51c78b0b4f500f198824a4fa5e8bc2eaf2871"}}, @TCA_IPT_HOOK={0x8}]}, {0x48, 0x6, "e7709004ec3d941f5f75d676bc8730eb9e7af56393b6243496e39331dc78f397f922981f6ac3b08b2d84818f5462723be92871f51505bebc3284078c1e42ab5b7ac4b8e3"}}}, @m_ife={0xf0, 0x2, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x1000, 0x20000000, 0x3, 0x8}}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={[], 0x37}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x100}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x0, 0x81, 0x100}}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0x3ff}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xfffffff8}, @IFE_META_PRIO={0x8, 0x3, @val=0x3}]}]}, {0x45, 0x6, "0684020fbe945e1507923670f37355739dd974257469e9e574d3cbf98ebb47a29a6c5216f3ca25ec2c88f586cb1730d784d90c036bd424df9396a4db713171640d"}}}]}, {0x5f0, 0x1, [@m_skbedit={0x38, 0x16, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x40, 0x4, 0x3ff, 0xffffffff}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x4}}}, @m_ctinfo={0x7c, 0x4, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x80}]}, {0x5f, 0x6, "b04d8b7a0cfe6b185addb4bfefccc2f2af99cdb526bd98999b7319b5fe1e8cdce4ae1008ee35bc7d0a7bd4ddfe8aab71abc95a43823f80fe428aaf5f05435d6454866a12976d59740ff1db05fe7e611a0e36cdb82d23968bf53956"}}}, @m_simple={0xa4, 0x1b, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x84, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0x80, 0x6, 0x80, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x7fffffff, 0x2, 0x80000000, 0x8}}, @TCA_DEF_DATA={0x9, 0x3, 'fd/3\x00'}, @TCA_DEF_DATA={0x7, 0x3, '[\\\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x4, 0x1, 0x8, 0x5}}, @TCA_DEF_DATA={0xc, 0x3, 'batadv0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x80000000, 0x8, 0x2, 0x6, 0x11}}]}, {0x10, 0x6, "0d50431317b3b553a81e15f8"}}}, @m_mpls={0x10c, 0x12, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xb9bfc}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_TTL={0x5, 0x7, 0x20}]}, {0xd0, 0x6, "5c55c8f8ea28872ced4b09890957163e535d22a3056a46f42c0607d793025566e42bbf1f7393f949676144412b5445eddea8ead77a1b0ef8ad802f38a7fc0392c88d90cb75e556d21f3f15a7e2d691565df82e706491472b44eea13c87cd12e370744cd647b8e72e07b72434fb3b68a6ed7ebad70e28e245a0832863ac77b543bacacc79c5d78c60354423120aece7e2f2cd368413459d744a5b6b3f9902a27533028cdbafcf0278fc1f92edda1b3ce361f668323bc7935ae8e32b94283570883a588918990837728a2560bf"}}}, @m_mpls={0x13c, 0x0, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x7, 0xffffffffffffffff, 0x8, 0x5}, 0x4}}]}, {0xfb, 0x6, "5541e209a20bf955cc49c5d8201348619d03e16846bb05f51fde3a14f434ad55301104c53c3f43ccd6c5f1b638eb6c16fb1a51835de0357b04605718329f2838cf5a65c4fb44142643f0a08c2ab15c94fb1c3c659bfa5f6f99a018925c5e01dc82cc6937e7c36abdbf8bc899e84ce88e527613546e0a77fdfc00da76612a07690981cf117dd85601a7538096d4e812347a40e262fc6168cda0c70abcbd306458c43b7896ab18be97edaaa597a6ce21220d11a3e5721a7dd6020754e0df5267173df6d9fb30dd36b225ce74754752def584f3f3f45e31afbadd4f81f249c846a93abac58b98b69aff3b5e9bda86a50a87e3b32ddc15dcf7"}}}, @m_bpf={0x11c, 0x1e, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0xa8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x8, 0xff, 0x4, 0xfffffff9}, {0x0, 0x69, 0x8}, {0x81, 0x6, 0x37, 0x80000000}, {0x1, 0x0, 0x3, 0x1}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x7f, 0x3, 0x1f, 0xfffffffb}, {0x6, 0x3f, 0x80, 0x3}, {0x0, 0xe0, 0x0, 0x2}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0xb889, 0x2a, 0x8, 0x81}, {0x4, 0x3, 0x7, 0x6}, {0x400, 0x20, 0x75, 0xffffff31}, {0x401, 0x81, 0x7f, 0x3}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x67, 0x6, "abb646b8ac3d834fb2dc6d91ada99cf56c5138ef6cd9f9f14ecd9b834165cbea92e51c789eaceca57db522df91a306e9bcc7da1bb501596511f72f53c9bb578ffe7168ae40fe147978ffd002a6da91700abff6c684f463a15cf0d7c31feece8174b922"}}}, @m_simple={0x130, 0x3, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'fd/3\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffe, 0xffff, 0x4, 0x3f, 0x7}}, @TCA_DEF_DATA={0x9, 0x3, 'fd/3\x00'}, @TCA_DEF_DATA={0xf, 0x3, '.mime_type\x00'}, @TCA_DEF_DATA={0x4}, @TCA_DEF_DATA={0x9, 0x3, 'bdev\x00'}]}, {0xcb, 0x6, "6c6a78670e40b4e37d3c50244962fedd1d7e60e1b7665f64dceee2bf230e2b85800834217b3d2a8b9b738ed7f2ca6d06408b50dcc54f7287708acf1a3545eeb1c6ddd7a25f1a30189ebd5a4b28f91946b6821747170af4bc645144da85b1d163ae4b12ec74648dde931f92abd69a4212b900348a374383806b56cda9f48fad02894ee85e8135f58173c5c0b52f5988fad0678cce1950666b4fab73f04845a3e3fd7968f1661e0c7ae7e2b72db7226ee3f5de88910587279080266b8ed76d20a2a7877f623139a8"}}}]}, {0x254, 0x1, [@m_gact={0x94, 0xc, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1adb}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x52f, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x1ff, 0x1a7e7c4cc4e603eb, 0x3, 0x72f0}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x117a, 0x5}}]}, {0x43, 0x6, "11baf5110d5529da93111e711ad9ab02830d6994e4b86223305a26de3fa82e4a7011304680aafbf2a2d7d95bc4d68d7f8fe0eb8d5cd7907be570c498e8c376"}}}, @m_nat={0x1bc, 0xa, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x5, 0x1, 0x5, 0x3}, @dev={0xac, 0x14, 0x14, 0x26}, @remote, 0x611d515586164a06, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x8, 0x3, 0x800, 0xfffff57d}, @multicast1, @dev={0xac, 0x14, 0x14, 0x22}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1000, 0x40, 0x6, 0x24, 0x8}, @local, @dev={0xac, 0x14, 0x14, 0x11}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x4, 0x4, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfffffffe, 0x3, 0x3, 0x1}, @local, @multicast1, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x3, 0x8, 0x6}, @loopback, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x7, 0x1000000f, 0x1, 0x1}, @rand_addr=0xfffffffe, @broadcast, 0xff000000, 0x1}}]}, {0x94, 0x6, "1ec1b7ba03a8a03dbbbe012597bf4aa6bc0a0ebdc4a49df3669ee920f4ba6293d585e73a20b58d26366a9c326263c3115bfa029e1188fab38b506ad504d9c5225e3181e26573ddc5777f0a1e77b99f2d233c50a99c6c65fa2c300a9d6a8a899d2d826a5776bf8deb09db02112a117f674e22efb9af839de553a61378fdb08c093041cf6b747fda5fea3597309b2a2a72"}}}]}, {0x3374, 0x1, [@m_simple={0x140, 0x1b, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, ',^\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffff7, 0xff, 0x8, 0x400, 0x3}}, @TCA_DEF_DATA={0xa, 0x3, 'em1-\\\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x39d2, 0x844, 0x5, 0x200, 0x3}}, @TCA_DEF_DATA={0x1e, 0x3, '[vmnet1securityB\xf2vboxnet1\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x200, 0x0, 0x7, 0x3, 0x2}}, @TCA_DEF_DATA={0x7, 0x3, '-)\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x95, 0x6, "f6340236d0392a04af42975a685bd37b144be0b98fd2abe2362ebac7f860977db802eb16c322cd6882fbe70aa9484aeb3589c7441b3184b5ccd305ce04d7ce2ae213d33876b62daee070cf0aeb94285aa478cc4ea616e1dd7beeb6409c8cc1005d38d768699b92767509234aa256e37839f79b67b7c0af25a874822ebd2f31e711fa574fbcd08418835fffa4f63a06788b"}}}, @m_police={0x2f38, 0x14, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x2e34, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xb4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x80000001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0x920, 0x7, 0x2, {0x7, 0x1, 0x2, 0x3ff, 0x5, 0xd5}, {0x0, 0x2, 0x7, 0xfca, 0x5, 0xb5}, 0x4, 0x6, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fff, 0x9, 0x4, 0x9, 0x148, 0x800, 0x80, 0x4, 0x1000, 0x6, 0x1f, 0x6, 0x2, 0x8d6, 0x8, 0x0, 0x8, 0x6, 0x1, 0xfffffe00, 0x2, 0xff, 0x7, 0x8, 0x7, 0x0, 0x6, 0x622, 0x7f, 0x5e38f3d3, 0x401, 0xa0d, 0x0, 0x4, 0x8, 0x1000, 0x6, 0xbc0, 0x80, 0x2, 0x4, 0x6e6a, 0x8001, 0x273, 0x3f, 0xfffffffa, 0x0, 0x400, 0x8, 0x1, 0x1f, 0x4, 0xffff, 0x8, 0xfffffffd, 0x7, 0xfffffff8, 0x7, 0x7ff, 0xffff8000, 0x5, 0x954f, 0xffffff4c, 0xf533, 0x6, 0x3, 0xc57, 0x3f, 0x7, 0x7fffffff, 0xff, 0x4, 0x0, 0x7fffffff, 0x5, 0x200, 0x1, 0xda5, 0x7ff, 0x3, 0x7499a02d, 0x7, 0xfff, 0x7ff, 0x7, 0xf12, 0x7, 0xffe00000, 0xfffffff8, 0x1, 0x7f, 0x5, 0x4, 0x6, 0xfffff800, 0x4, 0x100, 0xfff, 0x10d, 0x3, 0x7fffffff, 0x9, 0x7f, 0x0, 0x7ff, 0x7, 0x38, 0x4, 0x10000, 0x7, 0x9, 0x80000000, 0x304, 0x9, 0x0, 0x0, 0x3, 0x9, 0xa9, 0x0, 0x20, 0x5, 0x2, 0x5, 0x40400000, 0x2, 0x9, 0x9, 0x9, 0x6, 0x8, 0x7f, 0x7, 0x1, 0x9, 0x68, 0x1000, 0x7ff, 0x7726, 0x9, 0x5, 0xfffffffe, 0x3, 0x2, 0x2, 0x3, 0x5b, 0x20, 0x4, 0x9, 0x7, 0xb01, 0x708, 0x3, 0x231c, 0xb232, 0xffffffff, 0x5, 0x2, 0x2, 0x1000, 0x7f, 0x6, 0x5, 0x1, 0x47, 0x1000, 0x0, 0xfff, 0x6, 0x7, 0x7ff, 0x4, 0x5, 0x10000, 0xffffffff, 0xbe7f, 0x4, 0x9d, 0x4, 0x3, 0x4, 0x2, 0xe8, 0xfff, 0x7, 0x8f66, 0x3, 0x7fff, 0xce7, 0x27120000, 0x7, 0x6, 0x3, 0x40, 0x8000, 0x3, 0x2, 0xf5d, 0xffffffff, 0x6, 0x1ff, 0xffff, 0x100, 0x8aae, 0x80, 0x371, 0x1edb20d9, 0x1, 0x6, 0x7f, 0x80000000, 0xa8f, 0x10001, 0x3, 0x0, 0x100, 0xffffffff, 0x6726, 0x8, 0x620, 0xfd1, 0x83f4, 0x3, 0x4, 0x8001, 0x9, 0xa738, 0x8, 0xffff, 0x7c, 0x8, 0x2ad, 0xfffffff0, 0x0, 0x3d2b695c, 0x1ff, 0x5, 0xac3, 0x5, 0x1, 0xfffffffa, 0x7fffffff, 0xf1, 0xdf, 0xbca, 0x51, 0x3, 0x4, 0x2, 0x8000, 0x101, 0x10001, 0x1, 0x3, 0x364]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x7ff, 0x0, 0x7, 0x2, 0x77, 0x1, 0x3, 0x7ff, 0x9, 0x0, 0x8001, 0x80, 0x1, 0x2, 0x3, 0xa2e4, 0x5, 0xad, 0x9, 0x8f0, 0x77, 0x2, 0x1f, 0x0, 0x5, 0x7, 0x27c4, 0x2, 0x1, 0x5, 0x100, 0x9, 0x0, 0x7, 0x9, 0xffffffff, 0x7, 0x6, 0x200, 0x4, 0x729, 0x8, 0x80000001, 0x8, 0x9, 0xffff, 0x5, 0x7, 0x1, 0x7, 0x7, 0x9, 0x1, 0x400, 0x0, 0x80000000, 0x3, 0x1, 0x0, 0x7, 0x4, 0x1, 0x9, 0x5, 0x8, 0x5, 0x1ff, 0x4, 0x61, 0x6000, 0x0, 0x0, 0x3, 0x44, 0x4, 0x3, 0x38d3, 0x8, 0x8000, 0x1, 0x5, 0x1, 0x3, 0xa1e, 0x3, 0x9, 0x5, 0x7fffffff, 0x7f, 0x4, 0x8, 0xec64, 0x6, 0x0, 0x5, 0x4c9c, 0x4, 0x9, 0x7fff, 0x0, 0x4, 0xff, 0x9, 0x4, 0x7f94, 0x5, 0x8c0c, 0x5, 0x3ff, 0x40b3, 0x2, 0x0, 0xffffffe0, 0x1, 0x4, 0x5, 0x0, 0x0, 0x5, 0x83c9, 0x5, 0x6, 0x6, 0x6, 0xfff00000, 0x1, 0x1, 0x100, 0x0, 0x0, 0x101, 0x200, 0x4, 0x5, 0x98, 0x5, 0x8, 0x2f, 0x1, 0x5a5b7c6d, 0x1, 0x4, 0x6a87, 0x1000, 0x4, 0x6, 0xaf16, 0x5, 0x9, 0x1f, 0xad2c, 0x800, 0x81, 0x3f, 0x41, 0x9, 0x3, 0x8, 0x26, 0x9, 0xf4, 0x890, 0x3f, 0x9, 0x7, 0x2, 0x9, 0x3, 0xfff, 0x489, 0x4, 0xfffffffc, 0xffffffff, 0x9, 0x400, 0xff, 0x200, 0xffff, 0x0, 0x6, 0x9, 0x55, 0x5, 0x1000, 0x7ff, 0xfffffcf0, 0xf97, 0x101, 0x0, 0x0, 0x80000001, 0xff, 0x7, 0x0, 0x40, 0xffffffff, 0x4, 0x100, 0x1, 0x8, 0x7, 0xfffff9e4, 0x4, 0x7, 0x14, 0x1, 0x9, 0x1, 0x9, 0x3, 0x1000, 0x6, 0x0, 0x9, 0x81, 0x4, 0x8, 0xb, 0x1, 0xfffffffd, 0x0, 0x101, 0x7fff, 0x7, 0x0, 0x1, 0x9, 0x2, 0x2, 0x4, 0x101, 0xfff, 0xe10, 0xfffffa2b, 0x5, 0x9, 0x2, 0x641f4abe, 0x8455, 0x7, 0x10000, 0xe3, 0xec8c, 0x10000, 0x1ff, 0x8000, 0x2, 0x4, 0x22, 0x5, 0x5, 0x2, 0x5, 0x5, 0xfff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x3, 0x7fff, 0xfff, 0x200, 0x1, 0x94, 0x7ffc, 0x1, 0x3f, 0x8, 0x7fd4, 0x2, 0x8, 0xdb7, 0x52d, 0x0, 0x5, 0x5, 0x7, 0x1, 0xfffffffb, 0x2, 0x100, 0x80000000, 0x8, 0x3f, 0x10000, 0x80000001, 0x6, 0xf697, 0x1f, 0x101, 0x3, 0x5, 0x5, 0x8, 0x3, 0x10000, 0x7, 0x5, 0x8, 0x1ff, 0x6, 0x800, 0xfffffffb, 0xe9a2, 0x2f30cc71, 0x6, 0x7fffffff, 0x2, 0x8, 0x14, 0x3, 0x900, 0xffff, 0x2, 0x7, 0x8, 0x7, 0xd037, 0x401, 0x100, 0xffffffff, 0x9, 0x3, 0x7, 0xbe, 0x8, 0x1ff, 0x2, 0x385, 0x4, 0x3f, 0x3f, 0x7, 0x6, 0x7, 0x8, 0x290, 0x7, 0x1, 0x6, 0x138, 0xfffffffd, 0x5, 0x81, 0x7, 0x4, 0x2, 0xff, 0x1f, 0x2, 0x7ff, 0x7, 0x5, 0xfffffff9, 0x4, 0x4, 0x2, 0x22, 0xdd, 0x0, 0x7, 0xd73, 0x4, 0x6, 0x2, 0x0, 0x10000, 0xf770, 0x80000000, 0x4d8, 0x2, 0xed7d, 0x10000, 0x7, 0x1a82, 0x4, 0x0, 0x2, 0x6, 0xffff, 0x7, 0xffff, 0x35, 0x4, 0x4, 0x76098148, 0x6, 0xae52, 0x6, 0x3, 0x8, 0x3, 0x8, 0x2, 0x1, 0x2, 0x5, 0xffffffc1, 0x401, 0x0, 0x8001, 0x2, 0x9, 0x6, 0x81, 0x800, 0x4, 0xff3f, 0x1, 0x15, 0x8, 0x99, 0x768, 0x0, 0xc61, 0x1, 0x4, 0x7, 0x5, 0x9, 0x1, 0x3, 0x0, 0xfff, 0xe143, 0xc5, 0xfffffffe, 0x7ff, 0x7fffffff, 0x5, 0xaad, 0x3, 0x3, 0x3f, 0x6, 0x4, 0x4, 0xfff, 0xfff, 0x1, 0x2, 0xa6ed, 0x8, 0x9, 0x20, 0x9, 0x7, 0x400, 0x8001, 0x5, 0xfffffbff, 0x9d, 0x1, 0x6, 0x0, 0x9f48, 0x100, 0xa9ef, 0x7, 0x8001, 0x8, 0x3ff, 0x1, 0x7, 0x8, 0x4, 0x3, 0x2, 0xed, 0x3ff, 0x2, 0x3f, 0x9, 0x3, 0xffffffff, 0x7ff, 0x3ff, 0x3, 0x161, 0x8, 0x2cf, 0x653, 0x20, 0x9, 0x9, 0x2, 0x101, 0x81, 0xffff, 0x1f, 0x3f, 0x5, 0x2, 0x4, 0x4, 0xa66a, 0x4b, 0x2, 0x2, 0xfffffffc, 0x400, 0x9, 0xacc, 0x7fffffff, 0x3f, 0x2, 0x3, 0x0, 0x3, 0x42, 0x61e, 0x80000000, 0x4]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000000, 0x0, 0x51, 0x4, 0x800, 0x1, 0x0, 0x3af, 0x8000, 0x2, 0x3, 0x3, 0x5, 0x7, 0x1, 0x8, 0x2, 0xfffff71b, 0x400, 0xa9, 0x893, 0xfffffffb, 0x7ff, 0x5, 0x0, 0x9, 0x67, 0x200, 0x7ff, 0xa3, 0x9, 0x3, 0x2, 0x4, 0x5e09, 0x7ff, 0x8, 0x5, 0xe, 0x1, 0x7, 0x0, 0x0, 0x1ff, 0x2, 0x9, 0x5, 0x7, 0x6, 0x0, 0xffff, 0x9, 0x4, 0x6, 0x5, 0x1, 0x1ff, 0x4, 0x3f3a, 0x9, 0x10000, 0x7fffffff, 0xc5d4, 0x192f6200, 0x3ff, 0x4, 0x0, 0x2, 0x5, 0x5, 0x6, 0x9, 0x8, 0x8103, 0x6, 0x2, 0x0, 0xd1e, 0x6, 0xded6, 0x3763, 0x2, 0x7fffffff, 0x1, 0x8, 0x0, 0x800, 0x0, 0x5, 0x9, 0x0, 0x7, 0x2, 0x86, 0xfffff668, 0x80, 0x80000000, 0x5, 0x7, 0xfffffffb, 0xcf, 0xb203, 0x8, 0x120f, 0x240, 0x7, 0x7fff, 0x5757, 0x80000001, 0x6, 0x81, 0xffffffff, 0x1, 0x8, 0x7fffffff, 0x0, 0x2, 0x1, 0x209d, 0x4, 0x3f2, 0x2, 0x20, 0x7, 0x4, 0xffffff31, 0x5, 0x8, 0xfffff000, 0x4, 0xff, 0xff, 0xfffffffe, 0x1, 0x5, 0x4, 0x4, 0x1ff, 0x8000, 0x7fffffff, 0x7fffffff, 0x0, 0x400, 0x8001, 0x9, 0x8825, 0x3800000, 0x100, 0x7fffffff, 0x3, 0x80, 0x7, 0x5fee58a5, 0x100, 0x1, 0x4, 0x0, 0x1, 0x5, 0x1, 0x3, 0x8001, 0x1f, 0x1, 0xd5d, 0x5, 0xffffffff, 0xfffff800, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x1, 0x4094, 0x6, 0x402, 0xde, 0x882, 0x4, 0xffff0000, 0xdc7, 0x10000, 0x401, 0x2, 0x7, 0xc00000, 0x7, 0x400, 0x1000, 0x4, 0x9e, 0x0, 0x9, 0x3, 0x7fff, 0x5, 0x5, 0x5, 0x2, 0x6, 0x96e, 0x9, 0x0, 0x6, 0x1, 0x5, 0x8, 0x8, 0x6, 0x9, 0x0, 0xffffffff, 0x2, 0x6, 0x7, 0x1, 0xfffffffd, 0x0, 0x1f, 0x0, 0x6, 0xfff, 0x8, 0x2, 0x4, 0x7ff, 0xa82c, 0x81, 0x3, 0x5, 0xa67, 0x954, 0x7d93, 0x0, 0x0, 0x9, 0x7f, 0x4, 0x7, 0x6, 0x4, 0x1f, 0x8001, 0x2, 0xf30c, 0xfffffffd, 0x6, 0x3ff, 0x80, 0x1f, 0x7, 0xffffffff, 0x2, 0x9, 0x8, 0xfffffff9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x1, 0xd52, 0x80, 0x1ff, 0x3, 0xfff, 0x4, 0x10001, 0x10000, 0x7fffffff, 0x6, 0x6614, 0x3, 0x4, 0xf0000000, 0x8001, 0x4, 0x0, 0x80000001, 0x9, 0x3, 0x100, 0x1ff, 0x2, 0x7bd, 0x4, 0x7, 0x8, 0x9, 0x1ff, 0x4, 0x4, 0x6, 0xf3, 0x0, 0x3, 0x7fff, 0x0, 0x7f, 0x5, 0x2, 0x7, 0x3f80000, 0x8, 0x3, 0x0, 0x0, 0x7, 0x4, 0x87e, 0x8, 0x3, 0x0, 0x71ee, 0x9, 0x6, 0x8001, 0x5, 0xfffffffb, 0x7, 0x800, 0xb07, 0x3, 0x1, 0x9, 0x0, 0x1f8, 0x4, 0x101, 0x4, 0x101, 0x800, 0x5, 0xf767, 0x9, 0x7fff, 0x3, 0x5, 0xfffffffb, 0x8000, 0x1, 0x7, 0x3, 0x0, 0x0, 0x2, 0x51, 0x8788, 0x1, 0x4c37, 0x80000001, 0x7ff, 0x4, 0x5, 0x2, 0x5, 0x3, 0x2, 0x2, 0x1000, 0x4, 0xfff, 0x7, 0x5, 0x80, 0x3, 0x13, 0x4, 0x0, 0x80000001, 0x6, 0x2, 0x7, 0xcb88, 0x5893, 0x1, 0x0, 0x7, 0x2, 0x1, 0x10001, 0x1f, 0x1f, 0x5, 0x0, 0xfffffffa, 0x80, 0xffff, 0x6, 0xf75, 0xffffffff, 0x45c, 0x1, 0x3, 0x3f, 0x516, 0x1, 0x4, 0x40, 0x800, 0x1, 0x3, 0x6, 0x6, 0x5, 0x2, 0x7f, 0x3ff, 0x7, 0xcfb3, 0x3, 0x7fff, 0x0, 0x80000000, 0xff, 0x5a, 0x4700, 0x40, 0x101, 0x8, 0x1000, 0x4, 0x9, 0x81, 0x9, 0x8, 0x3, 0x8001, 0x1, 0x4, 0x1, 0xff, 0x33, 0x10000, 0xf99e, 0x7, 0x400, 0x3, 0x5, 0xfffff506, 0x9, 0x0, 0x80000000, 0x206, 0x800, 0x4e, 0x1, 0x3, 0x4000800, 0x5, 0x4, 0x5, 0x7, 0x9, 0x279, 0x7, 0x9, 0x80, 0xfffffc00, 0x922, 0x7, 0x40, 0x4, 0x4, 0xfffffffb, 0x5, 0x3ff, 0x8, 0x0, 0x7, 0x81, 0x80, 0xfffffff9, 0x5, 0x200, 0x2f, 0x3, 0x99, 0xa05, 0x7, 0x3, 0xdc, 0x5, 0x2, 0x8, 0x8, 0x8, 0x2375, 0x101, 0x4, 0xb5, 0x3, 0x9, 0x882, 0xff, 0x4f, 0xf4, 0x6, 0x4, 0xec33, 0x1, 0x1000, 0x9d, 0x80000000, 0x100, 0x7fffffff, 0x7a, 0x26, 0x8, 0x80, 0xece, 0x7f, 0x6, 0x3847, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x3f, 0x20, 0x5, 0xf0, 0x3, 0x7, 0x8, 0xff, 0x47, 0x5, 0x200, 0x3, 0x9, 0x3ff, 0xfffffffb, 0xfffffffa, 0x3, 0x3163, 0x1ff, 0x0, 0x7fffffff, 0x2, 0x9, 0x1ff, 0x81, 0xe1c0, 0x7, 0xfc83, 0x2, 0x38c4, 0x5, 0x5, 0x4, 0x200, 0x37bd0cc2, 0x1ff, 0x4, 0x8fee, 0x38d, 0x1, 0x4000, 0x2, 0x3, 0x4, 0x6, 0x0, 0x7f, 0xed3, 0x2, 0x7, 0x1, 0x7, 0x7f, 0x6, 0x3, 0x7ff, 0x80, 0x36, 0x2, 0x1f, 0x6, 0x8, 0x1, 0x100, 0x0, 0xed22, 0x6, 0x7f, 0x4, 0x4, 0x9, 0x4f2, 0x4, 0x3, 0x4, 0x4, 0x40, 0x81, 0x0, 0xd0bf, 0x10000, 0x4bc, 0x9, 0x20, 0x9, 0x0, 0x3, 0x7, 0x7fffffff, 0x1, 0x7, 0x10001, 0x5, 0x4, 0x101, 0x38e0, 0x5, 0x1, 0x10001, 0x67b1, 0x8, 0x1f, 0x6, 0x5, 0x2, 0xfffffff7, 0x100, 0x9, 0xf2d5, 0x195, 0x5060, 0x80, 0x9, 0x5, 0xff, 0x8, 0x4, 0x1, 0x1000, 0x88fa, 0x9d64, 0x8, 0x80, 0x10000, 0x7, 0xd4, 0x1ff, 0x101, 0x4, 0xff, 0x7, 0x1000, 0xe, 0x7, 0x2, 0x1, 0x3f, 0x72, 0x8, 0x6, 0xfff, 0x7, 0x4, 0x81, 0x200, 0x6, 0x8001, 0x1, 0x0, 0xd11, 0x11, 0xfff, 0x5, 0x7, 0x0, 0x2, 0x8000, 0x1f00000, 0x4, 0x401, 0x1, 0x8, 0xa1, 0x1000, 0x7, 0x1000000, 0x3, 0x4, 0x9, 0x80000000, 0x9, 0x80000001, 0x1f, 0xfffffffb, 0xf387, 0x6, 0x1ff, 0x0, 0x1, 0x9, 0x1, 0x9, 0x5, 0x9, 0xffffffff, 0xea8, 0xe, 0x101, 0x2, 0x8a8, 0x1000, 0x8, 0x3ff, 0x4, 0x3f, 0x7, 0xfffffffe, 0x5, 0xc0e8, 0x1, 0x166, 0x2, 0xce9, 0x7, 0x5, 0x6, 0x80000000, 0x3, 0x0, 0xffffffff, 0x800, 0x8, 0x20, 0x200, 0x10000, 0x2, 0xd4, 0x101, 0x6, 0x7, 0x1, 0x6, 0xfffeffff, 0x7, 0x3, 0x83, 0x7, 0x5, 0x952, 0x80, 0x7, 0xfffffff7, 0x8, 0x7, 0x1f, 0x6, 0xc5cf, 0x7, 0xffff, 0x40, 0x73, 0x7, 0x57f, 0x6, 0x4, 0x0, 0x6, 0xfffffffc, 0x7f, 0xfffffb14, 0x6, 0x6, 0x1, 0x469b, 0x40, 0x80000001]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1ff, 0x8, 0xd4a, 0x0, 0x1, 0x3, 0x5, 0x6, 0x5, 0x8, 0x7ff, 0x5, 0x100, 0x6, 0x0, 0x0, 0x8, 0x3, 0x1ff, 0x7fff, 0x1, 0x8001, 0x9, 0x7, 0x0, 0x6, 0x5, 0xc389, 0x3, 0x101, 0x6, 0x80000000, 0x1, 0x5, 0x7c, 0x2, 0x0, 0x3d36c344, 0x5, 0x3b2d, 0x1f, 0x7, 0x10000, 0x6, 0x800, 0xffff3965, 0x5, 0x5, 0x80, 0x4, 0x7, 0x2, 0x3f, 0x1f, 0x9, 0xffffffff, 0x8, 0x80, 0x3f, 0x7d, 0x1f, 0x6, 0x2, 0x6, 0x8001, 0x6, 0xff, 0x80000001, 0x7, 0x401, 0x9, 0x1, 0x6, 0x8, 0x7fffffff, 0x7, 0x3, 0x4, 0x0, 0x0, 0x4, 0x2, 0x6, 0x7, 0x0, 0x6a9, 0x20, 0x4, 0x1, 0x4, 0x7, 0x0, 0xec, 0x5d91, 0x57, 0x2, 0x8, 0x3f, 0x101, 0xd3f, 0x1, 0x7, 0xdfa1, 0x75797cea, 0x3f, 0x4, 0x8000, 0x1, 0xe0, 0xe17e, 0x8, 0x4, 0x81, 0x80000000, 0x80000000, 0x9, 0x1, 0x0, 0x6, 0x7, 0xffffffc2, 0x4, 0x1f, 0x100, 0x7fff, 0x8, 0x485, 0x9, 0xfc, 0xaec, 0x9, 0x9, 0x9, 0x3, 0x96d, 0x3, 0x3, 0xff, 0xff, 0x7fffffff, 0x9, 0x6, 0xfffffc01, 0x200, 0x9, 0xf37, 0xffffffff, 0x80000000, 0x1, 0x7, 0x8000, 0x8, 0x1, 0x86ba, 0x0, 0x5, 0xf9, 0xfc1, 0x3, 0x8001, 0xffffffff, 0xdf, 0x800, 0x6, 0x4, 0x100000, 0x3, 0x21f, 0x57fa, 0x7, 0xda8f, 0x7, 0x7fff, 0x9, 0xffff, 0x2, 0xda, 0x0, 0x1, 0x3, 0x3b6, 0x6ad8fdbb, 0x8001, 0x10000, 0xa8c5, 0x400, 0x85d, 0xfffffe00, 0xd5, 0x2, 0xbe, 0x9, 0x1f, 0x1, 0x101, 0xbf0, 0x100, 0xdf0, 0x200000, 0x3398, 0x4, 0x25beaf29, 0x6, 0x1, 0xf88, 0x6, 0x0, 0x5, 0x5, 0x3, 0x80, 0x401, 0x9, 0x0, 0x3, 0x3ff, 0x1, 0x77, 0x0, 0x6, 0x81, 0x673, 0xa1, 0x1f, 0x80000000, 0x7fffffff, 0x1000, 0x0, 0x8, 0x4, 0x5, 0xa7a0, 0xfffffff9, 0x7, 0x80000001, 0x9, 0x6, 0x319, 0x46, 0x80, 0xdf, 0x3, 0x2, 0xfffffff7, 0x4, 0x0, 0x3, 0x2333, 0x6, 0x8001, 0xa4, 0x1, 0x401, 0x6, 0xfffffffd, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xbd15, 0x4b47, 0xebd, 0x200, 0x4, 0x100, 0xff, 0xfffffff8, 0xda39, 0x0, 0xd5c, 0x1, 0x22d, 0x20d0, 0xa16, 0x2, 0x8, 0x81, 0xe824, 0x9, 0x2, 0x2f, 0x4, 0x80000001, 0x6, 0x9, 0x7, 0x6a0d, 0x7, 0xff, 0x4, 0x4, 0x5, 0x80, 0x10000, 0x3f, 0xfff, 0x3, 0x8000, 0x2, 0xace, 0x1, 0x7a7, 0x2, 0x6, 0x712, 0xbc, 0x4, 0x8, 0x1, 0x4, 0x1fc9703, 0x81, 0x80000001, 0xfffffff9, 0x0, 0x8, 0x2, 0x7, 0xfff, 0x7, 0x7, 0x101, 0x1ff, 0x7, 0x101, 0x4, 0x0, 0x3, 0x10000, 0x8001, 0x101, 0x8000, 0x1, 0x3f, 0x6, 0x618, 0x7, 0x7, 0x3, 0x3, 0x8000, 0x4, 0x1, 0x4, 0x3ff, 0x5, 0xe28, 0x4, 0x0, 0xf0, 0x9, 0x0, 0x1, 0x0, 0xfff, 0x5, 0x3f, 0x40, 0x31d, 0x1, 0xd0, 0xffffffff, 0xfffffff7, 0x8, 0x0, 0xc416, 0x6389, 0x1, 0x5ca0, 0x8, 0x80000001, 0x5, 0xfffffffd, 0x80000000, 0x7, 0x5bc6, 0xd654, 0x8, 0x1000, 0x95, 0x494, 0x8, 0x5, 0x7f, 0x2, 0x4, 0x3, 0x8000, 0x4, 0x8, 0xffffa057, 0x3, 0x0, 0x7, 0x1, 0x81, 0x100, 0x3, 0x7, 0x5, 0x0, 0x0, 0x4, 0x903d, 0x0, 0x80000001, 0x200, 0x4, 0x1, 0xffff, 0x1, 0x3, 0x2, 0x6, 0x81, 0x8779, 0xfff, 0x80, 0x0, 0x2, 0xca7, 0x64900ce7, 0x20, 0xfffffff8, 0x8, 0x3, 0x5, 0x9, 0x9, 0x80000000, 0x2, 0xcf76, 0x0, 0x2, 0x9, 0x10001, 0x2, 0x8, 0x7eb, 0x9578, 0x45a07e4a, 0x2, 0x3f, 0x2, 0x1, 0xf6ed, 0x7fffffff, 0xfffffffc, 0x100, 0x3, 0x4, 0x3, 0x1, 0xcd, 0x2, 0x800, 0x4, 0xfbb, 0x8, 0xffffffc0, 0x3e0b, 0x10001, 0x8, 0x3, 0x2, 0x5, 0x10001, 0x3, 0x1, 0xc9f, 0x4c, 0x913, 0x7, 0xd1, 0x1, 0x7, 0x6, 0x8100000, 0x80000000, 0x6, 0x0, 0x0, 0x8, 0x6, 0xd0, 0xd2ec, 0x0, 0x1f, 0x9, 0x7, 0x7fff, 0x1, 0x3f, 0x101, 0x7, 0x10001, 0x5, 0x400, 0x2, 0x81, 0x5, 0x66b1, 0x7, 0xff, 0x7b2, 0x0, 0xa8, 0x9, 0x2, 0x7, 0xffffffe1, 0x8000, 0x9, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x1ff, 0x8, 0x40, {0x3f, 0x2, 0x200, 0x9, 0x0, 0x6}, {0x1, 0x2, 0x6, 0x2, 0x3f, 0x80000001}, 0x7fff, 0x8, 0x7}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x6, 0x6, 0x2, 0x800, {0xfa, 0x0, 0x101, 0x6, 0x91, 0x8}, {0x0, 0x1, 0x7f, 0x3f, 0x44, 0x44c3}, 0x1, 0xa209, 0x7}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff8001, 0x1, 0x4, 0x32a1, 0x8, {0x0, 0x1, 0x5, 0x9, 0x1, 0x7}, {0x2, 0x0, 0xd8, 0x4, 0x3f, 0x5}, 0x5, 0x400, 0xfffe000}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9f}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfd}, @TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x8000000, 0x1, 0x7f, 0x1000, 0x8, 0x9, 0x4, 0x7, 0x1000, 0xa74c0000, 0x7, 0xe8eb, 0x18d, 0x949, 0x80, 0xffff8000, 0x905, 0x38c594f5, 0x3, 0x7fffffff, 0x6, 0xd5, 0x4, 0x7, 0x400, 0x8, 0x1, 0xff, 0x691, 0xfffffbff, 0xffffffff, 0x5b8, 0xfffffffd, 0x7e, 0xfe, 0xffff, 0xfff, 0x7, 0xc1, 0x1, 0x1, 0x0, 0x2, 0xb0, 0x1, 0x1800000, 0xfffffffd, 0x3ff, 0x2, 0x5, 0x8000, 0x6, 0x4, 0x51f, 0xc, 0x81, 0x1, 0x9, 0xfffff82b, 0x3ff, 0x6, 0x20000000, 0x6, 0xffff, 0x8, 0x0, 0x8, 0x4, 0xdfed, 0x66, 0xffffffff, 0x6, 0x3, 0x379ae501, 0xd9, 0x5, 0x800, 0x2, 0x3ff, 0x101, 0xfffffff9, 0x40, 0x8, 0x7, 0x7fff, 0x6, 0x3, 0x0, 0x80000, 0x1, 0x3, 0x3, 0x9, 0xc75, 0x1ff, 0x40, 0x9, 0x8000, 0x9, 0x7729, 0x9, 0x8, 0x6, 0x8, 0x7, 0x8, 0x9, 0x7, 0x6e6e, 0x1, 0x7, 0x5, 0x5, 0x1, 0x5, 0xfbac, 0x1, 0x6, 0x7, 0x1ef6, 0xffffff01, 0x2, 0x9, 0x8000000, 0x4, 0x8, 0x1, 0x7, 0xdb, 0x3ff, 0xa2f, 0x9, 0x81, 0x9, 0x7, 0x8, 0x3, 0x7810f8b7, 0x7, 0x80000000, 0xf846, 0x8c3, 0x6, 0x2, 0x200, 0x4, 0x8, 0x81, 0x7574, 0x7, 0x3, 0x9, 0xf5, 0x9, 0x3353, 0xe0, 0x2, 0x80000000, 0x400, 0xfffffffe, 0x800, 0x4, 0x6, 0x3f, 0x7, 0x3, 0x9, 0x4, 0x6, 0x401, 0x80000000, 0x0, 0x1, 0x2, 0x10001, 0x5, 0x3, 0x3, 0x800, 0x0, 0x7, 0x1, 0x9, 0x1f, 0x7fffffff, 0x3, 0x2, 0x44, 0x7, 0x5, 0xffffffff, 0x7, 0x4, 0x300000, 0x73, 0x7fff, 0xfffffbcb, 0x7, 0x4, 0x35e, 0x80000001, 0x7, 0x2, 0x4, 0x5, 0x400, 0x3de6, 0xfffff66e, 0x81, 0x8, 0x1ff, 0x3b, 0xed, 0x9, 0x7, 0x4, 0x1ff, 0x20f20000, 0x1, 0x9c7, 0xbece, 0x9, 0x5, 0x1, 0x8000, 0x0, 0x3f, 0x639, 0x8, 0x80000001, 0x2, 0xfc3, 0x6, 0x0, 0x1ff, 0x23, 0xc7, 0x2, 0x7f, 0xff, 0x605df484, 0xcd7, 0x8, 0x3, 0x6, 0x6, 0x80000001, 0x5, 0x400, 0xfff, 0x401, 0x3, 0x6, 0x2, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x20, 0x7, 0x3f3, 0x6, 0x4, 0x1, 0x48000, 0x10001, 0xa24e, 0x1ff, 0x40, 0x9, 0x66b7, 0x7fff, 0x5bdf, 0x80000001, 0x5, 0xa628, 0x2d65b929, 0x40, 0x3ff, 0x143, 0x3f, 0x7d, 0x5, 0x5, 0x10001, 0x0, 0x5, 0x1, 0x7, 0x5cf6, 0x800, 0x7, 0x10001, 0x2, 0x5, 0x3, 0x8, 0x1ff, 0x8, 0x7, 0x7, 0x80000000, 0x100, 0x6, 0x10001, 0x40, 0x5, 0x80, 0xfff, 0x7, 0x9, 0x65d, 0x1, 0x4, 0x9, 0xdf, 0x40, 0x7, 0x7, 0x0, 0x3f, 0x1, 0x4dc, 0xb49c, 0x45, 0x8, 0x6, 0x5, 0x60e, 0x9, 0x5, 0x5, 0x9, 0x1, 0x9, 0xfffffe00, 0xb0a, 0x1, 0x0, 0x8, 0xfffff67c, 0x0, 0x9, 0x4, 0xff80000, 0xb1800000, 0x8, 0x5, 0x7, 0x3c, 0x3, 0x10000, 0x0, 0x80000001, 0x13a0000, 0x8, 0x8, 0x8, 0x80000001, 0xff000000, 0x1, 0x497, 0x20, 0x0, 0x9, 0x7, 0x9, 0x0, 0x4, 0x5, 0x5, 0x8, 0x9, 0x0, 0x5, 0x7, 0x4, 0x1, 0x3, 0x20, 0x8, 0x8, 0x2ee, 0x9, 0xffffffff, 0x9, 0x8, 0x40c, 0x4, 0x5, 0x20, 0x28, 0x5, 0x8001, 0x6, 0x5, 0x9, 0x3, 0x3f, 0x9, 0x5, 0x8, 0x4, 0x8, 0x1, 0x5, 0x7, 0x3, 0x5, 0x8, 0x8000, 0xffffffff, 0xfffff55a, 0x40d, 0x5, 0x7, 0x1, 0xf1, 0x8, 0x1, 0x10001, 0x80000000, 0x2, 0x5, 0x9, 0x1000, 0xfffeffff, 0x1, 0x80000001, 0xffff, 0x401, 0x9, 0x6bc5, 0x80000001, 0x2, 0x1000, 0x5, 0xfffffe01, 0x1ca8, 0x3, 0xfffffffb, 0x20, 0x6, 0x8, 0x80, 0x6, 0x5, 0x7f, 0x9, 0x6, 0xffff, 0x6, 0x81, 0x9, 0x72, 0x0, 0x180, 0x4, 0x9f5, 0x9dd, 0x1, 0x7, 0xc49c, 0x0, 0x5, 0x800, 0x8173, 0x1, 0x2, 0x0, 0x6, 0x9, 0x80000000, 0x81, 0x7, 0xfa35, 0xfffffff9, 0x1, 0x20, 0xa7, 0x6e75, 0xfbd8, 0x8001, 0x5, 0x1, 0x8, 0xc473, 0xcc05, 0xdb, 0x44a, 0x3f, 0x5, 0xbd, 0xe35, 0x9e4b, 0x5, 0x7, 0x0, 0x393, 0x4, 0x153, 0x72, 0x1, 0x7, 0xa74d, 0x7, 0x1, 0x2, 0x6, 0xe5, 0x4, 0x7fffffff, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x7, 0x7, 0xffffffff, 0x2, {0x8, 0x0, 0x8, 0x7, 0x3, 0x40}, {0x0, 0x1, 0xfe, 0x8, 0x5ce, 0x9}, 0x2, 0x8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x5, 0x7, 0xa9b8, 0x1f, {0x42, 0x0, 0x8, 0x6f, 0x3ff, 0x7}, {0x40, 0x2, 0x44, 0x1, 0x1, 0x1000}, 0xfffffff8, 0x0, 0x5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x0, 0x9, 0x401, 0x200, 0x8, 0x5, 0x81, 0x918d, 0x2, 0x4, 0x1200, 0x5, 0x3, 0x8, 0x1, 0x7f0, 0x4, 0x8, 0x3, 0xdf28, 0x80000000, 0x1, 0x100, 0x1f, 0xcef, 0xffffff80, 0x8, 0x0, 0x7, 0x10001, 0x2, 0x0, 0x10000, 0x8, 0xd8, 0x6, 0x0, 0x9, 0xe15, 0xffff, 0x13f5, 0x400, 0x3, 0x4, 0x3, 0x8, 0x1, 0x4, 0x5, 0xffff, 0x76, 0x1, 0x5, 0x8de7, 0x6, 0x3, 0x9, 0xfffffff7, 0x1, 0xfffffff9, 0xa00000, 0x0, 0x7, 0x5, 0xca, 0x800, 0xff, 0x5, 0x1, 0x200, 0x7, 0x1f, 0x8d8, 0xffff, 0x1, 0x1, 0x7672, 0x7ff, 0x7fffffff, 0x1000, 0x1f, 0x7, 0x401, 0xf5, 0x50, 0x7, 0x8000, 0x4, 0x10000, 0x1, 0xa454, 0xfffffffa, 0x81, 0x3, 0x2, 0xcf380000, 0x1, 0x800, 0x7, 0x0, 0xda2, 0x1f, 0x4, 0x2, 0xb13, 0xfffffffa, 0xf2, 0x0, 0xf864, 0x40000000, 0x8, 0x0, 0x38b, 0xff, 0x401, 0x10000, 0x1ff, 0xff, 0x8000, 0x1, 0x81, 0x1, 0x8, 0x0, 0x4, 0x4, 0x9, 0xed, 0x3, 0x6, 0x8653d6e5, 0x8, 0x9, 0x91af, 0x3f, 0x8, 0x2, 0x1f, 0x3, 0x1, 0x4, 0x10001, 0xece, 0x800, 0x6, 0x8, 0xfae9, 0x0, 0x3a4173b2, 0xfdd1, 0x8000, 0x2, 0x1000, 0x9, 0xffffffff, 0x9, 0x5, 0x5, 0x10001, 0x2, 0x3, 0x0, 0xfffffffe, 0x4, 0x7f, 0x80000001, 0x5, 0x1, 0x3f, 0x8001, 0x2, 0x999, 0x0, 0xffffff03, 0x302b, 0x2, 0x2, 0x4, 0x5, 0xff, 0x0, 0x8, 0xfa0, 0x7, 0xfff, 0x0, 0x8, 0x20, 0x0, 0x80000001, 0x80000001, 0xfff, 0x8, 0x812, 0x9, 0x800, 0x0, 0x7, 0x4, 0xa8, 0x5, 0x3, 0x7a9e, 0x9, 0x6, 0x40, 0x6, 0x2, 0x8, 0xcc, 0x8, 0x1f, 0x708, 0xf27c, 0x1, 0x3f, 0x3, 0x2303, 0x2eb, 0xa6, 0x8000, 0x5, 0x1f, 0x0, 0x4, 0x4, 0xbf7, 0x6, 0x2f1, 0x2, 0x3c, 0xf5, 0x8, 0x6, 0x80000001, 0x4, 0xe7, 0x80000001, 0x4, 0xfff, 0x9, 0x101, 0x3, 0xfffffffa, 0xe89, 0x4, 0x5, 0x2508, 0xd1a, 0x6, 0x4, 0x6e9, 0x1, 0x6, 0x4]}]]}, {0xf4, 0x6, "ee55c32f61f61f67805c654840be5017ab333f4db4f4f2ab566ca6b91d1f354814c386551f7ec563f6b9b08e98d972765bd4b6dd83e5ad57b5e213e137eac8ecd83c2c5470b31661a8b86801600441982b1a58c585d06a3b791add8e2aabc4d311db88c3cc545c1405d59c98b55c39c45b7be5b1c6c56946ab11c5383dfe23e5c74797f912d5acfa52818597ce465741ae75f96a96c89c56dfb58ea63ef1deac68eaae893a5ce4160136b33a4dc3a5df79cbabeeae984e4e17460ef619bc41dc4fced50593d77a4cf2c410822a267f3ce68d5e450783db1484a81bc4250772118bf74a2a7b370cc16e355b0e019318a7"}}}, @m_xt={0x24, 0x1a, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1ff}]}, {0xc, 0x6, "8a2b4efc59cbf5bb"}}}, @m_tunnel_key={0xd8, 0x1e, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0xaf, 0x6, "ebae9deef7797b255e15d275dc140ae4df6cd0e2ab88c59ba50f086fe78b44ad7ce8b99d74df940fe6f3b2b36aad8a876de729f39a008804359c87a52f9d1c58baf929cd7d7bf53045e6ca3b086185cbfb0ff2f4364f14b3b11edcf47a8f42e2b95fd8ac12cf7a3e3723581dae0942bf9937821eb49e5dda422918efa35859e0e0c20b86749535725a1a8783cdf1ddc064f330a46b1c7e9c1c1220887054cdc66582907fb5859b6fa0aacc"}}}, @m_xt={0x1cc, 0x1, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x134, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa3, 0x6, {0x6, 'raw\x00', 0xd4, 0x8, "6f8ae7944b0bf3a15b2ffe194e5857daa4097dfdf67de2f624742f3bbcd161eabdcf9988d2ca97f68e785f03cf2d676bc4800f439273843e2439bb582aa6a5eb3b45d3fe2d1f7dfed306c1ca9f446bdbffd4513e11d0065af527b3a227d9f8a16f9410091b98b12f1c3bc676f103a905324b20ad4a8f20dea7"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8001}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffe}]}, {0x8c, 0x6, "f4503712377bee736b880a20a64909b69739ce73707e004fca64ebf09610ee8226f1b44de37453cffd69be648f01d96f34442bd9617f5735a9328038d5273e63e5ac3106d19aebe3f209c955f794a79cca13d09b26d92c3b0ad9897f51f3bc7daca5ce36192198168c78935fdbb6b88e2518bba3ea6836ff2685e74d99f67f3dcee4e1cb2b0f35a8"}}}, @m_skbedit={0x30, 0x1b, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x4}, {0x1b, 0x6, "342ce46093ffd32a6fbad7589f47f9407a9f4a4dfeea7c"}}}]}, {0x29c, 0x1, [@m_ipt={0x1c0, 0x18, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x158, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xee}, @TCA_IPT_TARG={0xc8, 0x6, {0x7, 'nat\x00', 0x81, 0x8e, "925280d2b06dc110315b0044999cae601784be39f63de9e6887c546dafbf201d1187e1c519d01787328d6a13593bba08b04f2fe7ff880524d23aa5656bc068ce5f3f4c78c367adeb3faf8262fcb99c053eecf219705846f30243877330e98a8f3c4ce9a917021a1b31ff852bb6ad5cf92de799ed738197279a2b42ea4839a9096a593ef8e26b356e13c0885c4db727bbf724fe2a76fba6783488f1d5d795"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x40}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x59, 0x6, "95c4dc379f137989babcddfa41b19fe68335d292247f1488d751591c5198e855c1af7cb3accf9789f3b2da7ea193af547678a9b48f4aae4d4efbeef59336a1332df37995ebac7505c56b4b2141447dca2bc90c2f61"}}}, @m_ctinfo={0xd8, 0x6, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3ff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xae9a}]}, {0xb4, 0x6, "5d5821c777a1b407009c5fb974dc9d546c5ef222963c0bfb050fbce13a433956beef1e5df517466c8ff321b8b2550073f6a9b6fd265e18d82ffe6104be194e78265f9b09a77329bdcdfabbdb69b23e9ae9dba5ecd1ee785cd452b55f8c25668fc26fc379299c4d4deee4ed7bc871d2c3173de893f024d356099459c35f0c7b9ac9da297270f175b606bbcc527a6e5067c7a0d613a00ea10a76f1c0ee6dcb6401fda15a28661fe23eb397aac08edc8d1a"}}}]}]}, 0x43ec}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001300)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, @mcast1, 0xcc, 0xcf1c, 0x5, 0x0, 0x1, 0x80, r3}) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000480)=""/111) 20:07:17 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) close(0xffffffffffffffff) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) sendfile(0xffffffffffffffff, r0, 0x0, 0x200086) 20:07:18 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) close(0xffffffffffffffff) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) sendfile(0xffffffffffffffff, r0, 0x0, 0x200086) 20:07:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000002280)=""/4100, 0x1004) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000001c0)) getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) accept4(r1, 0x0, &(0x7f00000000c0), 0x1800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:07:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x40, 0x0, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x40}}, 0x0) 20:07:18 executing program 5: timer_create(0x0, &(0x7f0000066000)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1b}, 0x2108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) dup(0xffffffffffffffff) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x11) socket$inet6(0xa, 0x2, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="ea644b907e997ca003bc4af0dac715694ef7accc2b9117e97d2d9719fda034c99b4c04f11100d1fa877a4911bb9e25a6918e2dc7873fe166d51dd42abc932d043d55afadedf8ad535cff4f45703d4a3879959edc9fd4b86f4129ea2c1315a13b6761fcc92d30c0000db24136d6110d926ed426ce1d3754cd7638df6d1b84245a9834f565fe55ece42f236f6da8f17d6e692bb53f21ad6f79027bb67bc4730d8ad4ce9517a5851874c80c2c42", 0xac, 0x40004, &(0x7f0000000140)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x37}}, 0x1c) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, 0x0) sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) 20:07:18 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:18 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6000000024000705000025ff19351ebac05aca21", @ANYRES32=r1, @ANYBLOB="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"], 0x60}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 20:07:18 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:18 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 275.989289] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.022065] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.777638] Bluetooth: hci0 command 0x1003 tx timeout [ 277.783281] Bluetooth: hci0 sending frame failed (-49) [ 277.937678] Bluetooth: hci1 command 0x1003 tx timeout [ 277.943727] Bluetooth: hci1 sending frame failed (-49) [ 279.857523] Bluetooth: hci0 command 0x1001 tx timeout [ 279.862999] Bluetooth: hci0 sending frame failed (-49) [ 280.017586] Bluetooth: hci1 command 0x1001 tx timeout [ 280.023044] Bluetooth: hci1 sending frame failed (-49) [ 281.937378] Bluetooth: hci0 command 0x1009 tx timeout [ 282.097340] Bluetooth: hci1 command 0x1009 tx timeout 20:07:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000002280)=""/4100, 0x1004) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000001c0)) getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) accept4(r1, 0x0, &(0x7f00000000c0), 0x1800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:07:28 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:28 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @dev, 'gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x20, 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000001340)=ANY=[@ANYRES32=r4, @ANYBLOB="9d000000c24999b4daba3c443496667ceae35af04cf01e6a5ef65c179f65e9395e964f2144732052a2f0692cae4ea098f12c9bed21c6d8b9611c6b2456118767c18160fbbf31ddefe8e3be4a44f53a3e4d9365bf2ffd4c82ef51d668912982ebca38bde77b3946fb6b7d946ae67b4c568e38d88844e4bbdfefecde9e7f11032ab06d22d2f8184f9a32ccc66e7ccc16ed606ac891888d75c954029109f9e71937ffd189bf3a79e5f9f3da1f4d0f0e683841fbd0c899a4132a89368ff18f1af740a69e700e2b3b32c4c181bc848586dd318db3dfe85b2e8a9b48d76dcbe9f7b1c6461775"], &(0x7f00000001c0)=0xa5) prctl$PR_SET_PTRACER(0x59616d61, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080), 0x0) 20:07:28 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) ftruncate(0xffffffffffffffff, 0x1000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200086) [ 286.020671] sctp: [Deprecated]: syz-executor.0 (pid 8449) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.020671] Use struct sctp_sack_info instead 20:07:28 executing program 4: r0 = memfd_create(&(0x7f0000000180)='0\x05\x16r\xf7\x93\xce$GH\x80\x02\x05\xaa/7pP-\x1d@\x82\x88\x1c\xf3,\xaa\x1a\x9eX:\xfc\xd7\x8eA\xb0\xa0\x10\xdc\x1d\xcb\xd3(\xb6lH\xadu\xf3AO@y\xe7@\x1c\x1e\xcb\xb30\xcfAg\x8f\t\xb1\xe2\xf5\x9aw\xbc\x03_\xf5 \xf7\xf5\vzb\xfaNhX\xac\x94\x037\xf3\x1f\xce\xa5\xd4\xd3\xfb\xd4\xda\xe5\xb5}\x91\xd1\x00\xe2\xee\xfc&;^\xe0\a\xc0\xbc\xb11`$`V;\xef\xf3A\xcb\xb9\xfb\x16TjFN\x19aNl\x9bO;\x17LU\xa0O1:\xc2P\xcc\x97\xe7(\xdf\xf4\xeb\xd9\xdb\xd5\x9fC~\xf7\xbc\xa6\xff\x11u=\x1a\xe9\xfd\xa38\x99!\xbb\x82F\xdd>P\x9a\x98CI\\9\xa1\xa6\x10\xb9\xfd\x1fs\xc0JG\x7f~\x8f\xc3C\xe1\xbb\xef\xffW\x1e\x81\x92T\x0f\xc3|e\x96\xc4\x91G\x90\x83\x92P]\x1e\x90:\xd4\x15_\x17\b\x94\x11\xf1\xf9\x9a\xa9\v,\x80\xdc\xff\xce\xd7G\x97\x80\xfd\xb1\xc9\x92Lc\t6\xc3\xc3\x81\x15\xd6\xf6:\a\xa6C[S\xc7va\x83C\x1a\xeaR\xe9\xeb\xac\xe4\xb6\x8f\xb2\xe0\xcdA\xbb\xc7h\xc9cJg>\x9b\x05x2Y\x84\x18\x93\xab5B\x04\x1d\xf8\x9eQ\x16\xd7\v-\x9d\xeev\x97\xe0\x8b\xdc\xff\x1b\xd7\x84\xf3|$Nd\x00|\x8a[\\`\xbf\xf4SV\xa5}\xa2\x9a\xfe\tM\xb8h\x11\xe9\x10\x9e\x8emt\xfal', 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) accept4$ax25(r1, 0x0, &(0x7f0000000000), 0x81400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x20000005011, r0, 0x0) 20:07:28 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:28 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@rand_addr=0x610000, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x2, 0xff, 0x7ff}}, 0xe8) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, &(0x7f000059aff8)={r1}, &(0x7f000034f000)=0x2059b38b) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x3, 0x2, 0x1, r1}, &(0x7f0000000080)=0x10) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000160000000000007ba79574354cdddb4e667263a7192ff58ab16f88b9668b145e6313f3ee41e2f28204de687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8f5f819b383803f6c871ceef4aa6dac6acb5ded04e549caab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7d6d83b5694ff158864d444d4bf66e8d85cc74a000000000000150000000000781f1a3ea4c0c8af28e2b90e1d3dd7fe6e38c2d29be9a5adffffff7f0000d49fae525c2c41538c1cc30ca6ba4cff25244c322444b16719ed68ee6d2488839efab0c87f5a4b0fe70259a7b5f1"], 0x10}}, 0x0) 20:07:28 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) ftruncate(0xffffffffffffffff, 0x1000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200086) 20:07:28 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x60, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:zero_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000040)=':', 0x1}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bind$rds(r1, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0xaaaaaaaaaaaab9c, &(0x7f0000000180), 0x0, 0x0) [ 286.497871] NOHZ: local_softirq_pending 08 20:07:28 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$afs(&(0x7f0000000040)='afs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="ab", 0x1, 0xfffffffffffffe00}], 0x0, 0x0) 20:07:28 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) ftruncate(0xffffffffffffffff, 0x1000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200086) [ 287.936797] Bluetooth: hci0 command 0x1003 tx timeout [ 287.942135] Bluetooth: hci0 sending frame failed (-49) [ 290.016676] Bluetooth: hci0 command 0x1001 tx timeout [ 290.021981] Bluetooth: hci0 sending frame failed (-49) [ 292.096495] Bluetooth: hci0 command 0x1009 tx timeout 20:07:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000002280)=""/4100, 0x1004) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000001c0)) getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) accept4(r1, 0x0, &(0x7f00000000c0), 0x1800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:07:38 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x7f, 0x0, 0x2000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x8000000000001e, 0x5, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x80000000) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40100, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x5}, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xa4f40000, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600), 0x0, 0x0) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @local}], 0x20) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000300)={0x48179569, 0x1, 0x2d, "98a6b3c376b56139ef76955a7bd4b741031ea59211dbc227cb8365e8bef849a96fded221d89649c56ab0344036b063785110b994d2c19fc8fad54bf7", 0x10, "8bb55de6f5ae6bdfbc739c0e40fd10dae559a6974a4351d108809c0d1234efc52ddfa95d1647dd26c711c1dd75b02deddf41ac31dd780fd4051e4ff6", 0xa0}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x3, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0xfffffffc}, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x8001, @mcast2}, @in={0x2, 0x4e22, @local}], 0x2c) 20:07:38 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:38 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) ftruncate(0xffffffffffffffff, 0x1000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200086) 20:07:38 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) ftruncate(0xffffffffffffffff, 0x1000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200086) 20:07:38 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x10, 0x0, 0x0) chown(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x100, 0x70bd28, 0x25dfdbfd, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x50}, 0x1, 0x0, 0x0, 0x850}, 0x810) listen(r0, 0x0) unshare(0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe64, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c46810000000000000000000000000000000000000000000000000000004000000000000000a902000000000000000000d40000380000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc970000000000000000000000000000000000000000000000ffe4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f760a9df60581500"/632], 0x278) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004819}, 0x2400c807) sched_setattr(0x0, &(0x7f0000000040)={0xffffffffffffffb5, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_getparam(0x0, &(0x7f00000043c0)) sendmmsg(0xffffffffffffffff, &(0x7f0000004340)=[{{&(0x7f0000000240)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000004400)=ANY=[@ANYBLOB="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"], 0x1164}}, {{&(0x7f0000001bc0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000000700)="02de25518db53971444506fcbc563607aa64d4c996778aa7a93603d0ab6a6bfbf8f1b76fdc0c2a3e", 0x28}, {&(0x7f0000001c40)="1a0f6a72a929559b6daf585718e518c423aba9d1d62d84a658a465c92dd6fe2b77ae8263df80b66e04e0748516ed7725f8eb2667b0290a8eb41ed6dc1f3cca01ba2f46fcac02793ae90e68bd3950689eefa7aa1277a4cef3a21d69e562ca6207cd55d11a2fa4c8f1c98ef6391a19af91", 0x70}, {&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="2c3be7b9f8e73b9d98fbd1e2104a3a2f5cc1f2083fdccde95967faa9f5de7451168e94e250414b2d737e3b223a0af3e2f77a82bb61423466ecc8d2a973d6da59e4feb28878d73c09e76e63c73c7ace4260ba423fd8a1f134510a3a54119074366154bf938728526d3fc102efb2797dee1cdb9938798ff44231c9cfa7d9f8363e7cc7dfd7772217f82c0f7ffc22aa8c25d463c284d9d95fc52a3062554f9a560e6724b46d291183d57880775d29aa89527736e1398c865950d1a3b3e6958f388808ecae33ba9cd07eb70b4eac6a577963b2c52c", 0xd3}, {&(0x7f0000002dc0)="699b689163dc5489f4ed49a890a1b7a03caf81192210260204a88fceda2a88c9527d3be584ec0c387a8511f005f43a016d457d59aa5b009008103f40dfa96d0b135ef978101c9647c5487fd1ad4735e1d900460f453de07d5adabff9fe009ccc78656f281818ad83f43978e52553c45bfc26cb23a2bfa22e0b59d3d2890e8d0ba8386164f670aed6739624d5e596048796cc237ea5999538c6ed508d16cf39fd5820b3264aa82f0ef4f9ecb575dae722499c53fd058d158b1c09015cbf1eceaf4632182857c1d52ca87e25cc40b16acf22419ee423aed082bed48af8e9cfc56a2db75fc9fe92375fdfd47f8c3e9a534d04af46d8ab36ec85ffc63b", 0xfb}, {&(0x7f0000002ec0)="a88f1af00a8d713eedcef996e81ecd8719678ee60a7a447a58642f13298e88b5357685cb72a089b6bb5d00099e91b022308c81d1ef0049b2f8260034644c2410d588d1b5820f4121b50a2a9529e4f7954853020f4ca53b737ffaf0503d3c7d52d3376a9a889af40290e2965380e31c4bb3f228e72e87a7053b29eeeb448b13e92c500db93611479f1df9013895bb8c82f5c9a94034334707bae806cf5817de2573d271ef341d279b770989dd7be5706711852bcc9eef4884b223f0ec736f71d71d1b89366425a67963efe50008b4e437f50ab92ea17bef933ca46e0838680c19535b04744bd939353f44b920284a8c70f717d86c7961b9b10cb54dfbb018c5b72a47903679167f842f22c47b8d1bb4f569c0884600898993e87af3cdf9aba2a661792cb8166ccf9414af739738ddfbb2c6b84bfd4ce9fdb36045af773f7fcb3da98adc5374a3e6de4230ae0921127fdeaca50688c1d0bbac782e6ddc5a569f0590b2ef6aa1b08290fc73e839f8cdde35f20fe7ebb4aaaa1a04948b25215a0ea415056f63cdb374b43db5ae00db4a804eea9a958b12e16d4730260a41787464fa8d0927a2b84450dd4f803085a1055e14064cd2b8ff795b0718d1e349d67ae50d3389eb9bf4b608f508a75d69d199c235331941545a07e449a76f49b9d391c272439d431b9297ec9e6ab03a92de1eff10a1e92727f2f173ce6d053109ae3f1ac66e4f378c92c30ae8c000ae3ab025f2acda73e4e3347ea394104b2cc6d84d3983a5aff2a06f584b5ebf91f8189a3a5c0c7683bacb9d3a1ba016d383fd9021adc01df470abc74b7b341240192f047e191e8aae3a232b20dad26441f7eae69f59286ec6961016320ea87a72c456fb28ddb96c1e98f9e5e52adbf42c8611c7818213ac78db598b3e606678049e29b6d27c3f3197d75f6316656cda3eea124d005a55d6bb50179a540322525abb3426700aad4e8f197448f4b7cfd83fd06ec21f58314c70e75a52f47cebe9af25632df2c698ff5c7119229bbb431ff693a2f5e583ef8540d27865a1a60142a9a7de755f13b83cecde774ed99fa686707f92aabd4372e212d95b451a8cebd7f6e3adef1ea62b4b991cd67cda47bd0cb0ed22a922fd0fc863aa4808dbf70684f64b347abd842e8e5edd941c5fec88032e9a3181a653af687af805a5d6705ae4cff3ab471d91a4d8f560e90c80fd88e9603bc947c93643661ae4b339aaa509f528bd85059b95c2e8f70d979a9fc5f7226d3fbe019ece3f3298d7af65b5793f8a68c3bfefc33349cbf876274388f1c1ac287bdea9810f26c90eea4b024af5a89d89470b25ccdf07fbdd4411e855007b50bf37168ac5759a5f3dfaba24ca84b342c078c83ba0554a41345b9c05fd0f808075d446bd3b97db9e6fbf3ecc964ff8f8cdf76eec76346d8a1bcbe55ad3e9d6284deb1f52da59a0c2638f97bc9eb7ee26b7f6219808d249beb5cad9d5a021a5bdba40b928d42cdab53735108c84d04f64691abfbb6b57302909b70450ed249f76cdaf1ec63c30c7ccd179702c08fd56383dc1794f80b7f49990a2eaf718a4dd6016d9a2ea61e300f41082f2ac1769bd89989aecef397510b74afd1932dc3fb55422ee96d23e1e3a72db977cf0e6fe85891b86daf85eab44c3ec6474ea805590120d6553e09c84513d3ca33d72bfbc0401c5577f5cc3a099d40431166cdc1d59ea94732eab7ff54ecd92ee5a44f6fe7aed1516323e687fe2b9f836dfa04ea579dfc9d24049beb301c31c8de6da656388851e9e8b183a7ac87275ce235432032a36e2e0446f47cc0a29da33653a5df53b30e38111905d87a730dbd7d88b736d8f2df725b940f03a1fb9a60f1dcd518c0b54e21d6dabee6d2b36265157ac47c7ef46f70b10a43e5bdd70fc821da5f6ee66491dac247ed9f56cb4aa49c74acbae84c7b8d06b3793f2990772ece70483047cd443c4c8c1908d2f9a10e6fecdf4d4756d76ba430eed493d74629306f429e3c4ab9f566953576dad984f6fb3dcdc6f01b3234c07804c0d13bfbbf2094b5adb3a6006b8ad7072405c469d25b0be6f47a6643d8f9f49920706b4b9b86bc111e51281a71979ca4041dd45da2988fa0aee20e72dd317d00da7b17a91a89c951a8e30e1a388c1047d077ff93943d16fcb2710b001fd480d286044d75dc1d16d4adaa0b47eee05114f4ec7e86eec1bbb3ad846fb68fa0bd705f8e7e52a96fca31026b050a6c0615a963b7b531542151adcd20c812929dba843c90c9bf5641deefc3fc0bd3e66f886d8ace5f83ce2dcf08fcd17b4343dfeffd87ab7d04342056601bad53cbeda68740adcb14fd24bc2872629c13614fcec9ded6a4366cf2172829e4338df883575af661d72472c66e3f318c95a925bbe1da6831f397f12c09bbcda33a73f749d9c873740a6a461a5ea21f0373b5039a9a20f5472356cc990d2c7272cd03efe2a7fd9bea3be51b2d2ea4801c63935703eecb8e87bb3b9dd57196ff88f773c6e07cc757c516a9edf06921deaaaa13d47f6695e88ce45bb9c77b6902bcf29d60880590badc1344809742dad8ba3c53428ac9a84069d1c59d6c93012b9b4c65c119a397356e7b1e01b0a374b4889067a23e70a1f0e97fe98e1fc1c7a7e64572b1fb54215230c3c816919b950f12676a29d82d64052e3d6bf2ca11c39e6cafefa3545cd5b8680ab93a81bce79d391e7cd62771a58ae2a96575fef191413327ea45482a8da0b19a169b826cdb94a8d8a30eb98d9b40a438e6fc9490cdae27f12773e803cf69bf0d3e4c8d90a676b5ffb600fe0d4307ad148199048aa6d266c0c7e14026a339d830c4553c75ec69b9d9a47f842386c22fb1721e4b8c6142cc572d98bda914325951403289133f6defa439a88758818838f102591e851edf8240aa8f5f467db9fe415e3e14c3525d8d2336666a7c9ec12b476ee0174353e939d256c4ea177dbc6e4e3f6835fc33b00da9cf42f286b461a08624388b89f51d9786aa903e5eb87278d9138dcb36be8a28e15582867c26a7567e39a433b87032a91daf491a393258f1acb44ac485d56122dc566f5401dd3546e65d629a4bede9f84e28e8dc3d1b0932a7dac99740af6e620b3a8cd302aeba417b497ced515c9f90a4ac897e41eb261f03cca51a63a9ba7f93346b53d7f147152c01727ce400c21419bb93a7754df0d2b201a6553cfd097e7a3207a019f579ee0eadc67c549fc0ad37d227c6ef29f8a95434387c8abdfdd8658ce97a98015635f1426c3c44d0e2a8639b83825fdbf592a3472cb7b0a4224337544519704bb4ed451df73b3135d51a9103290e581888fd10628c0ecbd3605cdd296aa3b595f567a9dc04e9dcebccb78160afcfc9ee79885a741491bd58afb7ab6b29f6c4373566c492daf924497b7cb641ed98273702caab0ec0e70e912a7f0c603a12b289ac2ab74a10ddd5b160bd889d6002eb374ba054f81e060ef0767a6fe057597e3df4892c25fa8b6ee885b3e4bd35d10454ef7e1991eb0872606f070ace84b6d24719537b0696c6ddf2165a5f4688c839906951ce56833f547139e090efe3155d00209a3837f097e67e303168bf7a222dbaa703f49a202347f9489940468ba5623fde319040c8d93a28d5ef0fe974ed49f1b053644dd00ce2bb86d26e648980c557791a243c5ba75e930ae30b28a47bbcba13e5b1aa5a6d179affaecf00975c952a384a7f2ebe08700e9fc78a65e703c7e7ff56a7dc5518194adb60e139f8084152177a9aa39299b08ceaf0622aba60748e2586c4f2b7ae4b71c69eb31cac6a36e8525a399b16144af7cb0cc5c14a41806ee7ea5a2f701d0185bf1a8cdb9ff6c74ce7c1d49d73980b1c880d24f01ea611f0a6dd9ca9e12149e91177197743b1f7bbbb5db7cdc59388b5197cb643e8bdf92b38b617b5cb1c9c4f24e2b0ce9a9aa56ed74faf30f0df2d3e79781979bc10206642c86501df313744e03b6be5928cd0d80c225d6187817fe799ed45d9b4cd90884ed20e356b3c82f4a879236b3d5cde9116ec64e6bac40da4cfa09df21c0ecec62a3b1bca9188946811851512c8be71269812937816af0ce8382770e6c776768dd39c7eb79b38c66de7055463e07f052e1df0a91418a9e90be34f0c64bc57d446f4cac1b76b534dd2c02244a7443abc296b7aa4bc3de8e4109c67a1ec2b0472cfe572bcb599d1f7ab4498363074ffe785d681b66f095cf8de3d407b3c9b59e540d53245f92f20f0bad433784ef6d2ed57676b707793156ab565c7c8f71f6ae90a76666c78a4c424b33415ece0669b379555fff0388390ce0cfcad7020d175c1e11f3c37cd370fcfa3b8d95860d33a5e24ef6efe6f8d3e29ccf8c4e891b6a6d1c05625b4386a09e1eeee94bbda809714a9ebb9d8950c392e994f07bfac3376ed47e2e542f8260f35479560807117690eff5062730c6277f6c4997a349f44f679283a8cbcb3ab6ea84581887e0c9c29b644cf63ed4780d561ac5ce6eec9513a70c581823e8910fb557fde51b395f581af5d5118f71d5eb9e648b5db4ae912f0e4c00f1d24ff295583d3cf5b683938b03ebb0a54916ace19e09772df0e2d344ce7e6ec7e6e1b772297d44f2e7a7334dcabfccb6fe5d892dfadebab366e22bf6b5112ee2c5e2815ee97315428e4656156434b54aff1829cefcbffb009d72721f70a2f8fb01f704595268d177979001798c2b9a2f3c9bb65422c57b0edd97716e52af5028c08ef80c7273b34124c2c43be528d1e0de379dbf2befb6b94e8949879b25d6ff37f93b1a878538c0fc64a36d8d5c497921633c7433dbebfaeda4c9137cf41b7b564424da9cce700055fd71c25de754a87ee34451b463222d75232da3cb1f516cda9487413ca0a1570522c163fdb97a1e678e94d1ea025107c43cf94b447d9986ce39895f321f7cddafe139784277ce2a2853bae263dbc0b40423fbfaf4e0247791c3ca38487d79cc742fe9c496b05d7958276b5602e8b234b9326cb1913a0c78d17412bd0a27e0dffeda25d6b84cc8d82e88c010a0f2398f6050f79d41638be01658b54949b1097e63a5c27198cd0b1361f18cd4e7363dd92b61469fce997ebf8ecf8ec560cf09b293cc04a044c825072f3abf4eb8c8cf2fd095b973cb8d8e38a86884e00a5f30148754f2fc00f184d603c03348fa574f0fc2097c008b9f500df5f5d3396f6f698181fad86ef6cbeb0b614f1806766c5abe8a7167dfde6249afec0584e270a24c6dea1e2c9eed6adbeff62a581a2ad1901d52c95930377be7cf4de9ef882563595a0ed5b28a3a3984c0b7946009cc7cb72027a430a00ac51f9af6620aa466bbf44794cde6965f40d6634b09d020530d4be7b90a4391d0eec88061ea3721ad00cdcd6d188b87a7674b9be9a660b1219685948d900a3423b93d9b28201d184ddce8ef13f3dbfa89f109d4f7c23a5452c0defa6136ea90ef0694f1f51863b5512b2824805eae115f9a507d1d17fc88a41b837094bec3bab172abebeab198a8c2cd0a5d7626aa1ea781d78d50d237809f055fce87fa74629ff8ec86cd071986b1cccfe7a0c483082b26ce8ca8ab4af6feea7d4619f2692a1e47f3ab9a5a5b8a7a2aad7f814eac4c08b04328e68ac4b0d2265c9af733a5c7c3c46912e93145e09f63918d81f536e68c80f409328a5d2364115d46ffd8e92f7f56b5db05dc6efdd73c7c0c1d98668d885f6e9e7e3ab4be0889e86a6ac170b1b6b1acb1f7d24b0dc0f56551097a6d404a4b0d300ff6bb2124ff0792096763cf0540ed19d4730692d19e743576c7094cacf2e466efe3", 0x1000}, {&(0x7f0000003ec0)="0e90ed120eeed0daad689a97c1fb82d1cb8d532a4afa80414d7fed18616e669e0460e157ec10404b6b1321f12fd407b084fa824bba957c067a4bd974abc1389bfb5d6aae6ec4eb813262eee6061b8031a884c274496b0c2faa0c4d7759db00bceea5fa49e66451a2aae55c5b3671aac5089c10131e92adf3434e23e559a914534a5a7e143ac278d996e8eb906b6ace0f033ae4efea30a6b8489a6dd21c7a3f37ef735496fef6c286dc8de9fe06c3cd92cd93de41d746e0fa6a62172a1de3e56932fa067e857845f0d20e5ba3021d256155f7d28897605e1b91a0a2db50ed76df5112b71a62aaa5bb321a5a19fe7fe1857d5a1668", 0xf4}, {&(0x7f0000003fc0)="088901a5ae357cd20f88be9bd9a6681412cc8cdac9f988693ce95625baf8a54d10b110b4a468e14e901db2465d6ddccb6f0acee1d74f831c666bd1cefae274b8a79707fdc852e1f69e3519881355efb936441574fa92c30f1584ea715e8a684ddd8a0759b1215a6d4110a3e5f95eda5b12c49b0265db0f2d2ce4122658f7f8c4ecf327037458bf15c6497831cfd6d844209f2f39d47e026be25da8d1a5bf", 0x9e}, {&(0x7f0000004080)="b12438bec8eb09d46ed1c1de634dcf9fa5ce6774eca22b0b06d713181a0722e95469369549fcc1b71013acd1ab026427ee15fc7186a85d0f17b17c552ad280f533faf5e568b2f04bbef0ee062d5f242385a489d420308cd970de94ad51493726b03c4de47721e3f3e3c459ee51eb70f4be6407811c33540e8b95dc344033f173816a0a147db890f32453c1e62baa5bfebd620887ef76a244f56ebcc1caad27167c3addd89371a81c6efddb355eb179f995b1dc70cfe5b395126b8f501ca29bab1aaa0457fd13b81ea571fd804c5a43fb45249f1baca32c39ce63cd30f4df1ba992b2b463d441ad318cc6691369384330ff1419324960709ac0", 0xf9}, {&(0x7f0000004180)="6553dfbe6c79a4e496b69e663fc8563f69abda9d5ba00b3ed9491db25931450b4a707c79abf246c14fed5f19b10020fa7d6ca9cccfb1c56d06f4c2c9542127cb6459f6a87611fb551b9afba86a95c6b717a2ac17de1f8b604f37c1f386a2dfd836d3186cbdf277a64e60677b4cc57592a314d014b39a3a54a744b4b187c105313532e6da56d58e2564029d8609921362ac8524c382dc0e0d32a21ae5eaf7db58478ac6ed9f603e58746555f356ad891f6b70695a31d753dc5875f6267684659727fcba03fa3b5f12eda1f43b53ad4436b831b46738f473fedf664fa174cb2cf6259a6bf50cfac808fdfb3449", 0xec}], 0xa}}], 0x2, 0x20000000) socket$caif_stream(0x25, 0x1, 0x5) close(r3) 20:07:38 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:38 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10) pipe2(&(0x7f0000000280), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5}, 0xd8) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000140)=""/92) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresgid(0x0, &(0x7f00000003c0), &(0x7f0000000500)) getegid() getgroups(0x0, &(0x7f0000000540)) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x4741e08d, 0x42080) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9, 0x0, 0x0, @broadcast}, 0x10) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000400)={{}, [@null, @netrom, @bcast, @rose, @default, @bcast, @null]}, &(0x7f0000000000)=0x48) sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000) 20:07:38 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 296.329380] audit: type=1400 audit(1585944458.567:13): avc: denied { create } for pid=8543 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 296.329441] audit: type=1400 audit(1585944458.567:14): avc: denied { name_bind } for pid=8543 comm="syz-executor.0" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 20:07:38 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 296.329493] audit: type=1400 audit(1585944458.567:15): avc: denied { node_bind } for pid=8543 comm="syz-executor.0" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 20:07:38 executing program 2: r0 = memfd_create(0x0, 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 298.266022] Bluetooth: hci0 command 0x1003 tx timeout [ 298.271866] Bluetooth: hci0 sending frame failed (-49) [ 300.335870] Bluetooth: hci0 command 0x1001 tx timeout [ 300.341171] Bluetooth: hci0 sending frame failed (-49) [ 302.415726] Bluetooth: hci0 command 0x1009 tx timeout 20:07:48 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x10, 0x0, 0x0) chown(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x100, 0x70bd28, 0x25dfdbfd, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x50}, 0x1, 0x0, 0x0, 0x850}, 0x810) listen(r0, 0x0) unshare(0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe64, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c46810000000000000000000000000000000000000000000000000000004000000000000000a902000000000000000000d40000380000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc970000000000000000000000000000000000000000000000ffe4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f760a9df60581500"/632], 0x278) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004819}, 0x2400c807) sched_setattr(0x0, &(0x7f0000000040)={0xffffffffffffffb5, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_getparam(0x0, &(0x7f00000043c0)) sendmmsg(0xffffffffffffffff, &(0x7f0000004340)=[{{&(0x7f0000000240)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000004400)=ANY=[@ANYBLOB="101000000000000000010000fdffffff2336a5037cf37da9c6392f957b8870dbaf234e23753da17249ebc9e4a1c7e3d0fffc156265a8592f71671e306970dc2be8a41a1d8aa0e6e53f47d96caf48f01c3e4a1c5b8b184847f7d1a9e0695943ad428306f5273ff6bf314f6c907ae475a709e9f3711f35a1b741f303cb072b8bcbd741f3230dad4ba4e1161bac10d6b958738b0693663bc1fbfd0b8cd806039c4f48e74b6a52a891ef4bd4a805d1cfe10082e7f1d5de9dcdb1ea8ef5a94269b654b5b9497b0fbd1e2edf896312bd8b0bbd2ac0e9851ef4a397141bdb420f0a87d0067528d70d457da56813c952e7522bd899f9c7011a799aca24645ca77496fe386ea984f8cda8232324747de1148ca2dc78ab41fa1377fa2c2fb173b649f59872eb6cf2a4b67f9f0079e7e36460800f56066fa7ac6ae07dbf848c00a9025d88208b9f49e7212b7a622db996d69424efeb0474125da376bbc4689ec798cc336ff3317b0da1645ec88f3df5cbdbd37b82a7959c719f04c4b4edcbef8181a64812458e1f76c7658360c53b00babc0383851be8d20f082236e27371ff9b385d3bcbf8765d1c7c37825edc781c402e3dcfe1ad97d27e1b9072b8834306a6c647015494c953a0fa05866d791e9dc629681a5a7fa32f7b494d3d7393e728667e9d93c1e20e333911201b83f5316e42230563289e639ac23fe5f0e2eca5c6970ff3e0b88f3833d3063ddc5d0ffecf6567c9a09f8d22196e3bf8fc6039e5770ec0ff441e002d0578f439690690da3f4f09880f35d9b5da1a952da67ae853152483b179b4c9ea678d85aaf40893f1597e5e0b6dd0a6d353a2d4ee4668928fa03b35c11a93c87736d9bc2e58759da2ffa7fb0b9b119229d77f8a94e2088ec96c8a4663445631cae3c0e6dca536fed894d323488a181141a381db6fbfb3d22c5a31242cdfae6dc003f09aa9091b22ba4b6b4b804d57094393b9a7947fca55ad21fcaa88817d23319ec7a65a8632e9d3af9620aabca95d7dbdc4c030a63eaf6d2169ce55f4e532c1965289f799e254aa02d5775456ec356e15c7a04de1168001bd464827a1b37085af0415e777df2ec04dcc69ded4e03a762a08b2a30a8d489df478a7d17ff555466b957df8162b40c24989cc4b0a0248c1178b96e9dd011aacb5815f1410df334fdeb127daaa4be2fb1c680bd5dc514ec2b169a7ff45bf2cf74e00f2f509a63e50574b6f7c116a8d070d824fc263f70b73b930ed342885a54f16b5f0f0a40dfcff1c7b350a33e28276acd1ebc7739a5da171902ac75a65bb8bd83ed681d1aaa4b18b8ba307ea22e08bc230c5481ccbb2e2d260931064cd83c082e4377ef040898550351e055d0e074a78fdcf260a2912bfa33dcc6b0f74fed954313d68bd01377cf4852a44916c79b027de6c51da10cd04d09f75bfda0c5354453a33b2204f63938b91ff22abbe8e9c42ec8318084f4b4204ca9487a0fa22346614136a3268aa8d17250e381083ace6641de1c12cff9885c2b5e2bb6ca9126929c727600ded117cfb29acb26cd23288eed987c33cae43cd111d9718bd96f0a9932b5beb8d6b8a8196b7a6835c55bdfc5cb6ca939597c858be92446bdd4b4f0516cd8193e0642511ebae6a563ab85fe49f1f3eff1e7ec3d719b1a8db841c36979a2f82657b3c85c52ef73b1fd0ed57150937494351777df8535f79e9707db181c6f8f1e0dce442e8bb8f8eeb86016f82677df0d38f836a6004daca010eecd773d5bf61147d3cf3f6808a1a72a10d4c93ac777ac781cf43dbfecff5e9f76399d3e24b0b4c0048d0d0f46b487edbfcc79fbf90bb800a2a92f74d32267eec016bb098ec7505952b80e90aab241bba8acdd2cb87bfd01490e66852d856b576c0f0cd4f3272d5a65ec12fd84bad7c9dc054143fa11c7d4c435b27449b768dc8edd4f0ce37002877ac34f2d126050ef7eb573e75fc092fccc8e1b58a485ab111a5f3b27504874a88ebde33ed3b8b5a961d0d998fe2198b9629263c9d8297475754641566fe334edf51cda289418c5226671853ffa5055eb6c9ff362ed6f681defde4a515fb2d53e98fc7d443c3dc8b53fe85bf0315bb55d7e857fc19a8c3b7712b508638586e95e18c8387dc39e4fee390638445c186d4afdade6586aa5174d75d9825d183f94b722580cf66a1d7e00bd7ee5c03a8942717b22aa331877cac4b5fbd4984f70facc194afe22c6c38848df34be4ae6813802ea8eb2427d616348fb863220408ef7cd24b0cdaee7c1ce721ef7018acbc844de5746391ce4d0b8789f115994f72543dcdb0d6e6b843be224c578916dd524f0978c2ef39bd65aea5081a20bd5289673c987755f9db98816b34bd8b57cf56c6b3492170a0e8d0f6f804a9873760b6432678a8a621654934041a8add52eeeec270fd221fdfbf205949e91711ab7f5a9193c9414b95edd45953d69cf9415cdf8ec2eab1e78567872fb9d6a3039b8c84a99cbafcf942aa83fffe70d010f0a676588c13a5649d398515691a1a27fdb3c7260211349f0d5dc1ca22612e72a15d1ac64ac3ef1ed32fe08b475dbd59b454f588700b5a9be633c07302aebbe225c674cb9f2f2cf4b4bdf66d4671656721a40f7c90bd229e6bae4148b841db4b109a7fd0714b16260baae365144abac25263b7088495b64458fd17cbe6845090d52a0bf35e675fa72319dfc2aa23b70822025257e534f9abf9e4e2806930d6eceb4411597bcc7fe0a7d1314df72b258bda8a422c6d110a5149ec964c94b858bec6d87d349069d4cfebbddbd7fdf1ee7bac8aef16391c3215f106c52e5135405587a8898a5e5babf6d5de47866af8c94e6e46e32917aec8e5d5c1f3e2c6d7e43c937ea51040c5e03897c542ca5653d4e577efd9c537dee047eddec5d73cd1326d27a3b926ddcc106acee35442a81f46d4889d8a6db0da8bc461970b6bde45e27c5cca104b60586256b48ff777e42dff411a7e3509ac2cb2b3d1eda2f551d6d4e9ade22ae42c6b9b88251600b62015da011c9393ca4297cbe58dac81c371ec3817c6faf8de2037c05a76e079c31746429914cc3ab7b5f31742d38f51634f9e6f9cb68b16d3858e201d48556f67d2cffa16102194f8f1f3348e2cc7d959ce24ee186fe79b3d37960e8f12e1759c2096f81ed585cef10d382cbb024040ba882e7cfe23557b0458fed9f88ffb0b6cd356b56b376b55fda81010c523d6b1a5d26d5fb2ba2783211ec50c9673391e69cea5b8ebe66f5e1b9d4ac1cc88e86c029ee0fa46e4e13027d465b14ac35afdc0070e380fc053e2deec82354cf01f17a657a33ca71945188830682b4d5861c2102ce9c6c54281487e08e174ac055d52a501378ef5e7b53eefe791d6c11c52904fec56030b0f6bfed19d74092df5600ba8e5e7e022184e887c5e375add8e32b59f156d38c8212e45ed6cbc8369e97ad3a68d36547b71d32868608997dae7e1e7cbffcafd98d4b4069140c608a690a82d8ccb1417b358eb6da49270c4a5d942ede404b18902632aaaeea1ee9f9324c926cd9a3762dfa32616a31c192c8b2361e764d367f02621db5d9e07ab55bf2d88a70450b5d71e9b0e584042ba6a8c92a2b6587703ba56dde0b35eab60f279a87e8a685664f24ca43e2d24f31a7f51355cb857c079b8f737d25cddb1c37cea66f670eec6cc3d8a4501a96987760c93a89b15ed849f29a7a0e39387ce139143fb214797d220cc8c9c26bddcfcaef1b471e696e96a4302e448bc9bb5dec1560e9ffd997e2eb22d3fdd42d92575569ae6f906cbd98c3a2989415f231019e8a50ab819f7173621d9160d04aba2b87c07e3c14cd1883584ad39a9701543e6959244069995b8b9a2bf4e6ea89eb3736baa34122b3052a2cbcb37c832ec8a38253b063ca5287b918575fbee9c4171e899cdbfcae5239cae13fa7a25e5c02a6f57d0e17e3aa3bbf425cb40c5917814291d7edb4d4da57ad44bcce8402f064934774896536bfb847d651b293e791deaf4baf0055b1e1babfe4e82c8d172303b5d1fd68191761740863c78db4cb3d6b5db8bbb0be5726244457b3775f59afe517a983b2f695941e75ae352e3cf2404b24ddaaa057d1a8a153d8a0bb2fcfb415a26bd7a7a9ddee934ca6489e6c679e3701b8f0c1a699dbda08d67c2ee93c020c6a7aaa38a0511ac227cc9e242ce5ae753784536fd6c7a2a2300fde61b985682b4832c280d4014f1d2c0c37995eee75ffdd4bd57af9697e9820fbdadcfb96d7a3b287d98a0951dd4163983ede38650ae4bc19303c939f2453de8c94e96293489ad2d6c02b7399e8bb0d3028f6c4d4e4e20b40731b7c36606a386f1bd9ff5cb22b9da31c40e837bd9718eebfe24d3add499baf81d22d84150003606687e53e867bfd9934d14ce82ecb5e2612d25eee7154d5489abf9e279daeba776639ab7aa51dd60314be8938d77b3fa1d9ad3834edb410ce425cdd120b2b8eb153a30c38282b013405453830882e17930d6b0f1291f3575a50fb0d75535aaae825cc1b82256953397797210d98c836dcaf107ef3c2aa83cb43e4b261bfe31c2a570822662e2b6670a88311eb311fc44cc8a834256327f6274e19af4d6fd5c16c2a8c2518a9d3ebf2bcbf7ac301618353dfc8b119292ef91c26392a660f66150630c2f43a961c833669dbbe330097c5ec1e05c9ad5d64229354fc4040b26c135803b38dc639134b6464c3851591fc045453f2c48937f96248566d63ab4ce7c3d5a23c757c0370dbff5ff59c800bce285ab02561b95595059a75318faf11e9ac8dcdb530baf1285a4256a29348634ce1072b7282b2fbe7afadf0d993639074bffc605da03899810b8557a7939cda42f1e073f78a9e16c766a0345b0729eb3812ffcf8a82322657c554c26a026ee96bbe6265ea9758ed73221efa25fe5731ed1ffa53fe7a2ee8ea44178e4a8a46803581514893fa62a1430901210054ca9c84f874f7f877e84b1593cddef7f78dd0ac7c1a0a86e3c35fab9cdcb4534956ad0a37ff72b8f4b32593a9a354d69a35383722a32a6db8a2afdda0d69630a360e540a7945dd78b21d89596f514390d9f6dde685ae162a203c6066f20ef6e3cf3bdb2e7df314f999c3cea713bd25fbf30fca07002a3daa18060bf9a0c2bf384c0d3da5acd4412c8ba44287bc5c5e8cb685a2f29c574829a159d0c68dd5dd2e8f3b2ababfce12acf44ee899acbeee901410aa9537feebd988d8225208d67753ba8acdda368686936111a1460ab81814325e5495e25d22e7903870b9060045091a00da3e324ac01554c66b38636cd836ec5c2618ef9a78c2357d309a886646b5c85620ee6e50454dc228da2770e566940dce8a427f5e0071b19eb927fe4c8dc6d5ad88b84a1d61609193cb2e50473e560e21ee3e6d70fe1bcc75db95efd9807485a28445189ab4cc3d6ce064e4959b82bd480b98d604c81fcee59cecce51eb3766d652f4a82e7168b4be7a1f91bd06a213e553116b7a7e268c2cb3606a774fcb5be9701a6b0d5a815379ce3f5f3e7ea36955899c678d30dc0161e76bbc0c206298dc47d773d890258c338e870dd90e2e87aefb6f00fffa5b3f74e50d1e13952944e28de7ef5ac5439abfe5e14807303f53776d538638dda128ba62faed5dd0120651f81c72beb02d96a2be14df7029798f4fcfebb0e973ec451241661870050e6ff3a826def4747c4ccd8de9ef03df7f836d853ef6adc9ef2e2f9f452bb696d833c150ba3f78062394161a0f7324edb4b56b696edfa8c7d7ef69c5ec1df3a623ca2cf2ede3ad57a10a5a1a1c0dd38124dc89fb9a5aa1da5bf6529d7176f59be72c86979278000000000000000d010000ffffffff15719e1494509dae9dae7748ead7f29b0de488d2089709ca58e5674d95b7e1f31fdf5c9a4d11e8e4ac5054dba9c348b4b1bd5f03e14505e3fa8abb56bdff9cf95876c2cd868902b061ed99809504bddd6963dc796315f8941e0e1bf8ca430e88390fea8d0000000018000000000000000701000005000000407c4d911d1927c7c0000000000000000e01000001000100439574bbe8528766694beabc9eb9b4b90a8fb9c396683a2eacee2506011a1f1a89df24cacdfd546e2096bf67569a0a5148bbc57c412a00cf75aafd43cbc83687563218615f965c04d0210fb82d07b58fa99bb99fbe1b9d5aa22959f6299380f044e2885c6f8d1e3bf5a38253884a7bfc7869ea9fee9c84d17a0e57dc89a9b6b6c916f0e9c83ce55da73d255784a5129d2ae932f6b12e4168dcc78f282e01bcfb22f64307b2d540347a00000000000000"], 0x1164}}, {{&(0x7f0000001bc0)=@sco, 0x80, &(0x7f0000004280)=[{&(0x7f0000000700)="02de25518db53971444506fcbc563607aa64d4c996778aa7a93603d0ab6a6bfbf8f1b76fdc0c2a3e", 0x28}, {&(0x7f0000001c40)="1a0f6a72a929559b6daf585718e518c423aba9d1d62d84a658a465c92dd6fe2b77ae8263df80b66e04e0748516ed7725f8eb2667b0290a8eb41ed6dc1f3cca01ba2f46fcac02793ae90e68bd3950689eefa7aa1277a4cef3a21d69e562ca6207cd55d11a2fa4c8f1c98ef6391a19af91", 0x70}, {&(0x7f0000001cc0)="56847b5a852c8c032edfc1ba9a5e049986281623d6fcd8bb5bac25e4a661d30cb8003b6e17b38f1dcb2316a5c4edb4bc6a0671088ef70c5c53006d1a61120b3a107b0c0a91f9cda0980755fabb364cf82dafe906a39ba8bd305a508829a83b08f0903e7f150f5dd478efff2c2e0d2c718c944f3e8c93f10954076f4048770d4c746fbffebb98a68f65e624f7023037b4b54c8f7ddefcac946a281f043e520d2e49cf44766783525ba9acf48fdc0cd85d6730d90fc9ac3b9ef0858394fdc77107f925ac074070b542611e97837be2d6558944298d2086493de4f818060e10436855e73a15a63fc7580e76bff570de6bf43b2f90cc96580a63d4278120aef254ed7a5dc41883d91b165da366036c30f3e7776013341d1c94c732dacde6c09c7924b410083aeea4fa2c2a7b42e44cfdfcdd5d00bc00ea58dd8fed41cd14e890b6eb43c1398969ee8d696023217dd28f1ac0caba17c5aa50156bfa3a31aef0e5c9cce9729171621328c7f925fdd2dbb2f3b60568f9291f04ace1a6f2fd5608b7b6e22856ab3f2855d0d767fc449597cd1d20ea9f58f1f56cc7e8f742aeb3203032f3afd743d38591d2ecc8e57f461a6ab9a2d26e44797845a9a4e85ee566d32213d41abd66e1b92e810434670f2a3e34ca42b26390a8ff3127241e6e49d51f22b39a12fd8c1c6f5c0b0a0e537e89211d7bb5127f3dd58255981f70f38e83181c883dcb69b437243abed490ab25ac985d75b7cdfb14331d644ea02c4b1b8bfc57565b97a16ba1e93cf271e66ea5cfa0f0e375d1b7894324fc0cb7657be4e1d4f3a70e5402cfb0a207c1c3f2b7a4d5e23d61d01ae78a2a52f8e5c7837ad3b3b6044c704545149df23654434abcf4cc0df57e50f50096686e3ace83741e09a334afbeabb741d611dcae217805bd97c244bd7321e89a5e3a3634b123d7d416a6a8a2072e9bf6a9eaebc20c60f04d3d69e96c295fa398dde66e2e4f0247196da9ee5573a93211ee5989d61a2193e78a1373ff93a06969fcf375ab37d60ca4a858a24b813fb172624c40a6c08d0b43664c0656d668e6a17b6b191cf075332d58bcdb2e4cc48557f5a559d5b142cb65826b90f079ef6da5787ee460d9ae59133f237409646edd790254a3d3a6b0bfc4ce976ed3ace09fc02e8b283279d669ff75b3dfe359385d0bcc3082eb541b2d257054c040e7e33ee5ce6508ad6a96ea74d853c8362bdb2edf000d046e0e436bea7d3fe3aaebc4d1587a32b986fd861e18a2b56986193360fd3b850c6866f9ffb60355a1318c1cac7441c069ba3e0eb9d2d17f52fba9b7e22224c728c49d1247f951e836c263d2e8b3bc533a002d079a22fb2d4eb23912d2340a40f997f6492744ec495be20c78112c3a0e5e36b7c113903e93ca2ae2bcf614a8244845829ed2513a3f25c06c6bdf0a6357b9088fb8d0b9f6867c384a8640297500fceb09b95ab273732794d01e33c9d16eea027999a0b0cc568da3c593add48632ad66650e16693e7d573e4c17d16e220286cbf8c51f099aeeb9216dbedd2bdd9ee7343d882ae88896d15a996cb79ae14f861b0bc50fbca88971487db24cf31df3a0c681fb410f2070b03dedf8d643121d72520f3b8e86767a973a0583653dfa636fabf7e4f5c3e743a64cfbebeae9405f82191fcc74e398d849493fe11e7b24e4c82b7d30c55ea8b3bdb3ccc39e6c4d76c00e8b218c1aac08ed8333a817fc51ae898e4478c38fef0823cd032e12699d787ac81a6a6731e820f81a8dc3b9e73d16bc7faebd7eab5383513e4ccb57544edf59fa695a73e8f8e2e22dee076188f54f1ac56880050e22e0f3a698ed1f1d10e32f4ced50d3c85c62c99a3e032f22235b4505240c812bc33f5621432ffcaac8fcdde53d72b2bec2e1c9d97efd8934ba62a9475903088555a044908953605996f6bbd8aa70b683a464c41d1f1fc3ad3f3b24375dd62b9227387aeb38eb58c47201537975db0f8132947a15accb72d998b6f11903ceff5d1de44e431aa44493c92396e98261e36a77c626ff8559f6b71ac34bd7344cf1e5375818312c7ec6ece12d9132c167a49eb171eae98ffba39f7a51e5ce51f70b0a5a90b2d9470401922f0a35871562906644588e3d00632c4eeea9e0e1c119216b87895184373937fba8a7d1fa8d6890502ba57efaf52fed7b1c77a3f70db054c4d12ea44600d6bb1edc2f4f47cd03a3013b70932cb86b22295e0a7a25951595bf11b844d5124f3069308191fdc6389dbfbf8e6a38dd3943a5cf114160840fc3edfee8a135445d08ed8b736b39002abcff0bd2d98f17c97dd55a93e2c592052329f6ccf9953c53e8941c2a3e9ed1fe87f7e8b4dc407ee6bfdef61f68b8878b454dfe8ad3c62c7e3994dc1e82e9de22d8994bd705bb02f8d02232b157d371ad496c014921c06c3df3d807a0df579d43089a6ea9a096e37871e4e081f4132e0377c50e62aed8e1663eb6bdeda4f40ae07d8185f2cbb75dac42fbf69eb62d6b0a2677a9eba48a28eb4d6dae70c300ad36fcb943d0d2916655b55cdf70d24f2b53c63804e9594bbe949b3af1dc852f1899cb01ccbfb2d7ee17d30ccc66be93c0919292095f3d965bcbd4bfa1d8d2958ffd467ddf09d2d299cc376d80ed003fba45e4f04311cdb603348e9184280baabbf7f8bccfe1168f3da6e6fd3ca539d4ba0638dedffe78727d36e78db989dfd01665cd7f8cbf6637996c750cf0613062ab522a4b373fd51f6f7b9087dbd405a52b3a4a072fc86352c4b6b2f3f78566dbece7a72d3a90688e0f63516618ed8902442730eed0c56640e02fea33132cd73c2dc8d530d3e994d9813b3de3e633fb69ef3d84aa5a88775ba35440d76cae06a7c20a3d9b66d336e55ba1400b1f8c87388e4f749d3ed0ea29e31fa36731f947f74d9f1b34115b01fe0f2d42968971a394b7d0f178a9eed2e9466234168cd6abd72624a426917e98f9dcf0aa031701edd3f650f7d7ea989c3efa881ac36982b994afb068cd07318e0a0cd1c7df1452e88ea84a960f96c20bc2e5f0afaa09281f185b0fbccaeb74271666f9c4c22d8ced07d85d07744f722b31dda05f459834ae75e5ab24df37d1957986c9d6a68d815ff79b4812e9daa177b359b2215f981c3489b5ef2748efd0fda7afcca33e6763bf6606a8e6b2ff14207f588c38acfafab21c08675126bac95ba393c8c4075e51caa93ab5c0bee4af2913bf401a33034eec82f5348a82342e4fa4d9dce91cf5ee97e4c99aa489726b8e38de2cc372bc7760f9e6d7bb75e65f915666d7f7aa081050e43b56398adeb1f1e577811122177d85d1972e9600da58c6b44f8518f10330cbb6b7a4a629185d36f6a61feba0a1cd2f58dd1cc7a1c28f22c42a47f6c8342d8367caac6aab9ed9c3f460c12da750e7a113e26e829af8f00dca57812ba1878f5838b2261088899d4c162e3a069128eb20ad986af011d38c0886fdb260011e6aca3e722c2804e80aa32e45bd3756938ec1193c7f3955fba7587be8e744a688a4c7ef81adabf72905603b4d95c9e0e3a037796c3e87c5b178869db63f1af235dacbc882d5e7dee62000f50f09d4b4698eb475fb6400f7fdbacf988e50c8f60709f317bd3f3cba4a9780135a8bd0e0a25cca83cb70c8df1adafa9e9b3092dc604679a42016c68c3b4d9f7186510b0bd7e04c7ead10860c74728b7221b465f75613e7740e1bd8f18952b36908905c849f0ad88dc0f53f0cfc4e439197e62a0b2d2906bda852b90671adb906e4cdaf27c17c25d006e6e17b079fd8d221a257b718f37b58e4d4e62c88cad9532c8b98b77833667e5d564ca20722962806d83d1d9315be16fe9042dba970cb020f1775c984d7ff79efdafa30367714af000d9d4ca97b1c6963d28ed018066a3e6b97924dcea8bd22ff3d78976b511bc7341257f76dd1a70fd674b3d637ddaa633d1585b326e44fb073a6b51faf7c9987bee5b06236c88550be0e4eda99746d284bb0af60123c93a806e5882c8a483f2fdffeca374461c2d02cb223c8f33a5a522bd4dc8dd71263810c723d805697f033394b59695da18987346dcf6bbc9d854ab33ce868454295dca9999d0d1fd8f68d46f1ac527336eea128657fb2788b8621bd5b59e7828d22ed9564c8a06502041fdedb78b738126160263f71bf2df8854f5433c56f349ec512877bd4c1854e7e29d9447c9ce843e91e23048065ff3d183d47f278dfebc26e9c32c631056acc35f54a05dfa9f7073eca265985980af96c74702db4ed334a8fffd8e66d87c025d1c2bf97391adc26e16f4910c60234b76749013aa37fe28d7f407ac78586634064a7159d17a31df123c1dd9cab9e2a53abdf45f53c43f0f7e2c2cff8644982f1ef550f90563804da2c1456b2dcb232eb848dc5a9dfadd87bda2f0fb377d54079d8109245c61267a2dae557f45023a1578c003d0effc3f8121785ec3465cc258b36149a7b32f071395a531be653e8a5a0eb511916d24eae3ebaba12f144998c722922525037b92dfb3243035bf003ee04748a71e9e74f9785910e71ad4ce532b86ba604b92b1b821b13d32d606c5d1339b887b935c91ca6c1d1aa1362107db342cfb02372fda508f27f16eeeccca3b323d219c3fa2ca1261cd844b108d48c38e2cc8e17c8e4cde1aea374d3bf12f5529a79fe4d584fb24d43a53ec696b2cd25cbe06e223f583795a1a37dd0bda22ef72e4373be8b679c7a1d6b129cd7cde1153f02abece342e5bf0d6045955ec97c50ec2f5beda2dd25e0c1fd2c52cf4948034db2b89f1da04c7f808bb1a3c289afb2ebdd162617f9edf6b7534e8c0c1400a03adf4be5ed71358c7d62d6943b0ffe4092b382c44adb452c05e26038a312de31e4cfcb50e34d16af710ee76c36b937d4e7c554f62ede0fcb907d3fb540dc479bdf38add5ca5345f1210cc57c40180883b7021fe2ec22715e18f7bd6dcb6d8c360ac6fe7865883d539562fa10931489093a648d0b7d5a7f332adf157ab68d31a6b743b0f53bb165b4877cfe8422c70185bd3220c1dd37196ba6c02aefa7809844d1c35243caf438f53761c84247fbb20b3e0828619a1e44f9033dd64302c30cfa2c238e789e345ea3b9e7916c2270d7db82b473d8a0d1752f4e0c392b02e689a222aeeff326bcba4cc131463c18d17d006b97b4f3439d83d9fec006782849ecf01692f2b33eba16de1a7930eb37aa3e534b1924412131612d6e3f32cff88591f030e8c3121b82e01f59193812155644c9b57195752f9126928aa11e9ae40bfab1adf8589abd4046b1a676d53406647d9f27df76bcd58d4b5708a6f9fae10c3d94bacc9d9a14dc94aab86c13a3c1b4122c225be0144bb4367b0d5075eb542da1fc325cb6de4336877b666ee2706bba7c361a41b499dd8a49ea4596edabd008f9b9f16437daecf9ba347e7aee8b5b0593d1fc587c880ce79af9c7e2752b53c4aff4daee2c9b5e402636791a2bc210a57630cd46e688a53f5b7a7bfe999941afa9b9a710cb3bbd6eb223d3c2e0f83ef738241b20fc4742d90afef100f8ddefe6f649e1d9b9f34c7a32247d7b91c41b57401b3389517d1bda35344a2c1508b819c07d55f606088306f06f8eb3d4919875d57e208cd565ef4063a21c856b075b5e59927c6e11b2167c10a61e3b44e02493bee58ec31e6f93aa37fd05f502e1480604b77e72c4632d0b19c8badf3a340ae04dcf483c91e7765909998c19a5b7b69fe5f6fceeacc3626263a88af5bcaca58b0188c18753e5bc520218f9a523234cb3555b6fc8177fed227c6bf60b122ec3d98bb1bc104623fc", 0x1000}, {&(0x7f0000002cc0)="2c3be7b9f8e73b9d98fbd1e2104a3a2f5cc1f2083fdccde95967faa9f5de7451168e94e250414b2d737e3b223a0af3e2f77a82bb61423466ecc8d2a973d6da59e4feb28878d73c09e76e63c73c7ace4260ba423fd8a1f134510a3a54119074366154bf938728526d3fc102efb2797dee1cdb9938798ff44231c9cfa7d9f8363e7cc7dfd7772217f82c0f7ffc22aa8c25d463c284d9d95fc52a3062554f9a560e6724b46d291183d57880775d29aa89527736e1398c865950d1a3b3e6958f388808ecae33ba9cd07eb70b4eac6a577963b2c52c", 0xd3}, {&(0x7f0000002dc0)="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", 0xfb}, {&(0x7f0000002ec0)="a88f1af00a8d713eedcef996e81ecd8719678ee60a7a447a58642f13298e88b5357685cb72a089b6bb5d00099e91b022308c81d1ef0049b2f8260034644c2410d588d1b5820f4121b50a2a9529e4f7954853020f4ca53b737ffaf0503d3c7d52d3376a9a889af40290e2965380e31c4bb3f228e72e87a7053b29eeeb448b13e92c500db93611479f1df9013895bb8c82f5c9a94034334707bae806cf5817de2573d271ef341d279b770989dd7be5706711852bcc9eef4884b223f0ec736f71d71d1b89366425a67963efe50008b4e437f50ab92ea17bef933ca46e0838680c19535b04744bd939353f44b920284a8c70f717d86c7961b9b10cb54dfbb018c5b72a47903679167f842f22c47b8d1bb4f569c0884600898993e87af3cdf9aba2a661792cb8166ccf9414af739738ddfbb2c6b84bfd4ce9fdb36045af773f7fcb3da98adc5374a3e6de4230ae0921127fdeaca50688c1d0bbac782e6ddc5a569f0590b2ef6aa1b08290fc73e839f8cdde35f20fe7ebb4aaaa1a04948b25215a0ea415056f63cdb374b43db5ae00db4a804eea9a958b12e16d4730260a41787464fa8d0927a2b84450dd4f803085a1055e14064cd2b8ff795b0718d1e349d67ae50d3389eb9bf4b608f508a75d69d199c235331941545a07e449a76f49b9d391c272439d431b9297ec9e6ab03a92de1eff10a1e92727f2f173ce6d053109ae3f1ac66e4f378c92c30ae8c000ae3ab025f2acda73e4e3347ea394104b2cc6d84d3983a5aff2a06f584b5ebf91f8189a3a5c0c7683bacb9d3a1ba016d383fd9021adc01df470abc74b7b341240192f047e191e8aae3a232b20dad26441f7eae69f59286ec6961016320ea87a72c456fb28ddb96c1e98f9e5e52adbf42c8611c7818213ac78db598b3e606678049e29b6d27c3f3197d75f6316656cda3eea124d005a55d6bb50179a540322525abb3426700aad4e8f197448f4b7cfd83fd06ec21f58314c70e75a52f47cebe9af25632df2c698ff5c7119229bbb431ff693a2f5e583ef8540d27865a1a60142a9a7de755f13b83cecde774ed99fa686707f92aabd4372e212d95b451a8cebd7f6e3adef1ea62b4b991cd67cda47bd0cb0ed22a922fd0fc863aa4808dbf70684f64b347abd842e8e5edd941c5fec88032e9a3181a653af687af805a5d6705ae4cff3ab471d91a4d8f560e90c80fd88e9603bc947c93643661ae4b339aaa509f528bd85059b95c2e8f70d979a9fc5f7226d3fbe019ece3f3298d7af65b5793f8a68c3bfefc33349cbf876274388f1c1ac287bdea9810f26c90eea4b024af5a89d89470b25ccdf07fbdd4411e855007b50bf37168ac5759a5f3dfaba24ca84b342c078c83ba0554a41345b9c05fd0f808075d446bd3b97db9e6fbf3ecc964ff8f8cdf76eec76346d8a1bcbe55ad3e9d6284deb1f52da59a0c2638f97bc9eb7ee26b7f6219808d249beb5cad9d5a021a5bdba40b928d42cdab53735108c84d04f64691abfbb6b57302909b70450ed249f76cdaf1ec63c30c7ccd179702c08fd56383dc1794f80b7f49990a2eaf718a4dd6016d9a2ea61e300f41082f2ac1769bd89989aecef397510b74afd1932dc3fb55422ee96d23e1e3a72db977cf0e6fe85891b86daf85eab44c3ec6474ea805590120d6553e09c84513d3ca33d72bfbc0401c5577f5cc3a099d40431166cdc1d59ea94732eab7ff54ecd92ee5a44f6fe7aed1516323e687fe2b9f836dfa04ea579dfc9d24049beb301c31c8de6da656388851e9e8b183a7ac87275ce235432032a36e2e0446f47cc0a29da33653a5df53b30e38111905d87a730dbd7d88b736d8f2df725b940f03a1fb9a60f1dcd518c0b54e21d6dabee6d2b36265157ac47c7ef46f70b10a43e5bdd70fc821da5f6ee66491dac247ed9f56cb4aa49c74acbae84c7b8d06b3793f2990772ece70483047cd443c4c8c1908d2f9a10e6fecdf4d4756d76ba430eed493d74629306f429e3c4ab9f566953576dad984f6fb3dcdc6f01b3234c07804c0d13bfbbf2094b5adb3a6006b8ad7072405c469d25b0be6f47a6643d8f9f49920706b4b9b86bc111e51281a71979ca4041dd45da2988fa0aee20e72dd317d00da7b17a91a89c951a8e30e1a388c1047d077ff93943d16fcb2710b001fd480d286044d75dc1d16d4adaa0b47eee05114f4ec7e86eec1bbb3ad846fb68fa0bd705f8e7e52a96fca31026b050a6c0615a963b7b531542151adcd20c812929dba843c90c9bf5641deefc3fc0bd3e66f886d8ace5f83ce2dcf08fcd17b4343dfeffd87ab7d04342056601bad53cbeda68740adcb14fd24bc2872629c13614fcec9ded6a4366cf2172829e4338df883575af661d72472c66e3f318c95a925bbe1da6831f397f12c09bbcda33a73f749d9c873740a6a461a5ea21f0373b5039a9a20f5472356cc990d2c7272cd03efe2a7fd9bea3be51b2d2ea4801c63935703eecb8e87bb3b9dd57196ff88f773c6e07cc757c516a9edf06921deaaaa13d47f6695e88ce45bb9c77b6902bcf29d60880590badc1344809742dad8ba3c53428ac9a84069d1c59d6c93012b9b4c65c119a397356e7b1e01b0a374b4889067a23e70a1f0e97fe98e1fc1c7a7e64572b1fb54215230c3c816919b950f12676a29d82d64052e3d6bf2ca11c39e6cafefa3545cd5b8680ab93a81bce79d391e7cd62771a58ae2a96575fef191413327ea45482a8da0b19a169b826cdb94a8d8a30eb98d9b40a438e6fc9490cdae27f12773e803cf69bf0d3e4c8d90a676b5ffb600fe0d4307ad148199048aa6d266c0c7e14026a339d830c4553c75ec69b9d9a47f842386c22fb1721e4b8c6142cc572d98bda914325951403289133f6defa439a88758818838f102591e851edf8240aa8f5f467db9fe415e3e14c3525d8d2336666a7c9ec12b476ee0174353e939d256c4ea177dbc6e4e3f6835fc33b00da9cf42f286b461a08624388b89f51d9786aa903e5eb87278d9138dcb36be8a28e15582867c26a7567e39a433b87032a91daf491a393258f1acb44ac485d56122dc566f5401dd3546e65d629a4bede9f84e28e8dc3d1b0932a7dac99740af6e620b3a8cd302aeba417b497ced515c9f90a4ac897e41eb261f03cca51a63a9ba7f93346b53d7f147152c01727ce400c21419bb93a7754df0d2b201a6553cfd097e7a3207a019f579ee0eadc67c549fc0ad37d227c6ef29f8a95434387c8abdfdd8658ce97a98015635f1426c3c44d0e2a8639b83825fdbf592a3472cb7b0a4224337544519704bb4ed451df73b3135d51a9103290e581888fd10628c0ecbd3605cdd296aa3b595f567a9dc04e9dcebccb78160afcfc9ee79885a741491bd58afb7ab6b29f6c4373566c492daf924497b7cb641ed98273702caab0ec0e70e912a7f0c603a12b289ac2ab74a10ddd5b160bd889d6002eb374ba054f81e060ef0767a6fe057597e3df4892c25fa8b6ee885b3e4bd35d10454ef7e1991eb0872606f070ace84b6d24719537b0696c6ddf2165a5f4688c839906951ce56833f547139e090efe3155d00209a3837f097e67e303168bf7a222dbaa703f49a202347f9489940468ba5623fde319040c8d93a28d5ef0fe974ed49f1b053644dd00ce2bb86d26e648980c557791a243c5ba75e930ae30b28a47bbcba13e5b1aa5a6d179affaecf00975c952a384a7f2ebe08700e9fc78a65e703c7e7ff56a7dc5518194adb60e139f8084152177a9aa39299b08ceaf0622aba60748e2586c4f2b7ae4b71c69eb31cac6a36e8525a399b16144af7cb0cc5c14a41806ee7ea5a2f701d0185bf1a8cdb9ff6c74ce7c1d49d73980b1c880d24f01ea611f0a6dd9ca9e12149e91177197743b1f7bbbb5db7cdc59388b5197cb643e8bdf92b38b617b5cb1c9c4f24e2b0ce9a9aa56ed74faf30f0df2d3e79781979bc10206642c86501df313744e03b6be5928cd0d80c225d6187817fe799ed45d9b4cd90884ed20e356b3c82f4a879236b3d5cde9116ec64e6bac40da4cfa09df21c0ecec62a3b1bca9188946811851512c8be71269812937816af0ce8382770e6c776768dd39c7eb79b38c66de7055463e07f052e1df0a91418a9e90be34f0c64bc57d446f4cac1b76b534dd2c02244a7443abc296b7aa4bc3de8e4109c67a1ec2b0472cfe572bcb599d1f7ab4498363074ffe785d681b66f095cf8de3d407b3c9b59e540d53245f92f20f0bad433784ef6d2ed57676b707793156ab565c7c8f71f6ae90a76666c78a4c424b33415ece0669b379555fff0388390ce0cfcad7020d175c1e11f3c37cd370fcfa3b8d95860d33a5e24ef6efe6f8d3e29ccf8c4e891b6a6d1c05625b4386a09e1eeee94bbda809714a9ebb9d8950c392e994f07bfac3376ed47e2e542f8260f35479560807117690eff5062730c6277f6c4997a349f44f679283a8cbcb3ab6ea84581887e0c9c29b644cf63ed4780d561ac5ce6eec9513a70c581823e8910fb557fde51b395f581af5d5118f71d5eb9e648b5db4ae912f0e4c00f1d24ff295583d3cf5b683938b03ebb0a54916ace19e09772df0e2d344ce7e6ec7e6e1b772297d44f2e7a7334dcabfccb6fe5d892dfadebab366e22bf6b5112ee2c5e2815ee97315428e4656156434b54aff1829cefcbffb009d72721f70a2f8fb01f704595268d177979001798c2b9a2f3c9bb65422c57b0edd97716e52af5028c08ef80c7273b34124c2c43be528d1e0de379dbf2befb6b94e8949879b25d6ff37f93b1a878538c0fc64a36d8d5c497921633c7433dbebfaeda4c9137cf41b7b564424da9cce700055fd71c25de754a87ee34451b463222d75232da3cb1f516cda9487413ca0a1570522c163fdb97a1e678e94d1ea025107c43cf94b447d9986ce39895f321f7cddafe139784277ce2a2853bae263dbc0b40423fbfaf4e0247791c3ca38487d79cc742fe9c496b05d7958276b5602e8b234b9326cb1913a0c78d17412bd0a27e0dffeda25d6b84cc8d82e88c010a0f2398f6050f79d41638be01658b54949b1097e63a5c27198cd0b1361f18cd4e7363dd92b61469fce997ebf8ecf8ec560cf09b293cc04a044c825072f3abf4eb8c8cf2fd095b973cb8d8e38a86884e00a5f30148754f2fc00f184d603c03348fa574f0fc2097c008b9f500df5f5d3396f6f698181fad86ef6cbeb0b614f1806766c5abe8a7167dfde6249afec0584e270a24c6dea1e2c9eed6adbeff62a581a2ad1901d52c95930377be7cf4de9ef882563595a0ed5b28a3a3984c0b7946009cc7cb72027a430a00ac51f9af6620aa466bbf44794cde6965f40d6634b09d020530d4be7b90a4391d0eec88061ea3721ad00cdcd6d188b87a7674b9be9a660b1219685948d900a3423b93d9b28201d184ddce8ef13f3dbfa89f109d4f7c23a5452c0defa6136ea90ef0694f1f51863b5512b2824805eae115f9a507d1d17fc88a41b837094bec3bab172abebeab198a8c2cd0a5d7626aa1ea781d78d50d237809f055fce87fa74629ff8ec86cd071986b1cccfe7a0c483082b26ce8ca8ab4af6feea7d4619f2692a1e47f3ab9a5a5b8a7a2aad7f814eac4c08b04328e68ac4b0d2265c9af733a5c7c3c46912e93145e09f63918d81f536e68c80f409328a5d2364115d46ffd8e92f7f56b5db05dc6efdd73c7c0c1d98668d885f6e9e7e3ab4be0889e86a6ac170b1b6b1acb1f7d24b0dc0f56551097a6d404a4b0d300ff6bb2124ff0792096763cf0540ed19d4730692d19e743576c7094cacf2e466efe3", 0x1000}, {&(0x7f0000003ec0)="0e90ed120eeed0daad689a97c1fb82d1cb8d532a4afa80414d7fed18616e669e0460e157ec10404b6b1321f12fd407b084fa824bba957c067a4bd974abc1389bfb5d6aae6ec4eb813262eee6061b8031a884c274496b0c2faa0c4d7759db00bceea5fa49e66451a2aae55c5b3671aac5089c10131e92adf3434e23e559a914534a5a7e143ac278d996e8eb906b6ace0f033ae4efea30a6b8489a6dd21c7a3f37ef735496fef6c286dc8de9fe06c3cd92cd93de41d746e0fa6a62172a1de3e56932fa067e857845f0d20e5ba3021d256155f7d28897605e1b91a0a2db50ed76df5112b71a62aaa5bb321a5a19fe7fe1857d5a1668", 0xf4}, {&(0x7f0000003fc0)="088901a5ae357cd20f88be9bd9a6681412cc8cdac9f988693ce95625baf8a54d10b110b4a468e14e901db2465d6ddccb6f0acee1d74f831c666bd1cefae274b8a79707fdc852e1f69e3519881355efb936441574fa92c30f1584ea715e8a684ddd8a0759b1215a6d4110a3e5f95eda5b12c49b0265db0f2d2ce4122658f7f8c4ecf327037458bf15c6497831cfd6d844209f2f39d47e026be25da8d1a5bf", 0x9e}, {&(0x7f0000004080)="b12438bec8eb09d46ed1c1de634dcf9fa5ce6774eca22b0b06d713181a0722e95469369549fcc1b71013acd1ab026427ee15fc7186a85d0f17b17c552ad280f533faf5e568b2f04bbef0ee062d5f242385a489d420308cd970de94ad51493726b03c4de47721e3f3e3c459ee51eb70f4be6407811c33540e8b95dc344033f173816a0a147db890f32453c1e62baa5bfebd620887ef76a244f56ebcc1caad27167c3addd89371a81c6efddb355eb179f995b1dc70cfe5b395126b8f501ca29bab1aaa0457fd13b81ea571fd804c5a43fb45249f1baca32c39ce63cd30f4df1ba992b2b463d441ad318cc6691369384330ff1419324960709ac0", 0xf9}, {&(0x7f0000004180)="6553dfbe6c79a4e496b69e663fc8563f69abda9d5ba00b3ed9491db25931450b4a707c79abf246c14fed5f19b10020fa7d6ca9cccfb1c56d06f4c2c9542127cb6459f6a87611fb551b9afba86a95c6b717a2ac17de1f8b604f37c1f386a2dfd836d3186cbdf277a64e60677b4cc57592a314d014b39a3a54a744b4b187c105313532e6da56d58e2564029d8609921362ac8524c382dc0e0d32a21ae5eaf7db58478ac6ed9f603e58746555f356ad891f6b70695a31d753dc5875f6267684659727fcba03fa3b5f12eda1f43b53ad4436b831b46738f473fedf664fa174cb2cf6259a6bf50cfac808fdfb3449", 0xec}], 0xa}}], 0x2, 0x20000000) socket$caif_stream(0x25, 0x1, 0x5) close(r3) 20:07:48 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:48 executing program 2: r0 = memfd_create(0x0, 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:48 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000100020000000300000068120000f01000000000000000000000f010000000000000d0110000d0110000d0110000d0110000d011000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d010f010000000000000000000000000000000000000000030106367726f7570000000000000000000000000000000000000000000000001010100002e2f6367726f75702f73797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800e00000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000048004354000000000000000000000000000000000000000000000000000000000000000000000000000000006e657462696f732d6e73000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00000000"], 0x12c8) 20:07:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000002280)=""/4100, 0x1004) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000001c0)) getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) accept4(r1, 0x0, &(0x7f00000000c0), 0x1800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:07:48 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10) pipe2(&(0x7f0000000280), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5}, 0xd8) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000140)=""/92) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresgid(0x0, &(0x7f00000003c0), &(0x7f0000000500)) getegid() getgroups(0x0, &(0x7f0000000540)) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x4741e08d, 0x42080) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9, 0x0, 0x0, @broadcast}, 0x10) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000400)={{}, [@null, @netrom, @bcast, @rose, @default, @bcast, @null]}, &(0x7f0000000000)=0x48) sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000) 20:07:48 executing program 2: r0 = memfd_create(0x0, 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 306.428614] xt_cgroup: both path and classid specified 20:07:48 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10) pipe2(&(0x7f0000000280), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5}, 0xd8) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000140)=""/92) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresgid(0x0, &(0x7f00000003c0), &(0x7f0000000500)) getegid() getgroups(0x0, &(0x7f0000000540)) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x4741e08d, 0x42080) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9, 0x0, 0x0, @broadcast}, 0x10) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000400)={{}, [@null, @netrom, @bcast, @rose, @default, @bcast, @null]}, &(0x7f0000000000)=0x48) sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000) 20:07:48 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:48 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:48 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10) pipe2(&(0x7f0000000280), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5}, 0xd8) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000140)=""/92) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresgid(0x0, &(0x7f00000003c0), &(0x7f0000000500)) getegid() getgroups(0x0, &(0x7f0000000540)) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x4741e08d, 0x42080) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r1, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9, 0x0, 0x0, @broadcast}, 0x10) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000400)={{}, [@null, @netrom, @bcast, @rose, @default, @bcast, @null]}, &(0x7f0000000000)=0x48) sendmmsg(r1, &(0x7f0000001380), 0x40003ad, 0x2000000) 20:07:48 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) close(0xffffffffffffffff) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) sendfile(0xffffffffffffffff, r0, 0x0, 0x200086) 20:07:49 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:49 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) close(0xffffffffffffffff) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) sendfile(0xffffffffffffffff, r0, 0x0, 0x200086) 20:07:49 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:49 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) close(0xffffffffffffffff) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) sendfile(0xffffffffffffffff, r0, 0x0, 0x200086) [ 308.575307] Bluetooth: hci0 command 0x1003 tx timeout [ 308.580657] Bluetooth: hci0 sending frame failed (-49) [ 310.655119] Bluetooth: hci0 command 0x1001 tx timeout [ 310.660946] Bluetooth: hci0 sending frame failed (-49) [ 312.735060] Bluetooth: hci0 command 0x1009 tx timeout 20:07:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000002280)=""/4100, 0x1004) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000001c0)) getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) accept4(r1, 0x0, &(0x7f00000000c0), 0x1800) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:07:58 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:58 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:58 executing program 4: socket(0x1e, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000d80f80)=@generic={0x0, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r4, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0xaaaaaaaaaaaab9c, &(0x7f0000000180), 0x0, 0x0) 20:07:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000140)=0x3, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000000080)={0x400, 0x3ff}) 20:07:58 executing program 5: move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) 20:07:58 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:58 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:58 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendto$ax25(r1, &(0x7f0000001280)="02cb2a800c36490d69404c8c871c776b6848951319109b7f65058814639f53d3bf15673ffa8136612427d9a1a01b28988b2f889b880554a939bf5c3a945e5929952a09f91aa50e7794acdc5c45cd7c9a028480d3df59b53d86289c10ba54b051f83a808753a394ca32c6445c589866074c9b635dc6a0a18ad834724ba0eee1d501bb4f064f5649018decac78c935cb80aaf8c81de7e3ce8676a29140bc85", 0x9e, 0x1, 0x0, 0x0) getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="480e003f0000007e5bc5795eca00", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) socket$kcm(0x11, 0x0, 0x300) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000080)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 20:07:58 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:07:59 executing program 4: socket(0x1e, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000d80f80)=@generic={0x0, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r4, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0xaaaaaaaaaaaab9c, &(0x7f0000000180), 0x0, 0x0) 20:07:59 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 318.734610] Bluetooth: hci0 command 0x1003 tx timeout [ 318.739932] Bluetooth: hci0 sending frame failed (-49) [ 320.814545] Bluetooth: hci0 command 0x1001 tx timeout [ 320.819834] Bluetooth: hci0 sending frame failed (-49) [ 322.894345] Bluetooth: hci0 command 0x1009 tx timeout 20:08:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000002280)=""/4100, 0x1004) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000001c0)) getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) accept4(r1, 0x0, &(0x7f00000000c0), 0x1800) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:08:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) tkill(r1, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x5, 0x0, 0x6, 0x8, 0x0, 0x2, 0x800, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x5, 0x6}, 0x200, 0x6c, 0x9, 0x1, 0xff, 0x4, 0xfff}, r1, 0xffffffffffffffff, r2, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) 20:08:09 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:09 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) ftruncate(0xffffffffffffffff, 0x1000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200086) 20:08:09 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c2e17a606fec68cb7d18ad181867514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56bffcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd11747ffda1a869db7605202f964e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2da0f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e019a5e0b5ec1b1b8aafba090000c3630488edcc4a8cbd3246e962b773a75b28a51cd09cbcb3577fea6f1e9fe8cd2b532c084cbd051b83d8e55580a678c664813354f14a453b093948d49bca31a7170419bb1d32f256ff3010e69b2f0482c63ab7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendto$ax25(r1, &(0x7f0000001280)="02cb2a800c36490d69404c8c871c776b6848951319109b7f65058814639f53d3bf15673ffa8136612427d9a1a01b28988b2f889b880554a939bf5c3a945e5929952a09f91aa50e7794acdc5c45cd7c9a028480d3df59b53d86289c10ba54b051f83a808753a394ca32c6445c589866074c9b635dc6a0a18ad834724ba0eee1d501bb4f064f5649018decac78c935cb80aaf8c81de7e3ce8676a29140bc85", 0x9e, 0x1, 0x0, 0x0) getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="480e003f0000007e5bc5795eca00", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) socket$kcm(0x11, 0x0, 0x300) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000080)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 20:08:09 executing program 4: socket(0x1e, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000d80f80)=@generic={0x0, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000180)='\xb3', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r4, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0xaaaaaaaaaaaab9c, &(0x7f0000000180), 0x0, 0x0) 20:08:09 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:09 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) ftruncate(0xffffffffffffffff, 0x1000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200086) 20:08:09 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:09 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:09 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) ftruncate(0xffffffffffffffff, 0x1000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200086) 20:08:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) tkill(r1, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x5, 0x0, 0x6, 0x8, 0x0, 0x2, 0x800, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x5, 0x6}, 0x200, 0x6c, 0x9, 0x1, 0xff, 0x4, 0xfff}, r1, 0xffffffffffffffff, r2, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) [ 327.455435] NOHZ: local_softirq_pending 08 [ 328.973979] Bluetooth: hci0 command 0x1003 tx timeout [ 328.979333] Bluetooth: hci0 sending frame failed (-49) [ 331.053892] Bluetooth: hci0 command 0x1001 tx timeout [ 331.059443] Bluetooth: hci0 sending frame failed (-49) [ 333.133753] Bluetooth: hci0 command 0x1009 tx timeout 20:08:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000002280)=""/4100, 0x1004) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000001c0)) getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:08:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) tkill(r1, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x5, 0x0, 0x6, 0x8, 0x0, 0x2, 0x800, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x5, 0x6}, 0x200, 0x6c, 0x9, 0x1, 0xff, 0x4, 0xfff}, r1, 0xffffffffffffffff, r2, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) 20:08:19 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:19 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x208000) r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:19 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:19 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) fcntl$setpipe(r0, 0x407, 0x1ba) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x40000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000140)) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 20:08:19 executing program 4: r0 = creat(&(0x7f0000002440)='./file0\x00', 0x0) r1 = creat(&(0x7f0000002440)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xfb3f) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x21a801, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001280)) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) tkill(r3, 0x20) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001300)=0x0) r5 = syz_open_procfs(r4, &(0x7f00000012c0)='fd/3\x00') getdents64(r5, &(0x7f0000000280)=""/4096, 0x1000) sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="7a8e5048feee308a698b9215f3e3511809c60bb060746b7625c99e9118515aac50bf7e9841ee77bcfcc5b562dd7a", 0x2e}, {&(0x7f00000001c0)="c11ea34b3f0684703b2c68341f30b482757b30e388dc79a7d258029a951a17b9b596185c13cee56954076f46421a274612974f74b65a45df404954f2a681dcf8107db0d8a56b7781e9528ffe", 0x4c}], 0x2, &(0x7f00000002c0)}, 0x2004c190) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000080)) fallocate(r0, 0x8, 0x0, 0x8000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0xc000) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000140)={0x6, 0x7, 0x0, 0x8001, 0x7, "3070885953f303aa08ed12eb63bcf276812796"}) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73792deea9b5a0afaa3a0900309798229037114fcd546baeb2acbb174510b8535faa6fc3ae73f5bc8a0000000060c28e5a2e0b8394896cc52a148c00"/70], 0x4) 20:08:19 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:19 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socket(0xf, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f32f00fb30f0f309a0900000065002ed8ddc74424008f6dc4bd8787442402c43a727fc7442406000000000f35f30f090f013a360f06c4c18d72d683b9070200000f32ed", 0xbfc7713255079c2d}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x2, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x4000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r5, &(0x7f0000000280)=""/4096, 0x1000) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, &(0x7f0000001280)={0x0, @data}) readahead(0xffffffffffffffff, 0x9a45, 0xba) setsockopt$CAIFSO_LINK_SELECT(r5, 0x116, 0x7f, &(0x7f0000000080)=0x34a, 0x4) 20:08:19 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:19 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) sendto$inet(r3, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = dup(r4) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x200002, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r7, &(0x7f0000000280)=""/4096, 0x1000) poll(&(0x7f0000000180)=[{r6, 0x8149}, {r1, 0x8012}, {r7, 0x1}, {r4, 0x80}], 0x4, 0x1ff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 20:08:19 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 339.213679] Bluetooth: hci0 command 0x1003 tx timeout [ 339.219037] Bluetooth: hci0 sending frame failed (-49) [ 341.293395] Bluetooth: hci0 command 0x1001 tx timeout [ 341.298729] Bluetooth: hci0 sending frame failed (-49) [ 343.373194] Bluetooth: hci0 command 0x1009 tx timeout 20:08:29 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@remote}, &(0x7f0000000140)=0x14) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) perf_event_open(&(0x7f0000001280)={0x6, 0x70, 0x1, 0x2, 0x1, 0x8, 0x0, 0xffffffff, 0x20000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000, 0x1, @perf_bp={&(0x7f0000000180), 0x1}, 0x900, 0x1, 0xced4, 0x4, 0x4011, 0x1, 0xfffd}, 0x0, 0xf, r4, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) openat$kvm(0xffffffffffffff9c, 0x0, 0x10500, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800e00000000300000000000000000903000000008e1504aef0279d6efc4c76785c5a0090a732b637b728780093d0810c77eaf7e61623518d9968a7b9c84b5f1261b954eecf683312daf4b231f7b846a095804970175504723d88e40b897d40fd587c4fb4d5feb67089fb0e5363b167a5b1028dbc346710ad003536"], 0x0, 0x80}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 20:08:29 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x3fa, &(0x7f00000002c0)=[{&(0x7f0000000180)="2e00000032000908d22780258c6394fb0124fc0e10000b500c000300053582c137153e37090001800a643000d1bd", 0x2e}], 0x1}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) tkill(r1, 0x20) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/sco\x00') ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000040)) 20:08:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000002280)=""/4100, 0x1004) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000001c0)) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:08:29 executing program 1: r0 = memfd_create(0x0, 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x9f72afc5198e68b4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100)}, 0x0, 0x9f, 0xfffffffe, 0x2, 0x8008, 0xfffffffd, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x800008, &(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',fscontext=sysadm_u,context=system_u,\x00']) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x200000, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f00000003c0)="b25cac3f0dca612606289ca0373d020f789ade61c1b6a8fc754fea83802eb5b0f20ccf2141dfee", 0x27}], 0x2) r5 = creat(0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, 0x0) 20:08:29 executing program 1: r0 = memfd_create(0x0, 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:29 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 347.344598] openvswitch: netlink: Flow actions attr not present in new flow. [ 347.378151] openvswitch: netlink: Flow actions attr not present in new flow. 20:08:29 executing program 1: r0 = memfd_create(0x0, 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x200040020a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) setuid(r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000001fd8)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x10, 0x0, 0xffffffff}, 0x10}, 0x78) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r8, 0x0, 0x8000, 0x2) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000740)={0x4}) kcmp(r10, 0x0, 0x2, r8, r7) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000ec0)=ANY=[@ANYBLOB="7f2626e991039ac75e7a2053aecd7befa7b8f25afa0b208d6447cdfa3be748a27546638533cfe5e489af81690d90890a0c4dd9f64f9f493954c993040865c48c8a1bc91f6597d6b15e8225bb4b86d6f6c4f1d533200d3ad974c85653edd00022aafc5d4aaa3be22d6a59e2b078d1eda69c077d7cdef60000c941de38d2c2f2602ed7eb8b9c3b0cb26278001e0ae733afda64f2a53fb8753d5f07a33068d95e9bdca24b5e393f008ad4f052a2085085744186e34d5150b5b519a2e9d7663219eef5e5cf64f66493fba5e579a07e", @ANYRESHEX, @ANYBLOB=',ro000000000000000010000,usr_id=\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB="2c67722c757036a7aeaab70900000000000000af42572ee4dafed69ce75ea022bb333d48010400000000000043c859cf76e963547629164f261bd21f032ce060447949ad052371ad54cff9293f997b262e5ab3af48aaa20dceb0267f4dbecbc30740f99fba6200ef145b5d42212c7d0d858bbe0d8d89799b8c8bc8b6f931c7204ecfb72223e584921270bfdb079355a193a86e814ee95d28f2adfbc481ba57ad9a74a31a8c0cfbefd5d9f1a06db8f8899f59c6230acab0d99b42d1199eff2c124039e96b272e610001000015efd08cafa9e2f06c7320b04ae8c72790881c2a42fed6d2ed979a947c", @ANYRESDEC=r12, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB="2ca3d526c246b71b73723d7b6261630000000072616e736d7574753d2f6465762f6b766d002c00ae3ad4bce20971cc0567d813ecfd861a6120e4dab49e2f919dd8aa9aef019450a3b05f977ee65f01000000f061bf91999b942e04792d53cc23b1cb6347369444bc39a00634820a70faa90697774515ddbfe72bcd34488b253bee7101ca59d6fb269f597cf6eeb09a10c4c41e85f2ba912153b80dac76c5b5eef800"/176]) setgid(r12) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00', 0x2000, 0x100, &(0x7f0000000600)) stat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000140)='./bus\x00', r11, r13, 0x800) r14 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffff8000, 0x1d}, 0x102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r14) 20:08:29 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x0, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:29 executing program 4: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:29 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x200040020a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) setuid(r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000001fd8)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x10, 0x0, 0xffffffff}, 0x10}, 0x78) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r8, 0x0, 0x8000, 0x2) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000740)={0x4}) kcmp(r10, 0x0, 0x2, r8, r7) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000ec0)=ANY=[@ANYBLOB="7f2626e991039ac75e7a2053aecd7befa7b8f25afa0b208d6447cdfa3be748a27546638533cfe5e489af81690d90890a0c4dd9f64f9f493954c993040865c48c8a1bc91f6597d6b15e8225bb4b86d6f6c4f1d533200d3ad974c85653edd00022aafc5d4aaa3be22d6a59e2b078d1eda69c077d7cdef60000c941de38d2c2f2602ed7eb8b9c3b0cb26278001e0ae733afda64f2a53fb8753d5f07a33068d95e9bdca24b5e393f008ad4f052a2085085744186e34d5150b5b519a2e9d7663219eef5e5cf64f66493fba5e579a07e", @ANYRESHEX, @ANYBLOB=',ro000000000000000010000,usr_id=\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB="2c67722c757036a7aeaab70900000000000000af42572ee4dafed69ce75ea022bb333d48010400000000000043c859cf76e963547629164f261bd21f032ce060447949ad052371ad54cff9293f997b262e5ab3af48aaa20dceb0267f4dbecbc30740f99fba6200ef145b5d42212c7d0d858bbe0d8d89799b8c8bc8b6f931c7204ecfb72223e584921270bfdb079355a193a86e814ee95d28f2adfbc481ba57ad9a74a31a8c0cfbefd5d9f1a06db8f8899f59c6230acab0d99b42d1199eff2c124039e96b272e610001000015efd08cafa9e2f06c7320b04ae8c72790881c2a42fed6d2ed979a947c", @ANYRESDEC=r12, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB="2ca3d526c246b71b73723d7b6261630000000072616e736d7574753d2f6465762f6b766d002c00ae3ad4bce20971cc0567d813ecfd861a6120e4dab49e2f919dd8aa9aef019450a3b05f977ee65f01000000f061bf91999b942e04792d53cc23b1cb6347369444bc39a00634820a70faa90697774515ddbfe72bcd34488b253bee7101ca59d6fb269f597cf6eeb09a10c4c41e85f2ba912153b80dac76c5b5eef800"/176]) setgid(r12) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00', 0x2000, 0x100, &(0x7f0000000600)) stat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000140)='./bus\x00', r11, r13, 0x800) r14 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffff8000, 0x1d}, 0x102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r14) 20:08:30 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x0, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 349.382819] Bluetooth: hci0 command 0x1003 tx timeout [ 349.388100] Bluetooth: hci0 sending frame failed (-49) [ 351.452752] Bluetooth: hci0 command 0x1001 tx timeout [ 351.458055] Bluetooth: hci0 sending frame failed (-49) [ 353.532802] Bluetooth: hci0 command 0x1009 tx timeout 20:08:39 executing program 4: r0 = memfd_create(0x0, 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:39 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x200040020a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) setuid(r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000001fd8)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x10, 0x0, 0xffffffff}, 0x10}, 0x78) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000540)=0x38) fadvise64(r8, 0x0, 0x8000, 0x2) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000a80)=0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f0000000740)={0x4}) kcmp(r10, 0x0, 0x2, r8, r7) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800, &(0x7f0000000ec0)=ANY=[@ANYBLOB="7f2626e991039ac75e7a2053aecd7befa7b8f25afa0b208d6447cdfa3be748a27546638533cfe5e489af81690d90890a0c4dd9f64f9f493954c993040865c48c8a1bc91f6597d6b15e8225bb4b86d6f6c4f1d533200d3ad974c85653edd00022aafc5d4aaa3be22d6a59e2b078d1eda69c077d7cdef60000c941de38d2c2f2602ed7eb8b9c3b0cb26278001e0ae733afda64f2a53fb8753d5f07a33068d95e9bdca24b5e393f008ad4f052a2085085744186e34d5150b5b519a2e9d7663219eef5e5cf64f66493fba5e579a07e", @ANYRESHEX, @ANYBLOB=',ro000000000000000010000,usr_id=\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB="2c67722c757036a7aeaab70900000000000000af42572ee4dafed69ce75ea022bb333d48010400000000000043c859cf76e963547629164f261bd21f032ce060447949ad052371ad54cff9293f997b262e5ab3af48aaa20dceb0267f4dbecbc30740f99fba6200ef145b5d42212c7d0d858bbe0d8d89799b8c8bc8b6f931c7204ecfb72223e584921270bfdb079355a193a86e814ee95d28f2adfbc481ba57ad9a74a31a8c0cfbefd5d9f1a06db8f8899f59c6230acab0d99b42d1199eff2c124039e96b272e610001000015efd08cafa9e2f06c7320b04ae8c72790881c2a42fed6d2ed979a947c", @ANYRESDEC=r12, @ANYBLOB="2c6d61785f726561643d3007000000300230303030303030346331392c626c6b736980653d3078303030303051303030303030303630302c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee00, @ANYBLOB="2ca3d526c246b71b73723d7b6261630000000072616e736d7574753d2f6465762f6b766d002c00ae3ad4bce20971cc0567d813ecfd861a6120e4dab49e2f919dd8aa9aef019450a3b05f977ee65f01000000f061bf91999b942e04792d53cc23b1cb6347369444bc39a00634820a70faa90697774515ddbfe72bcd34488b253bee7101ca59d6fb269f597cf6eeb09a10c4c41e85f2ba912153b80dac76c5b5eef800"/176]) setgid(r12) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0/file0\x00', 0x2000, 0x100, &(0x7f0000000600)) stat(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000140)='./bus\x00', r11, r13, 0x800) r14 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffff8000, 0x1d}, 0x102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r14) 20:08:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000002280)=""/4100, 0x1004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:08:39 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x0, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:39 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x40000400) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x1a) 20:08:39 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:39 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(0xffffffffffffffff, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="660f382b1a0f01df0f300f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x25}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x40}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x3ffffffd, 0x0, 0x0, 0x0, 0x4c7, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x3, 0x0, 0x3], 0x10008, 0x300400}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:08:39 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000002280)=""/4100, 0x1004) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:08:40 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x4) openat(r5, &(0x7f0000000380)='./file0\x00', 0x0, 0x10a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000d6d43ddffa06e338e0c7cb418283d2acab4a18af358d1a2a440a801702e6875f2da6087cf393e65fd1c3974400132451e8b69d5e48f90c14c7ece9391d9195374405381e585223ce4a69ef9f9edab4e814641ac17b5f0c58fde307d4d6e66c939f8d1c03b28aa6d1420d1d03c0cf444c5580206349ca847d5d83d225e38afa6a19b04552b3446cefe0af0094f4841750cd79511300c61beb4168ef2b72bb64085da7f118ef553b57ab01580d6b2091b955acf720691c98738dccb65814720430256b52db2241c243bc1e64deaccf230db3a3027f2539a0a281a1dea9602c6a8c"], 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r6, 0x264, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48010}, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4c, 0x2, [@TCA_RSVP_ACT={0x48, 0x6, [@m_vlan={0x44, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}}}]}]}}]}, 0x7c}}, 0x0) 20:08:40 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) r3 = fcntl$getown(r2, 0x9) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=r3) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000002000)=""/4096) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200, 0x0) close(r4) write$vhci(r0, &(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r6, &(0x7f0000000280)=""/4096, 0x1000) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x4}, 0x6) r7 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) dup2(r7, r5) [ 357.904541] IPVS: ftp: loaded support on port[0] = 21 20:08:40 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:40 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:40 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 357.997709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8980 comm=syz-executor.5 [ 358.051972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8999 comm=syz-executor.5 20:08:40 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x6c002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ecf0829800002665f30f008f6300a6af02660f3a62227d0f20e06635000040000f221a260f0350000f01cf", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x4c8, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x4000000, 0x1ff], 0x4000, 0x2232c1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r5, 0x0, 0x63) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000080)) ioctl$KVM_GET_DEBUGREGS(r5, 0x8080aea1, &(0x7f00000001c0)) 20:08:40 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:40 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:40 executing program 5: mkdir(&(0x7f0000000740)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000800)='/dev/bsg\x00', 0x0, 0x0) setregid(0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0xfffffffffffffe16) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r5, &(0x7f0000000280)=""/4096, 0x1000) sendmmsg$unix(r1, &(0x7f0000004bc0)=[{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000300)="96ec2a6c16f56e86fd4b4d3e96c1f5894f013a52b424d9295250a4b6bafd9d6b6ab970785099599a1a3e9fd315de16ff7e8c6714c903972d33f39987620f9924a03d1ecb1d34dcf4fb83a7633da52433a3aa015c2a372be56f8b4091004dc9e70b6e0f2ac9f18bd79eafbaa75728228d2c8ce7318e079ce80a4b1a82f46aebec4f8e3a7f8e2f9bdc637d2fe8f4ad568ed75aafe024baf5faa4a7b305447af2f6abfeb265766972a0122dd1fe9ebc2023b619c133631538cf50bb5068543cf6c3bc30cab785c5b4788c14f9d96dc32f038e031e30da468db3ca4c3e18a1f6e61e7c903af2320806fd24", 0xe9}, {&(0x7f0000000400)="855b68f38c857c5a8cd63230d1781b17aca8340f023ffe4f345436fa83bb173f3e2f6cd620e407a43a57bc47073ed32406dd2253f370d7fb7f30cd63339b482bdb1b533a37d82d490763d31eb077d322ccca861688600145dd9c23ede371d7", 0x5f}, {&(0x7f00000004c0)="68962346834c7fb614ea1fc945d006952e8195e13dc81702f2de2dcf0f9e74e05589cf778acd769f42b8d9b224ed86ac23e5d1fde235c5500c01308d7f17ea1b07d22d74d5d1302c2435c092b4a40ee07f957be4c701a0011c4462e59c70ee536d4e9b2e5845fc71a89b4d81b2c4bf8d708411bc56e775de0168798c84b74b0433499cd4f3df2ac859822d983c84c7a6cf3ccf159e4a", 0x96}, {&(0x7f0000000580)="113b2b0cdc22033be8628c179f7889d2a43b5862be28a8269746cf1c96c4a97b40c8e38c387c345e8797de2ff5bceba8a63a2ca99855692cb832573cb60a5786b306ce287fefc425aa9cfefc5261f5d37a58b4e41d2646584781d671f9abc997b742ab1dd9e2978de93feb04d618035eae1df7bdc5749780ff824eb39a41ed3c12356c08dc91fb1f7e83d033f1ecf12c452fd185ca9b114cc0433fefdb66d0395cf6798539cb9daca2723812ac385d7d3ff5c914e1268440a70f4c3ff2060c211fb968f6f2493314223f7d41f239cbe68ccfa2769cbeb83a79bdab58", 0xdc}, {&(0x7f0000000680)="48464a07290aece21a9d11f8eee5ee11c60bb3940f792236f182d8d753820fc5a5bc005c8131311e35a6967ff5c205e06380b8ef30505614fae6e715f28e09ea29e4d20d57017a49cbdcb1070380acfc79cbfc184ce07473f71ab86196b4bb706435bb3406175b846cbabb518717fc980a51ff44e7ca75d5e3a13ad7f12e5a67f3f846091469798f", 0x88}, {&(0x7f0000000900)="fd31fed0def9682f5dc3ca8216a68f293d3a392a4ffde2693437fbf4e06da0e38af2edf1fd35445008910eb9b44f12ee5accb322ba545fe178fd60e5ee4b83997089f63e39eee9d4c99c510352b43402737def495c4a61b1cca47c788f1b64ee9398bea91bf640e9ff38fc8778b5aa047c4658f42caa145bde41ea7d14410af04778cec17a4022f86ef4b0b710c8ec9af32db335fb13f69933abfa9429091ef6ada984ae33fb654fb5019012b1b4b18b5d8196c42124c666555f1fa4c46395143f5aeeffb186766685d1178eeb", 0xcd}, {&(0x7f0000000a00)="07ee785ead65f35881d097e5a8bd94efab41c07d14f391cef8b8cdbe2ac03cd05a9c7280d8aa467c0c210acdb1be462e517669b72d0b2e51a9c73c119f277fb4ea94f5a74b1fc24cbc963ffee09d3d6e5833f725d3f6380f13cc8c652199a0f82040fd4578b13c12798880d3df5eeb11eaac2da9f634ac13c59523a73d36cd5a0a6a35c0d6f13095f2a37ee8913cf320074a96f2a70a67596e", 0x99}, {&(0x7f0000000140)="f98f9db2a12dd9ace52d2cadf2dbcaf8a7f639", 0x13}, {&(0x7f0000000780)="324a2072dae5e1a8dcfbc9d4854ae023de9ffad6369c7ea8c04e63b33a24ad9f6610b23a08c0ae15d27fd5d1196a36a0af90cf53b4ce46a74bc326d4f32ecc4fba61aaaef369dcf21ed7de3d20406d61927647f7d17e908fbdfaa988ded587ecdd8925b9198768faf2ced62a956b", 0x6e}, {&(0x7f0000000840)="8623d1f3ee4f2aeaecf3d157bbc61da153e4596235ac5d781ec797a55b20df7f54e012de3ba8aa4186dd7cd887b76a40f221161bda999d0ab3f6fb569f040dee678a09b16c152b2710d2db55f17f383c", 0x50}], 0xa, 0x0, 0x0, 0x4000090}, {&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000e00)=[{&(0x7f00000001c0)="13b93f208e58bc26948f2165315b4175e5f08a749b906a86f980997227a58f1fd7e22a7e353e01957e48b9e59347eb91ec9e7f5352e2428ecb47", 0x3a}, {&(0x7f0000000c00)="d3d762188ee4ab0038cfac130297b5aea29ce9c35b14ebd4642a8d619a39bfac03f549ca87103db306432fc379d0d870742544e60cbe09d2aac76f3219e82e68b83b220cb76af040734046cec29523d2033b21d89c1c524c32638f1bd7f5214314c7dc84818921a8f0df3c9ba0a45db53c5ce1c377aabfb795cb013c825dace4b50edf30da5778630dbf392d54b915df7530c9ee57146f9daa3082b2718bea02e0c58a025b1cd8a925e3e952d10eacaf8ef2b815409645bda20411af14fcafeb396cd134a1ca40247d6441aeda60d6ed5f81b086337b8bdc2498bb0632cd8fbd64526748db289a88681ccfa79221919368a3d49788", 0xf5}, {&(0x7f0000000d00)="bdbed475dd34cad040749488214b9319e806e9cc0114a7786008973809be7a9da3b6b83d4ff6b7bdf8398f91cec36d5a667d3d86f138ec61dadca22ff8b4bd2f8ed03cd6bab24b10dfa76f6458e6a4ea7b86c239069e330e8b97db1de3ed066ee9338eaa81fdbad072694cd413a5dd006104e264ecf06058e3c457acd8365767503ba3627094d32a04f6be8c716b139ca9b3a3e07aa29d194648852628acd509f2cbbae2b6328e9dcc53b9eea7709bd7979cff59dd06f62d30314caed44e0b28d30fd0dc2428ca72cc2f459c6fa3ccf21a1a23d847b957cfcab8c1b1477f06e8cfbfea1e2ab2e78d58a073d29c4f56247a2f4bb202886c", 0xf7}], 0x3, &(0x7f0000000f00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80, 0x4014015}, {&(0x7f0000000f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001000)="5ef27a50dda92962d0969050bcc260c4e2af65f0b3c0bfd6ffa6ec83d2233b1acb7781217e9efbe7fd23e570921bb0ebbacf488b52725698ee706ed8320fe9421072a93eb504912e14694de8793f75f204ce05d22427db3bfcdc025b569618221d937527f1bc7b42cfb46b5a19a9283ba282972588f1a84ff996775404ebb3d72e0530e5b7b4c5b7b786fb245c276960f61206aba74678df4d0174a2309fe7cae08f217375", 0xa5}, {&(0x7f00000010c0)="95899fb1aed47e858548", 0xa}, {&(0x7f0000001100)="99d5fd97b54d1fce5a5c4e9f2e7abdbf86a1556b14b2cfd341889fab77962b5fec78cc1681eb5bf814a1381e2293d8ba7f7d1e7a872b5ba4d6985f3f28979fa44c47318ef3507fc8c1e5dd1e6bb089794fe456aeece24d9a37b42d92311c3044a80f74161e72d7bbd49f973e3035", 0x6e}, {&(0x7f0000001180)="dca264fadbb1ddda7da3fc990729df9fb1c8270414ec224013e903f4b860bbf265f8ef07f08fe55dead2c892da7fa22b6c07b7dd4240", 0x36}], 0x4, &(0x7f0000001200)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80, 0x200000c4}, {&(0x7f00000012c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003480)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="f3eb7b815de9f0de4bf0d930d086c40bdd2144bd233c022d459a393f1d800692", 0x20}, {&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000003380)="df55b5cef963d5015351996c2307c1e5db45f32eedbbe260342bb63d6b024943d0bf2e4f181b0c27638650cae9e6060ec9477af3465680b7c86b334726c4525287bf00b2ae24fdce0b41f8fccb0f014c5cf165b5d7027491ce6624bdd8d6e881d36d0aa0310e9f53ba0d43a9725fb2110636f2a44dd854ebb5cd69e1f68407604a68ba8b4ae42219fe7cda0c1a09b20a367d0c3f6a1c98ab8f2a77a865cc977fe9153f04052cb36ae0c9961508ebb0dec07bbd7df5e65a7c63703110efebb16edad02adaa7fd016f725b79edee3937f803a45435b94c67ff47efbd03ddd230b1e5bc96ca79619eaa0c4a98e9a5d9", 0xee}], 0x4, &(0x7f0000003580)=[@rights={{0x20, 0x1, 0x1, [r2, r0, r1, r2]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58, 0x20000000}, {&(0x7f0000003600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003900)=[{&(0x7f0000003680)="650f40190476f47d7f371e99df0a18c258c5f1a329dbe52c8d1e89f8ca738c9893e4266773e34d3dcf6df44922893297a3966b0e840ed6854ada30a449ee93340cf247efe79f8edbdbe9a2dd875125d87faed12f828f7f2cc6e05f536212d1b0947c06abea1486493a2e8fb01f20d69b434ee96d036e191b702e62b20ce59b0493d81636c2e941d278693d5bffb07480c98b4a84ea9e465a3291be1a0698f92cb25d50e24f", 0xa5}, {&(0x7f0000003740)="2d716a4492ba9194a8d64ce068cb0362444a9745d594a2ef503083e72f311e88b97ee794e9f8bbbb78c1a1c76e4fac0ff8e71578b4fe23b83fc2f04dac42e2ea0a39ca1b383b54a5fefe85707b5cca663912d348b06276ca0b447e5c102d659da05edb836776edb8b6de5c1326624b1d3822f2eca62d4f313e4f6fe848b9ed7d028074a7c7506ea13de56f9c5c596fad4a4355f488a596495bee7c4ae4835ae943108423c65afa4fc2dabe57405fd90f8bca64ddf74e6fe2afede1b3cc0fb4fb64ef4bf721c98f41", 0xc8}, {&(0x7f0000003840)="2266922a4ed648783df7b9b6b2f5d81800ec236dfdc8e7706c203fff5fe39a1dbbd4d5aad4b6ed95e3a38794581c11cae931863939f16b7b463a805d97890ace05ff5c808c767e231647149294d1007e90d66275fb2e62678cf6988db962464221c0595c5c00eeb4e45505f1dfaff8a505519c74ce09293b5ef65919d1e61c32eb944bc8ef4241dcca1cdc07d32a4b27eda1a66fc45221fd727e6990", 0x9c}], 0x3, 0x0, 0x0, 0x80}, {&(0x7f0000003940)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004b40)=[{&(0x7f00000039c0)="fc9a2e607b1eafe6f12edb392b90b78c5a0a91f0c58a170b76e3678136eb50a2a2c6989257b11b44bf5b9c49472d601cd5625c1fb755dc005f5f02f3c2cd35dd5847aa6444e81010c7a8a1900b8fb23b4219eee7156bae622325e5e20f05b4cffabccb929ac62a51594860e69d0fc3a8b7d7f88bba5ab3740c512b89055b63b186bd59cb1d34c95f1307ee414c79b1b3001950bedd590c30f21390b6b81a85a6baba052e42371db0d5e2bb6e81fef07de52a91157472919d2091797d040a012bd5c53d49b495ca86bb6bf97d90a398f7a660c74441f7ef86cb2f36ff820b8913f660ac866f85ad70b0aa762b90b8a409b3", 0xf1}, {&(0x7f0000004ac0)="d2062058e19569aeb417e24e7b711aa43885e2e9e8d66e87d4900206eae4b0a6157a416826b41f29e66e73a29693d5ac2900dfbc0a7469d8fc92b6b6dcb499e143ba28e65004daf95a7492fdbd343edf872e4295b63ebb161a241852167b3a960b7137424f1717", 0x67}], 0x2, &(0x7f0000004b80)=ANY=[@ANYBLOB="24000000000000200100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x40}], 0x6, 0x880) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x0, 0x5, 0xff, 0x3}, 0x6) 20:08:40 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 359.852358] Bluetooth: hci0 command 0x1003 tx timeout [ 359.857666] Bluetooth: hci0 sending frame failed (-49) [ 361.932195] Bluetooth: hci0 command 0x1001 tx timeout [ 361.937490] Bluetooth: hci0 sending frame failed (-49) [ 364.012177] Bluetooth: hci0 command 0x1009 tx timeout 20:08:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:08:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x51022, 0x2, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000003000f4800b00010067656e657687000020000280050003000000000014000700000000000000000500000000000000010800f0001635b18ae4708f81c08a16a62f20c5b218e9ce7e09890344ac489d3b24c1c887055246645f2c406e32abc758225552791afe3f6bf45a1b6eced16b6789ce2ac2a20ce5ab5ec0b9a167344228f96aa668702baf3e37389d51c76baf46ccc3cd70ce843c90e3042380363779fb0c13fbff39521a", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB, @ANYBLOB="75a3ea7597dae8933f1b53ce74fce70e825fa8e8788c3a448d080d20a7fea7c9308ddb56e9fbdfb81e3f8e9fc5fc83058538d8d58c0575078a64edc5b7301bbb0a98aeed764f46e8b0fd3a6049346578bc21adf8225c3ade42b365a7056155a8fbfda86b6e40bd298ca7a6819a67b3d349bc28e24e5ea827cd2cf6e0cedcd8093cb4e09f58c7f0efa5f5387ad4a0813697e6e7ef02a9f1ccde802544240fdf982200153336ac51ea79ef96a81acdeef10277d00b35b3b9acd6ce1db3d529"], 0x8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001d000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x25, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001d000100"/20, @ANYRES32=r6, @ANYBLOB="000000aaaaaaaaaa0000000000000000c3778f36dbb42cc064c971ed31268af7657edd9c134f34067f8bff192783151e83d13b9779c558a1cd2aea3428f22d8550248e1030232033617d1ec05967845b751001a00c"], 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="8ceb2bbd7000fbdbdf254500000008000300", @ANYRES32=0x0, @ANYBLOB="080001000400baa90c009900050000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900090000000000000008000300", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x41) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 20:08:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x1409, 0x1, 0xfff, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000040)={@empty, @dev={0xac, 0x14, 0x14, 0x34}, @remote}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='qnx6\x00', 0x0, 0x0) [ 368.515758] device geneve2 entered promiscuous mode [ 368.638131] device geneve2 entered promiscuous mode 20:08:51 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) r3 = fcntl$getown(r2, 0x9) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=r3) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000002000)=""/4096) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200, 0x0) close(r4) write$vhci(r0, &(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r6, &(0x7f0000000280)=""/4096, 0x1000) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x4}, 0x6) r7 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) dup2(r7, r5) 20:08:51 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:51 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') preadv(r1, &(0x7f00000017c0), 0x315, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x2002}], 0x1, 0x3) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x2, 0x3, 0x0, 0x0, 0x41c0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8003}, 0x1000, 0x100000000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') syz_genetlink_get_family_id$l2tp(0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:08:51 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x51022, 0x2, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000003000f4800b00010067656e657687000020000280050003000000000014000700000000000000000500000000000000010800f0001635b18ae4708f81c08a16a62f20c5b218e9ce7e09890344ac489d3b24c1c887055246645f2c406e32abc758225552791afe3f6bf45a1b6eced16b6789ce2ac2a20ce5ab5ec0b9a167344228f96aa668702baf3e37389d51c76baf46ccc3cd70ce843c90e3042380363779fb0c13fbff39521a", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB, @ANYBLOB="75a3ea7597dae8933f1b53ce74fce70e825fa8e8788c3a448d080d20a7fea7c9308ddb56e9fbdfb81e3f8e9fc5fc83058538d8d58c0575078a64edc5b7301bbb0a98aeed764f46e8b0fd3a6049346578bc21adf8225c3ade42b365a7056155a8fbfda86b6e40bd298ca7a6819a67b3d349bc28e24e5ea827cd2cf6e0cedcd8093cb4e09f58c7f0efa5f5387ad4a0813697e6e7ef02a9f1ccde802544240fdf982200153336ac51ea79ef96a81acdeef10277d00b35b3b9acd6ce1db3d529"], 0x8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001d000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x25, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001d000100"/20, @ANYRES32=r6, @ANYBLOB="000000aaaaaaaaaa0000000000000000c3778f36dbb42cc064c971ed31268af7657edd9c134f34067f8bff192783151e83d13b9779c558a1cd2aea3428f22d8550248e1030232033617d1ec05967845b751001a00c"], 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="8ceb2bbd7000fbdbdf254500000008000300", @ANYRES32=0x0, @ANYBLOB="080001000400baa90c009900050000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900090000000000000008000300", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x41) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 20:08:52 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:52 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:52 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:08:52 executing program 0: ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x7afc, 0xa35, 0x1, 0x8000}) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 370.034168] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 370.058058] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 370.081965] F2FS-fs (loop0): Fix alignment : done, start(5120) end(13312) block(7168) [ 370.102085] attempt to access beyond end of device [ 370.107155] loop0: rw=12288, want=8200, limit=20 [ 370.114215] F2FS-fs (loop0): invalid crc value [ 370.119160] attempt to access beyond end of device [ 370.126120] loop0: rw=12288, want=12296, limit=20 [ 370.138548] F2FS-fs (loop0): invalid crc value [ 370.143414] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 370.151430] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 370.160869] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 370.175217] attempt to access beyond end of device [ 370.180541] loop0: rw=12288, want=8200, limit=20 [ 370.186644] F2FS-fs (loop0): invalid crc value [ 370.191506] attempt to access beyond end of device [ 370.197331] loop0: rw=12288, want=12296, limit=20 [ 370.202434] F2FS-fs (loop0): invalid crc value [ 370.266963] attempt to access beyond end of device [ 370.272088] loop0: rw=12288, want=8200, limit=20 [ 370.276930] attempt to access beyond end of device [ 370.281968] loop0: rw=12288, want=12296, limit=20 [ 370.287298] attempt to access beyond end of device [ 370.292817] loop0: rw=12288, want=8200, limit=20 [ 370.297768] attempt to access beyond end of device [ 370.302792] loop0: rw=12288, want=12296, limit=20 [ 370.571770] Bluetooth: hci0 command 0x1003 tx timeout [ 370.577096] Bluetooth: hci0 sending frame failed (-49) [ 372.651643] Bluetooth: hci0 command 0x1001 tx timeout [ 372.657039] Bluetooth: hci0 sending frame failed (-49) [ 374.731567] Bluetooth: hci0 command 0x1009 tx timeout 20:09:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:00 executing program 5: unshare(0x20000) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0), 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3ffffffe}}, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000040), 0x0, 0x7, &(0x7f0000000100)={[0x1ff]}, 0x8) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000640)=ANY=[@ANYRESHEX], 0x1) socket(0xa, 0x4, 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="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"/292], &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0) syz_genetlink_get_family_id$ipvs(0x0) unlink(&(0x7f0000000080)='./file0\x00') 20:09:00 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 380.731264] Bluetooth: hci0 command 0x1003 tx timeout [ 380.736742] Bluetooth: hci0 sending frame failed (-49) 20:09:03 executing program 4: unshare(0x20000) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0), 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3ffffffe}}, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000040), 0x0, 0x7, &(0x7f0000000100)={[0x1ff]}, 0x8) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000640)=ANY=[@ANYRESHEX], 0x1) socket(0xa, 0x4, 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="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"/292], &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0) syz_genetlink_get_family_id$ipvs(0x0) unlink(&(0x7f0000000080)='./file0\x00') 20:09:03 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:03 executing program 0: ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x7afc, 0xa35, 0x1, 0x8000}) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 20:09:03 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:03 executing program 5: unshare(0x20000) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0), 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3ffffffe}}, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000040), 0x0, 0x7, &(0x7f0000000100)={[0x1ff]}, 0x8) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000640)=ANY=[@ANYRESHEX], 0x1) socket(0xa, 0x4, 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="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"/292], &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0) syz_genetlink_get_family_id$ipvs(0x0) unlink(&(0x7f0000000080)='./file0\x00') 20:09:03 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:03 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x0, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 381.318597] f2fs_msg: 12 callbacks suppressed [ 381.318768] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 381.345598] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 20:09:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, 0xdc3f, 0x18, 0x7, 0xffffff9a, 0x7ff, 0x0, 0xe1c, 0x8e}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) tkill(r2, 0x20) ptrace$cont(0xffffffffffffffff, r2, 0x2000000000000000, 0x10001) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x400fc, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x4000000000003be, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x56, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) getdents(r3, &(0x7f0000000100)=""/127, 0x7f) [ 381.392000] F2FS-fs (loop0): Fix alignment : done, start(5120) end(13312) block(7168) [ 381.439202] attempt to access beyond end of device 20:09:03 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) sendfile(r1, r0, 0x0, 0x200086) [ 381.464530] loop0: rw=12288, want=8200, limit=20 [ 381.497105] F2FS-fs (loop0): invalid crc value [ 381.505891] attempt to access beyond end of device [ 381.511048] loop0: rw=12288, want=12296, limit=20 [ 381.519559] F2FS-fs (loop0): invalid crc value [ 381.533647] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 381.557145] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 381.578534] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 381.603695] attempt to access beyond end of device [ 381.622228] loop0: rw=12288, want=8200, limit=20 [ 381.639456] F2FS-fs (loop0): invalid crc value [ 381.657043] attempt to access beyond end of device [ 381.668452] loop0: rw=12288, want=12296, limit=20 [ 381.682301] F2FS-fs (loop0): invalid crc value [ 382.811233] Bluetooth: hci0 command 0x1001 tx timeout [ 382.816548] Bluetooth: hci0 sending frame failed (-49) [ 384.891133] Bluetooth: hci0 command 0x1009 tx timeout 20:09:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:11 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x0, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000540)="d85ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a05000000000000000000000010008107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637a51d482394f2181e31ff307a2ace003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d3", 0xc0, r1) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="37d1db4a265c5e7c01085d5d44a8fc0805dfe737346c7600010004019c6a52020027f0ee013e0411f7d0763e1fe24e1ad2f547ca043c00000000d62e07e7a64adb2267374204e1a1920d1beb58f0756f5c9812b6d202a6e55b964d9004098ab188068295d0cfa2efe4e83ef5", 0x6c, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000100)={r2, 0x67, 0x1000}, &(0x7f0000000140)={'enc=', 'pkcs1', ' hash=', {'sha256-avx2\x00'}}, &(0x7f0000000200)="a7fe27c9ff7e6cfa0d7b88f8111c27553efeef5f8e96a6aaf096d96599ab61e034e1edd0edb87a6c9316bd51956311f57a84c177e2a55c52f73226f433236b3376b09ce76e6c5939fac4a8338a4db12cff6400294f540fac000bf14297150601a0544ab21a7c2d", &(0x7f0000000280)="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") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001300), &(0x7f0000001340)=0xc) setresuid(r5, r3, 0x0) setpriority(0x2, 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000001280)="6f9e2bde2a466f1c2aa9d57cb2886e06c5b3") r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r6, &(0x7f0000000280)=""/4096, 0x1000) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f00000012c0)=0x6) 20:09:11 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) sendfile(r1, r0, 0x0, 0x200086) 20:09:11 executing program 0: syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x1fd, 0x200000) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0xa0000, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @timestamp, @timestamp, @sack_perm, @mss={0x2, 0x7}, @timestamp, @mss={0x2, 0x7}, @sack_perm, @timestamp], 0x9) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 20:09:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="01094625b6958220116070e2a6ff4b2c8006574ab6a1e55ae2"], 0x1}}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) flock(0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:09:11 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x0, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:11 executing program 4: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xba}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x140d, 0x4, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0xc080}, 0x1) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10}, 0x10) r5 = dup3(0xffffffffffffffff, r4, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:09:11 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000001300)=""/197, 0xc5}, {&(0x7f0000001400)=""/140, 0x8c}, {&(0x7f00000014c0)=""/178, 0xb2}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000001580)=""/210, 0xd2}], 0x5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) getpeername$inet(r4, 0xfffffffffffffffd, &(0x7f0000000100)) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000001280)=""/95, 0x5f, 0x2000, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) r5 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0xfdea, r5) 20:09:11 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) sendfile(r1, r0, 0x0, 0x200086) 20:09:11 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(0xffffffffffffffff, r0, 0x0, 0x200086) [ 391.050837] Bluetooth: hci0 command 0x1003 tx timeout [ 391.056119] Bluetooth: hci0 sending frame failed (-49) [ 393.130790] Bluetooth: hci0 command 0x1001 tx timeout [ 393.136088] Bluetooth: hci0 sending frame failed (-49) [ 395.210688] Bluetooth: hci0 command 0x1009 tx timeout 20:09:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000001300)=""/197, 0xc5}, {&(0x7f0000001400)=""/140, 0x8c}, {&(0x7f00000014c0)=""/178, 0xb2}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000001580)=""/210, 0xd2}], 0x5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) getpeername$inet(r4, 0xfffffffffffffffd, &(0x7f0000000100)) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000001280)=""/95, 0x5f, 0x2000, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) r5 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0xfdea, r5) 20:09:21 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0xc) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0xf9, 0x8001, 0xfc, 0x0, 0x0, 0xa404, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x1, @perf_bp={0x0}, 0x41020, 0xfffffffffffffffc, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x80) socket$inet(0x2, 0x803, 0xa0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0xffffc000) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) stat(0x0, 0x0) setresgid(0x0, 0x0, 0x0) r3 = open(0x0, 0x141042, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, 0x0, 0x24000811) stat(0x0, 0x0) 20:09:21 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(0xffffffffffffffff, r0, 0x0, 0x200086) 20:09:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000001300)=""/197, 0xc5}, {&(0x7f0000001400)=""/140, 0x8c}, {&(0x7f00000014c0)=""/178, 0xb2}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000001580)=""/210, 0xd2}], 0x5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) getpeername$inet(r4, 0xfffffffffffffffd, &(0x7f0000000100)) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000001280)=""/95, 0x5f, 0x2000, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) r5 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0xfdea, r5) 20:09:21 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(0xffffffffffffffff, r0, 0x0, 0x200086) 20:09:21 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200086) 20:09:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000001300)=""/197, 0xc5}, {&(0x7f0000001400)=""/140, 0x8c}, {&(0x7f00000014c0)=""/178, 0xb2}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000001580)=""/210, 0xd2}], 0x5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) getpeername$inet(r4, 0xfffffffffffffffd, &(0x7f0000000100)) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000001280)=""/95, 0x5f, 0x2000, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) r5 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0xfdea, r5) 20:09:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000001300)=""/197, 0xc5}, {&(0x7f0000001400)=""/140, 0x8c}, {&(0x7f00000014c0)=""/178, 0xb2}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000001580)=""/210, 0xd2}], 0x5, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) getpeername$inet(r4, 0xfffffffffffffffd, &(0x7f0000000100)) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000001280)=""/95, 0x5f, 0x2000, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) r5 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0xfdea, r5) 20:09:21 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200086) 20:09:21 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 401.220332] Bluetooth: hci0 command 0x1003 tx timeout [ 401.225668] Bluetooth: hci0 sending frame failed (-49) [ 403.290300] Bluetooth: hci0 command 0x1001 tx timeout [ 403.295650] Bluetooth: hci0 sending frame failed (-49) [ 405.370258] Bluetooth: hci0 command 0x1009 tx timeout [ 408.731308] NOHZ: local_softirq_pending 08 20:09:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:31 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200086) 20:09:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x40c21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfe, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x200000) dup3(r1, r0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) syz_genetlink_get_family_id$nl80211(0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) eventfd(0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) 20:09:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x3, 0xff, 0x8, 0x7, 0x3, 0x3e, 0x1f, 0x3df, 0x40, 0x337, 0x9, 0xf4c3, 0x38, 0x2, 0x6, 0x4, 0xc3db}, [{0x2, 0xc8c, 0x1, 0x1, 0x4, 0x4, 0x43, 0x1}, {0x6, 0x2, 0x100000001, 0xa6c7, 0x8, 0x2bcf937c, 0x4, 0x200}], "471c6a33c7550797cd33c7dca0994c8f72e7cac6167dfebe1869085e5db156d7bfe0487fc61f105d7a0f6afa7b2e37afb6728ba94f7ce44c30d02970b2ccc8c12608d813e99dc481b6aec30f0b5ebad2032f932bcba978a79ccb027275409273ecb43c95d3e99e98be6d60b047fb629ba49a1f8212a57abb6a9ac3d751b54bb0b1043d0c64e365d2e0326c0585a324706be2467216ca06010402fd8dbea609103c20798efe0062", [[], [], [], []]}, 0x557) delete_module(&(0x7f00000000c0)='vmnet0\x00', 0x200) io_setup(0x4, &(0x7f0000000500)=0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) dup2(r2, r0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x3f) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000140)) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 20:09:31 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="66b9b203000066b8872831a666ba000000000f30f266ee0f025300628401000f01dbbaf80c66b8e853118d66efbafc0cb000ee3e2666733c660fc7300f0176000f20c06635040000000f22c0", 0x4c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$rxrpc(r4, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000001040)="6122065a0e3e25d8150dc5c3bb91164c444517146f86", 0x16}], 0x1}], 0x1, 0x0) 20:09:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:31 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x0) 20:09:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) getuid() ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000891) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, &(0x7f0000000040)=0x6, 0x4) process_vm_writev(0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/250, 0xfa}], 0x2, &(0x7f0000000940)=[{&(0x7f0000000480)=""/107, 0x6b}, {&(0x7f0000000700)=""/95, 0x5f}, {&(0x7f0000000800)=""/168, 0xa8}, {&(0x7f0000000580)=""/15, 0xf}, {&(0x7f00000008c0)=""/113, 0x71}], 0x5, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') 20:09:31 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x0) 20:09:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:31 executing program 5: socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) sched_getattr(r0, &(0x7f0000000140)={0x38}, 0x38, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000200), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r10 = dup(0xffffffffffffffff) ioctl$SG_GET_ACCESS_COUNT(r10, 0x2289, &(0x7f0000000600)) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x12da00) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 20:09:31 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x0) 20:09:31 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="0c34369d158e38a9c72666", 0xb) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000004c0)={0x1, 0x1, &(0x7f0000000200)=""/50, &(0x7f00000002c0)=""/132, &(0x7f0000000240)=""/22, 0x6000}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x27, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYBLOB="da65c3511ccf63a1b313dc380234153ddd7abd0df8ae2bb1110b3f233a2378501090b3004cd48d3b716a2faa90c6374a41b090cc97545573803ebf8b7e21d59f09222ce6be26314787d1f2040e79c1dfe5dcc09c0f9bed458f64d1484a12a97ae02502", @ANYRES64], &(0x7f0000000140)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:09:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:32 executing program 2 (fault-call:7 fault-nth:0): r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 409.759438] overlayfs: unrecognized mount option "„orkdirJ./file1ÚMJHejÀ¨ø “&säº`y$ ‰:•¨æÚÚÛt PÌÖ|ï="$ ©—¸O[Žì_ìÀK0uÊ~ÝmHÇÊâÞy«•M*‚4m´‰çY¿äݼËÃç“:9]ѦJZáoÅ䋲ûh–>«IÀœÞ¾î¾–?PB`#Å:ÊnERê¢Y‘ê©6)ŽÁ‘¾ÃÖéJÆ0½æZ²àAG»)®ê‰ùããkgæm¼½F¼)Òt&øü$z¯¦4ÙY‘·éD´ Ö**[pMÜåËÀÄ›î`»lô˜Â°ì¶ƒ  öŽWÅÌ€s+s‘ØîJ¸Y%o-í•BDdžþt_Û" or missing value 20:09:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) getuid() ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000891) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, &(0x7f0000000040)=0x6, 0x4) process_vm_writev(0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/250, 0xfa}], 0x2, &(0x7f0000000940)=[{&(0x7f0000000480)=""/107, 0x6b}, {&(0x7f0000000700)=""/95, 0x5f}, {&(0x7f0000000800)=""/168, 0xa8}, {&(0x7f0000000580)=""/15, 0xf}, {&(0x7f00000008c0)=""/113, 0x71}], 0x5, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') [ 409.876725] FAULT_INJECTION: forcing a failure. [ 409.876725] name failslab, interval 1, probability 0, space 0, times 1 [ 409.896335] audit: type=1804 audit(1585944572.133:16): pid=9456 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir476170561/syzkaller.lSIuwh/45/bus" dev="sda1" ino=16087 res=1 [ 409.910662] CPU: 0 PID: 9455 Comm: syz-executor.2 Not tainted 4.14.175-syzkaller #0 [ 409.928035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.937393] Call Trace: [ 409.940056] dump_stack+0x13e/0x194 [ 409.943789] should_fail.cold+0x10a/0x14b [ 409.948019] should_failslab+0xd6/0x130 [ 409.952002] kmem_cache_alloc_trace+0x2db/0x7b0 [ 409.956779] ? inode_has_perm.isra.0+0x153/0x1d0 [ 409.961579] alloc_pipe_info+0xaa/0x380 [ 409.965627] splice_direct_to_actor+0x581/0x730 [ 409.970307] ? generic_pipe_buf_nosteal+0x10/0x10 [ 409.975163] ? do_splice_to+0x150/0x150 [ 409.979232] ? rw_verify_area+0xe1/0x2a0 [ 409.983303] do_splice_direct+0x164/0x210 [ 409.987462] ? splice_direct_to_actor+0x730/0x730 [ 409.992315] ? rw_verify_area+0xe1/0x2a0 [ 409.996389] do_sendfile+0x469/0xaf0 [ 410.000120] ? do_compat_pwritev64+0x140/0x140 [ 410.004868] ? __schedule+0x7c0/0x1ca0 [ 410.008775] SyS_sendfile64+0xff/0x110 [ 410.012672] ? SyS_sendfile+0x130/0x130 [ 410.016655] ? do_syscall_64+0x4c/0x640 [ 410.020634] ? SyS_sendfile+0x130/0x130 [ 410.024615] do_syscall_64+0x1d5/0x640 [ 410.028510] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 410.033705] RIP: 0033:0x45c849 [ 410.036898] RSP: 002b:00007fdd25dcac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 410.044611] RAX: ffffffffffffffda RBX: 00007fdd25dcb6d4 RCX: 000000000045c849 [ 410.051889] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 410.059168] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 410.066454] R10: 0000000000200086 R11: 0000000000000246 R12: 0000000000000005 [ 410.073735] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000000 20:09:32 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) [ 410.190437] device lo entered promiscuous mode [ 410.206917] device tunl0 entered promiscuous mode [ 410.220648] device gre0 entered promiscuous mode [ 410.234600] device gretap0 entered promiscuous mode [ 410.288704] device erspan0 entered promiscuous mode [ 410.296385] device ip_vti0 entered promiscuous mode [ 410.306837] device ip6_vti0 entered promiscuous mode [ 410.315792] device sit0 entered promiscuous mode [ 410.323664] device ip6tnl0 entered promiscuous mode [ 410.332349] device ip6gre0 entered promiscuous mode [ 410.340824] device syz_tun entered promiscuous mode [ 410.349296] device ip6gretap0 entered promiscuous mode [ 410.359550] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.367306] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.375923] device bridge0 entered promiscuous mode [ 410.384697] device vcan0 entered promiscuous mode 20:09:32 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x5) [ 410.392851] device bond0 entered promiscuous mode [ 410.397918] device bond_slave_0 entered promiscuous mode [ 410.403893] device bond_slave_1 entered promiscuous mode [ 410.412410] device team0 entered promiscuous mode [ 410.417427] device team_slave_0 entered promiscuous mode [ 410.423342] device team_slave_1 entered promiscuous mode [ 410.434988] device dummy0 entered promiscuous mode [ 410.442661] device nlmon0 entered promiscuous mode [ 410.449627] device caif0 entered promiscuous mode [ 410.456983] device batadv0 entered promiscuous mode [ 410.467943] device vxcan0 entered promiscuous mode [ 410.474358] device vxcan1 entered promiscuous mode [ 410.480770] device veth0 entered promiscuous mode [ 410.488367] device veth1 entered promiscuous mode [ 410.496773] device veth0_to_bridge entered promiscuous mode [ 410.507622] device veth1_to_bridge entered promiscuous mode [ 410.519058] overlayfs: unrecognized mount option "„orkdirJ./file1ÚMJHejÀ¨ø “&säº`y$ ‰:•¨æÚÚÛt PÌÖ|ï="$ ©—¸O[Žì_ìÀK0uÊ~ÝmHÇÊâÞy«•M*‚4m´‰çY¿äݼËÃç“:9]ѦJZáoÅ䋲ûh–>«IÀœÞ¾î¾–?PB`#Å:ÊnERê¢Y‘ê©6)ŽÁ‘¾ÃÖéJÆ0½æZ²àAG»)®ê‰ùããkgæm¼½F¼)Òt&øü$z¯¦4ÙY‘·éD´ Ö**[pMÜåËÀÄ›î`»lô˜Â°ì¶ƒ  öŽWÅÌ€s+s‘ØîJ¸Y%o-í•BDdžþt_Û" or missing value [ 410.562212] device veth0_to_bond entered promiscuous mode [ 410.570705] device veth1_to_bond entered promiscuous mode [ 410.587854] device veth0_to_team entered promiscuous mode [ 410.599830] device veth1_to_team entered promiscuous mode [ 410.609688] device veth0_to_batadv entered promiscuous mode [ 410.617882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 20:09:32 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) sendfile(r1, r0, 0x0, 0x200086) 20:09:32 executing program 5: socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) sched_getattr(r0, &(0x7f0000000140)={0x38}, 0x38, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000200), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r10 = dup(0xffffffffffffffff) ioctl$SG_GET_ACCESS_COUNT(r10, 0x2289, &(0x7f0000000600)) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="780000006305000050ac3d99c7fe46ea0c30dc5fb201ce57abf581589a9fa2875f465fd421f4e97b5e6af07374c1ab646317466698b0cc71161bfe3248c76e403f180c72bce933ebf6430c98c67d1f60275c1a764f48d3332493d610bf51cc6f6125c3af34130f4e64e60a9ac5c07cd7840accd815569504adac4f3741623594d33748aa32866a9e0e2c2f04c43c2056160350836248a8b92c557ca8296018787523abf4f3af7fb67554a3d5fa19b72fb37982d0c8030823a564d3b24d2e78bfddc3333a760e1c03cb000000000000006f751a02e25ecb1bf5be40913243dfc07324dad3a8c6c0e6404a434e14096000000000800000000022e4da8e365e206f20c2a75a6ac03e1579032cd1983e0a5f9a31ab8232f59ef3166092b7c2b441f8fd8f06271970c195eb530000006a80e99eb3610aae29fdd223b81c2927d92dc04db606c80fac95912ab7d4a31b6bc0b7aa78affbf7"], 0x12da00) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 20:09:32 executing program 2 (fault-call:7 fault-nth:1): r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:32 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x5) [ 410.711781] device batadv_slave_0 entered promiscuous mode [ 410.719807] device veth1_to_batadv entered promiscuous mode [ 410.727372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.734825] device batadv_slave_1 entered promiscuous mode [ 410.743225] device veth0_to_hsr entered promiscuous mode [ 410.758661] device veth1_to_hsr entered promiscuous mode [ 410.771531] device hsr0 entered promiscuous mode [ 410.778083] device veth1_virt_wifi entered promiscuous mode [ 410.785851] device veth0_virt_wifi entered promiscuous mode [ 410.800960] device vlan0 entered promiscuous mode [ 410.805962] device vlan1 entered promiscuous mode [ 410.833287] FAULT_INJECTION: forcing a failure. [ 410.833287] name failslab, interval 1, probability 0, space 0, times 0 [ 410.850090] device macvlan0 entered promiscuous mode [ 410.874077] CPU: 1 PID: 9503 Comm: syz-executor.2 Not tainted 4.14.175-syzkaller #0 [ 410.881925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.891285] Call Trace: [ 410.893883] dump_stack+0x13e/0x194 [ 410.897563] should_fail.cold+0x10a/0x14b [ 410.901728] should_failslab+0xd6/0x130 [ 410.905712] __kmalloc+0x2e9/0x7c0 [ 410.909257] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 410.914107] ? alloc_pipe_info+0x156/0x380 [ 410.918349] ? inode_has_perm.isra.0+0x153/0x1d0 [ 410.923110] alloc_pipe_info+0x156/0x380 [ 410.927187] splice_direct_to_actor+0x581/0x730 [ 410.931866] ? generic_pipe_buf_nosteal+0x10/0x10 [ 410.936725] ? do_splice_to+0x150/0x150 [ 410.940726] ? rw_verify_area+0xe1/0x2a0 [ 410.944797] do_splice_direct+0x164/0x210 [ 410.948952] ? splice_direct_to_actor+0x730/0x730 [ 410.953804] ? rw_verify_area+0xe1/0x2a0 [ 410.957873] do_sendfile+0x469/0xaf0 [ 410.961601] ? do_compat_pwritev64+0x140/0x140 [ 410.966197] SyS_sendfile64+0xff/0x110 [ 410.970095] ? SyS_sendfile+0x130/0x130 [ 410.974080] ? do_syscall_64+0x4c/0x640 [ 410.978065] ? SyS_sendfile+0x130/0x130 [ 410.982051] do_syscall_64+0x1d5/0x640 [ 410.985951] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 410.991147] RIP: 0033:0x45c849 [ 410.994510] RSP: 002b:00007fdd25dcac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 411.003046] RAX: ffffffffffffffda RBX: 00007fdd25dcb6d4 RCX: 000000000045c849 [ 411.010299] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 411.017557] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 411.024823] R10: 0000000000200086 R11: 0000000000000246 R12: 0000000000000005 [ 411.032088] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000001 [ 411.060758] audit: type=1804 audit(1585944573.303:17): pid=9512 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir476170561/syzkaller.lSIuwh/46/bus" dev="sda1" ino=15706 res=1 [ 411.084843] device macvlan1 entered promiscuous mode [ 411.091506] device ipvlan0 entered promiscuous mode [ 411.096687] device ipvlan1 entered promiscuous mode 20:09:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) io_setup(0x2349, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x103102, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000180)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)=0x3ff) 20:09:33 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x5) 20:09:33 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) sendfile(r1, r0, 0x0, 0x200086) 20:09:33 executing program 2 (fault-call:7 fault-nth:2): r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="0c34369d158e38a9c72666", 0xb) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000004c0)={0x1, 0x1, &(0x7f0000000200)=""/50, &(0x7f00000002c0)=""/132, &(0x7f0000000240)=""/22, 0x6000}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x27, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYBLOB="da65c3511ccf63a1b313dc380234153ddd7abd0df8ae2bb1110b3f233a2378501090b3004cd48d3b716a2faa90c6374a41b090cc97545573803ebf8b7e21d59f09222ce6be26314787d1f2040e79c1dfe5dcc09c0f9bed458f64d1484a12a97ae02502", @ANYRES64], &(0x7f0000000140)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 411.150720] device macvtap0 entered promiscuous mode [ 411.158903] device macsec0 entered promiscuous mode [ 411.166747] device geneve0 entered promiscuous mode [ 411.174235] device geneve1 entered promiscuous mode [ 411.181179] device wlan0 entered promiscuous mode [ 411.186239] device wlan1 entered promiscuous mode 20:09:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) [ 411.265046] FAULT_INJECTION: forcing a failure. [ 411.265046] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 411.334577] CPU: 0 PID: 9523 Comm: syz-executor.2 Not tainted 4.14.175-syzkaller #0 [ 411.342406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.351768] Call Trace: [ 411.354367] dump_stack+0x13e/0x194 [ 411.358010] should_fail.cold+0x10a/0x14b [ 411.362242] __alloc_pages_nodemask+0x1bf/0x700 [ 411.366926] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 411.372010] ? lock_downgrade+0x6e0/0x6e0 [ 411.376173] ? avc_has_perm_noaudit+0x297/0x400 [ 411.380853] alloc_pages_vma+0xc2/0x4a0 [ 411.384890] shmem_alloc_page+0xe1/0x180 [ 411.388958] ? shmem_swapin+0x180/0x180 [ 411.392942] ? cred_has_capability+0x121/0x230 [ 411.397525] ? selinux_ipv4_output+0x40/0x40 [ 411.401992] ? find_get_entry+0x21d/0x690 [ 411.406173] ? check_preemption_disabled+0x35/0x240 [ 411.411243] ? __vm_enough_memory+0x261/0x460 [ 411.415751] shmem_alloc_and_acct_page+0x126/0x680 [ 411.420697] shmem_getpage_gfp+0x388/0x2790 [ 411.425029] ? shmem_mfill_atomic_pte+0x1790/0x1790 [ 411.430048] ? avc_has_perm+0x2bb/0x480 [ 411.434028] ? avc_has_perm_noaudit+0x400/0x400 [ 411.438702] shmem_file_read_iter+0x447/0xaa0 [ 411.443293] ? lock_acquire+0x170/0x3f0 [ 411.447276] ? shmem_writepage+0xc90/0xc90 [ 411.451570] ? iov_iter_pipe+0x93/0x2b0 [ 411.455552] generic_file_splice_read+0x374/0x5d0 [ 411.460414] ? add_to_pipe+0x350/0x350 [ 411.464312] ? selinux_file_permission+0x7a/0x440 [ 411.469184] ? rw_verify_area+0xe1/0x2a0 [ 411.473259] ? add_to_pipe+0x350/0x350 [ 411.477156] do_splice_to+0xfb/0x150 [ 411.480873] ? alloc_pipe_info+0x2dc/0x380 [ 411.485112] splice_direct_to_actor+0x20a/0x730 [ 411.489789] ? generic_pipe_buf_nosteal+0x10/0x10 [ 411.494636] ? do_splice_to+0x150/0x150 [ 411.498616] ? rw_verify_area+0xe1/0x2a0 [ 411.502694] do_splice_direct+0x164/0x210 [ 411.506850] ? splice_direct_to_actor+0x730/0x730 [ 411.511703] ? rw_verify_area+0xe1/0x2a0 [ 411.515771] do_sendfile+0x469/0xaf0 [ 411.519494] ? do_compat_pwritev64+0x140/0x140 [ 411.524087] SyS_sendfile64+0xff/0x110 [ 411.531992] ? SyS_sendfile+0x130/0x130 [ 411.535973] ? do_syscall_64+0x4c/0x640 [ 411.539955] ? SyS_sendfile+0x130/0x130 [ 411.543943] do_syscall_64+0x1d5/0x640 [ 411.547848] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 411.553049] RIP: 0033:0x45c849 [ 411.556251] RSP: 002b:00007fdd25dcac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 411.563962] RAX: ffffffffffffffda RBX: 00007fdd25dcb6d4 RCX: 000000000045c849 [ 411.571236] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 411.578521] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 20:09:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) [ 411.585798] R10: 0000000000200086 R11: 0000000000000246 R12: 0000000000000005 [ 411.593079] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000002 20:09:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:34 executing program 5: socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) sched_getattr(r0, &(0x7f0000000140)={0x38}, 0x38, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000200), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r10 = dup(0xffffffffffffffff) ioctl$SG_GET_ACCESS_COUNT(r10, 0x2289, &(0x7f0000000600)) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="780000006305000050ac3d99c7fe46ea0c30dc5fb201ce57abf581589a9fa2875f465fd421f4e97b5e6af07374c1ab646317466698b0cc71161bfe3248c76e403f180c72bce933ebf6430c98c67d1f60275c1a764f48d3332493d610bf51cc6f6125c3af34130f4e64e60a9ac5c07cd7840accd815569504adac4f3741623594d33748aa32866a9e0e2c2f04c43c2056160350836248a8b92c557ca8296018787523abf4f3af7fb67554a3d5fa19b72fb37982d0c8030823a564d3b24d2e78bfddc3333a760e1c03cb000000000000006f751a02e25ecb1bf5be40913243dfc07324dad3a8c6c0e6404a434e14096000000000800000000022e4da8e365e206f20c2a75a6ac03e1579032cd1983e0a5f9a31ab8232f59ef3166092b7c2b441f8fd8f06271970c195eb530000006a80e99eb3610aae29fdd223b81c2927d92dc04db606c80fac95912ab7d4a31b6bc0b7aa78affbf7"], 0x12da00) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 20:09:34 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) sendfile(r1, r0, 0x0, 0x200086) 20:09:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) io_setup(0x2349, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x103102, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000180)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)=0x3ff) 20:09:34 executing program 2 (fault-call:7 fault-nth:3): r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 411.971516] audit: type=1804 audit(1585944574.213:18): pid=9565 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir476170561/syzkaller.lSIuwh/47/bus" dev="sda1" ino=15937 res=1 [ 411.978640] FAULT_INJECTION: forcing a failure. [ 411.978640] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 412.027105] CPU: 0 PID: 9566 Comm: syz-executor.2 Not tainted 4.14.175-syzkaller #0 [ 412.034931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.044290] Call Trace: [ 412.046913] dump_stack+0x13e/0x194 [ 412.050557] should_fail.cold+0x10a/0x14b [ 412.054718] __alloc_pages_nodemask+0x1bf/0x700 [ 412.059398] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 412.064419] ? lock_downgrade+0x6e0/0x6e0 [ 412.068578] ? avc_has_perm_noaudit+0x297/0x400 [ 412.073252] alloc_pages_vma+0xc2/0x4a0 20:09:34 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(0xffffffffffffffff, r0, 0x0, 0x200086) [ 412.077235] shmem_alloc_page+0xe1/0x180 [ 412.081307] ? shmem_swapin+0x180/0x180 [ 412.085291] ? cred_has_capability+0x121/0x230 [ 412.089887] ? selinux_ipv4_output+0x40/0x40 [ 412.094329] ? find_get_entry+0x21d/0x690 [ 412.098492] ? check_preemption_disabled+0x35/0x240 [ 412.103610] ? __vm_enough_memory+0x261/0x460 [ 412.108123] shmem_alloc_and_acct_page+0x126/0x680 [ 412.113087] shmem_getpage_gfp+0x388/0x2790 [ 412.117428] ? shmem_mfill_atomic_pte+0x1790/0x1790 [ 412.122459] shmem_file_read_iter+0x447/0xaa0 [ 412.126974] ? shmem_writepage+0xc90/0xc90 [ 412.131220] ? iov_iter_pipe+0x93/0x2b0 [ 412.135210] generic_file_splice_read+0x374/0x5d0 [ 412.140075] ? add_to_pipe+0x350/0x350 [ 412.143971] ? selinux_file_permission+0x7a/0x440 [ 412.148828] ? rw_verify_area+0xe1/0x2a0 [ 412.152898] ? add_to_pipe+0x350/0x350 [ 412.156788] do_splice_to+0xfb/0x150 [ 412.160505] ? alloc_pipe_info+0x2dc/0x380 [ 412.164743] splice_direct_to_actor+0x20a/0x730 [ 412.169423] ? generic_pipe_buf_nosteal+0x10/0x10 [ 412.174267] ? do_splice_to+0x150/0x150 [ 412.178243] ? rw_verify_area+0xe1/0x2a0 [ 412.182305] do_splice_direct+0x164/0x210 [ 412.186455] ? splice_direct_to_actor+0x730/0x730 [ 412.191315] ? rw_verify_area+0xe1/0x2a0 [ 412.195388] do_sendfile+0x469/0xaf0 [ 412.199123] ? do_compat_pwritev64+0x140/0x140 [ 412.203729] SyS_sendfile64+0xff/0x110 [ 412.207620] ? SyS_sendfile+0x130/0x130 [ 412.211597] ? do_syscall_64+0x4c/0x640 [ 412.215570] ? SyS_sendfile+0x130/0x130 [ 412.219549] do_syscall_64+0x1d5/0x640 20:09:34 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000100), 0x8) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4(r1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000040)=0x200) [ 412.223440] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 412.228634] RIP: 0033:0x45c849 [ 412.231821] RSP: 002b:00007fdd25dcac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 412.239535] RAX: ffffffffffffffda RBX: 00007fdd25dcb6d4 RCX: 000000000045c849 [ 412.246805] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 412.254079] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 412.261344] R10: 0000000000200086 R11: 0000000000000246 R12: 0000000000000005 [ 412.268612] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000003 20:09:34 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(0xffffffffffffffff, r0, 0x0, 0x200086) 20:09:34 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(0xffffffffffffffff, r0, 0x0, 0x200086) 20:09:34 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200086) 20:09:34 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200086) 20:09:34 executing program 4: write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e22, 0xb47, @empty, 0x6}}, [0xfffffffffffffbff, 0x9, 0x6, 0x1, 0x3, 0x400, 0x3856, 0x401, 0x2, 0x7000000, 0x2, 0xfffffffffffffff9, 0x4, 0x9, 0x800]}, &(0x7f0000000180)=0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x8000, 0x0, 0x0, 0x200000000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x151042, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r6}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001280)={r6, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}}, 0x2, 0x5, 0x4, 0x8000, 0x32, 0x2, 0x7f}, 0x9c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) [ 412.765176] sctp: [Deprecated]: syz-executor.4 (pid 9598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.765176] Use struct sctp_sack_info instead [ 412.801727] sctp: [Deprecated]: syz-executor.4 (pid 9598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.801727] Use struct sctp_sack_info instead [ 412.866370] sctp: [Deprecated]: syz-executor.4 (pid 9603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.866370] Use struct sctp_sack_info instead [ 412.886284] sctp: [Deprecated]: syz-executor.4 (pid 9598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.886284] Use struct sctp_sack_info instead [ 413.849789] Bluetooth: hci0 command 0x1003 tx timeout [ 413.855068] Bluetooth: hci0 sending frame failed (-49) [ 415.929888] Bluetooth: hci0 command 0x1001 tx timeout [ 415.935182] Bluetooth: hci0 sending frame failed (-49) [ 417.691943] NOHZ: local_softirq_pending 08 [ 418.009680] Bluetooth: hci0 command 0x1009 tx timeout 20:09:44 executing program 2 (fault-call:7 fault-nth:4): r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:44 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, 0xffffffffffffffff, 0x0, 0x200086) 20:09:44 executing program 5: socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) sched_getattr(r0, &(0x7f0000000140)={0x38}, 0x38, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000200), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r10 = dup(0xffffffffffffffff) ioctl$SG_GET_ACCESS_COUNT(r10, 0x2289, &(0x7f0000000600)) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x12da00) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 20:09:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:44 executing program 4: add_key(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffb}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xfffffffe}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @broadcast}, @local, 0x2}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) 20:09:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) tkill(r3, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000001280)={{0x0, 0x1, 0x0, 0x807, '\x00', 0x7}, 0x3, 0x20, 0x400, r3, 0x5, 0x2, 'syz1\x00', &(0x7f0000000000)=['macvlan\x00', 'macvlan\x00', ',selinux\x00', 'macvlan\x00', '(keyring\x00'], 0x2a, [], [0x101, 0x9, 0x7ff, 0x9]}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) dup3(0xffffffffffffffff, r4, 0x80000) 20:09:44 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x0) [ 422.223109] FAULT_INJECTION: forcing a failure. [ 422.223109] name failslab, interval 1, probability 0, space 0, times 0 [ 422.234659] CPU: 0 PID: 9622 Comm: syz-executor.2 Not tainted 4.14.175-syzkaller #0 [ 422.242460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.251828] Call Trace: [ 422.254431] dump_stack+0x13e/0x194 [ 422.258082] should_fail.cold+0x10a/0x14b [ 422.262250] should_failslab+0xd6/0x130 [ 422.266342] kmem_cache_alloc+0x44/0x770 20:09:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:44 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x0) [ 422.270416] ? __lock_acquire+0x5f7/0x4620 [ 422.274665] radix_tree_node_alloc.constprop.0+0x1b4/0x300 [ 422.280313] radix_tree_extend+0x1e3/0x410 [ 422.284566] __radix_tree_create+0x3b8/0x4c0 [ 422.289094] __radix_tree_insert+0x98/0x4f0 [ 422.293437] ? __radix_tree_create+0x4c0/0x4c0 [ 422.298031] ? shmem_add_to_page_cache+0x236/0x7f0 [ 422.302981] shmem_add_to_page_cache+0x552/0x7f0 [ 422.307748] ? shmem_unused_huge_scan+0xa0/0xa0 [ 422.312425] ? __radix_tree_preload+0x1c3/0x250 [ 422.317103] shmem_getpage_gfp+0x1710/0x2790 20:09:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) [ 422.321537] ? shmem_mfill_atomic_pte+0x1790/0x1790 [ 422.326573] shmem_file_read_iter+0x447/0xaa0 [ 422.331089] ? shmem_writepage+0xc90/0xc90 [ 422.335331] ? iov_iter_pipe+0x93/0x2b0 [ 422.339325] generic_file_splice_read+0x374/0x5d0 [ 422.344177] ? add_to_pipe+0x350/0x350 [ 422.348085] ? selinux_file_permission+0x7a/0x440 [ 422.352966] ? rw_verify_area+0xe1/0x2a0 [ 422.357040] ? add_to_pipe+0x350/0x350 [ 422.360938] do_splice_to+0xfb/0x150 [ 422.364654] ? alloc_pipe_info+0x2dc/0x380 [ 422.368895] splice_direct_to_actor+0x20a/0x730 20:09:44 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x0) [ 422.373581] ? generic_pipe_buf_nosteal+0x10/0x10 [ 422.378433] ? do_splice_to+0x150/0x150 [ 422.382520] ? rw_verify_area+0xe1/0x2a0 [ 422.386608] do_splice_direct+0x164/0x210 [ 422.390774] ? splice_direct_to_actor+0x730/0x730 [ 422.395656] ? rw_verify_area+0xe1/0x2a0 [ 422.399731] do_sendfile+0x469/0xaf0 [ 422.403462] ? do_compat_pwritev64+0x140/0x140 [ 422.408065] SyS_sendfile64+0xff/0x110 [ 422.411964] ? SyS_sendfile+0x130/0x130 [ 422.415950] ? do_syscall_64+0x4c/0x640 [ 422.419939] ? SyS_sendfile+0x130/0x130 20:09:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) [ 422.423924] do_syscall_64+0x1d5/0x640 [ 422.427839] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 422.433033] RIP: 0033:0x45c849 [ 422.436230] RSP: 002b:00007fdd25dcac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 422.444142] RAX: ffffffffffffffda RBX: 00007fdd25dcb6d4 RCX: 000000000045c849 [ 422.451417] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 422.458698] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 422.465976] R10: 0000000000200086 R11: 0000000000000246 R12: 0000000000000005 [ 422.473255] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000004 [ 422.549748] audit: type=1804 audit(1585944584.793:19): pid=9650 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir476170561/syzkaller.lSIuwh/48/bus" dev="sda1" ino=15777 res=1 20:09:45 executing program 2 (fault-call:7 fault-nth:5): r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:45 executing program 1 (fault-call:7 fault-nth:0): r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 422.852608] FAULT_INJECTION: forcing a failure. [ 422.852608] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 422.865775] CPU: 0 PID: 9666 Comm: syz-executor.2 Not tainted 4.14.175-syzkaller #0 [ 422.873764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.883212] Call Trace: [ 422.885801] dump_stack+0x13e/0x194 [ 422.889433] should_fail.cold+0x10a/0x14b [ 422.893596] __alloc_pages_nodemask+0x1bf/0x700 [ 422.896395] FAULT_INJECTION: forcing a failure. [ 422.896395] name failslab, interval 1, probability 0, space 0, times 0 [ 422.898270] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 422.898280] ? lock_downgrade+0x6e0/0x6e0 [ 422.898296] ? avc_has_perm_noaudit+0x297/0x400 [ 422.923281] alloc_pages_vma+0xc2/0x4a0 [ 422.927274] shmem_alloc_page+0xe1/0x180 [ 422.931335] ? shmem_swapin+0x180/0x180 [ 422.935373] ? cred_has_capability+0x121/0x230 [ 422.939965] ? selinux_ipv4_output+0x40/0x40 [ 422.944373] ? find_get_entry+0x21d/0x690 [ 422.948538] ? check_preemption_disabled+0x35/0x240 [ 422.953557] ? __vm_enough_memory+0x261/0x460 [ 422.958047] shmem_alloc_and_acct_page+0x126/0x680 [ 422.962986] shmem_getpage_gfp+0x388/0x2790 [ 422.967303] ? shmem_mfill_atomic_pte+0x1790/0x1790 [ 422.972326] shmem_file_read_iter+0x447/0xaa0 [ 422.976845] ? shmem_writepage+0xc90/0xc90 [ 422.981083] ? iov_iter_pipe+0x93/0x2b0 [ 422.985047] generic_file_splice_read+0x374/0x5d0 [ 422.989883] ? add_to_pipe+0x350/0x350 [ 422.993767] ? selinux_file_permission+0x7a/0x440 [ 422.998601] ? rw_verify_area+0xe1/0x2a0 [ 423.002647] ? add_to_pipe+0x350/0x350 [ 423.006539] do_splice_to+0xfb/0x150 [ 423.010244] ? alloc_pipe_info+0x2dc/0x380 [ 423.014488] splice_direct_to_actor+0x20a/0x730 [ 423.019177] ? generic_pipe_buf_nosteal+0x10/0x10 [ 423.024037] ? do_splice_to+0x150/0x150 [ 423.028023] ? rw_verify_area+0xe1/0x2a0 [ 423.032094] do_splice_direct+0x164/0x210 [ 423.036259] ? splice_direct_to_actor+0x730/0x730 [ 423.041153] ? rw_verify_area+0xe1/0x2a0 [ 423.045229] do_sendfile+0x469/0xaf0 [ 423.048968] ? do_compat_pwritev64+0x140/0x140 [ 423.053566] SyS_sendfile64+0xff/0x110 [ 423.057463] ? SyS_sendfile+0x130/0x130 [ 423.061523] ? do_syscall_64+0x4c/0x640 [ 423.065488] ? SyS_sendfile+0x130/0x130 [ 423.069461] do_syscall_64+0x1d5/0x640 [ 423.073357] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 423.078533] RIP: 0033:0x45c849 [ 423.081707] RSP: 002b:00007fdd25dcac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 423.089425] RAX: ffffffffffffffda RBX: 00007fdd25dcb6d4 RCX: 000000000045c849 [ 423.096710] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 423.103970] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 423.111228] R10: 0000000000200086 R11: 0000000000000246 R12: 0000000000000005 [ 423.118600] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000005 [ 423.125880] CPU: 1 PID: 9667 Comm: syz-executor.1 Not tainted 4.14.175-syzkaller #0 [ 423.133690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.143048] Call Trace: [ 423.145670] dump_stack+0x13e/0x194 [ 423.149310] should_fail.cold+0x10a/0x14b [ 423.153470] should_failslab+0xd6/0x130 [ 423.157460] kmem_cache_alloc_trace+0x2db/0x7b0 [ 423.162137] ? inode_has_perm.isra.0+0x153/0x1d0 [ 423.166914] alloc_pipe_info+0xaa/0x380 [ 423.170900] splice_direct_to_actor+0x581/0x730 [ 423.175585] ? generic_pipe_buf_nosteal+0x10/0x10 [ 423.180442] ? do_splice_to+0x150/0x150 [ 423.184432] ? rw_verify_area+0xe1/0x2a0 [ 423.188511] do_splice_direct+0x164/0x210 [ 423.192669] ? splice_direct_to_actor+0x730/0x730 [ 423.197527] ? rw_verify_area+0xe1/0x2a0 [ 423.201601] do_sendfile+0x469/0xaf0 [ 423.205329] ? do_compat_pwritev64+0x140/0x140 [ 423.209923] SyS_sendfile64+0xff/0x110 [ 423.213811] ? SyS_sendfile+0x130/0x130 [ 423.217795] ? do_syscall_64+0x4c/0x640 [ 423.221778] ? SyS_sendfile+0x130/0x130 [ 423.225765] do_syscall_64+0x1d5/0x640 [ 423.229669] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 423.234858] RIP: 0033:0x45c849 [ 423.238052] RSP: 002b:00007f43dbc64c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 423.245765] RAX: ffffffffffffffda RBX: 00007f43dbc656d4 RCX: 000000000045c849 [ 423.253038] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 423.260313] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 423.267658] R10: 0000000000200086 R11: 0000000000000246 R12: 0000000000000005 [ 423.274967] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000000 20:09:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r9, &(0x7f0000000280)=""/4096, 0x1000) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000013c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x40}}, 0x20}}, 0x0) 20:09:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:45 executing program 2 (fault-call:7 fault-nth:6): r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) getpid() r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x48c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0xc3630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x81, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) socket$kcm(0x11, 0x0, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d00)={0x0, 0x0, 0x0}, 0xfd00) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffcc, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:09:45 executing program 1 (fault-call:7 fault-nth:1): r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3c1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x902}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) pipe(0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000000)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={r4, 0x400, 0x10, 0xffffffff, 0xfff}, &(0x7f00000001c0)=0x18) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 423.385446] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.396322] FAULT_INJECTION: forcing a failure. [ 423.396322] name failslab, interval 1, probability 0, space 0, times 0 [ 423.414893] FAULT_INJECTION: forcing a failure. [ 423.414893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 423.442569] CPU: 0 PID: 9685 Comm: syz-executor.1 Not tainted 4.14.175-syzkaller #0 [ 423.450398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.459863] Call Trace: [ 423.462457] dump_stack+0x13e/0x194 [ 423.466100] should_fail.cold+0x10a/0x14b [ 423.470261] should_failslab+0xd6/0x130 [ 423.474247] __kmalloc+0x2e9/0x7c0 [ 423.477795] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 423.482641] ? alloc_pipe_info+0x156/0x380 [ 423.486881] ? inode_has_perm.isra.0+0x153/0x1d0 [ 423.492178] alloc_pipe_info+0x156/0x380 [ 423.496273] splice_direct_to_actor+0x581/0x730 [ 423.500962] ? generic_pipe_buf_nosteal+0x10/0x10 [ 423.505807] ? do_splice_to+0x150/0x150 [ 423.509771] ? rw_verify_area+0xe1/0x2a0 [ 423.513842] do_splice_direct+0x164/0x210 [ 423.517983] ? splice_direct_to_actor+0x730/0x730 [ 423.522832] ? rw_verify_area+0xe1/0x2a0 [ 423.526971] do_sendfile+0x469/0xaf0 [ 423.530683] ? do_compat_pwritev64+0x140/0x140 [ 423.535262] SyS_sendfile64+0xff/0x110 [ 423.539142] ? SyS_sendfile+0x130/0x130 [ 423.543362] ? do_syscall_64+0x4c/0x640 [ 423.547318] ? SyS_sendfile+0x130/0x130 [ 423.551277] do_syscall_64+0x1d5/0x640 [ 423.555157] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 423.560334] RIP: 0033:0x45c849 [ 423.563520] RSP: 002b:00007f43dbc64c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 423.571225] RAX: ffffffffffffffda RBX: 00007f43dbc656d4 RCX: 000000000045c849 [ 423.578481] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 423.585997] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 423.593373] R10: 0000000000200086 R11: 0000000000000246 R12: 0000000000000005 [ 423.600626] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000001 [ 423.629491] CPU: 1 PID: 9684 Comm: syz-executor.2 Not tainted 4.14.175-syzkaller #0 [ 423.637321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.646681] Call Trace: [ 423.649282] dump_stack+0x13e/0x194 [ 423.652927] should_fail.cold+0x10a/0x14b [ 423.657615] __alloc_pages_nodemask+0x1bf/0x700 [ 423.662736] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 423.667760] ? lock_downgrade+0x6e0/0x6e0 [ 423.671931] ? avc_has_perm_noaudit+0x297/0x400 [ 423.676606] alloc_pages_vma+0xc2/0x4a0 [ 423.680593] shmem_alloc_page+0xe1/0x180 [ 423.684664] ? shmem_swapin+0x180/0x180 [ 423.688650] ? cred_has_capability+0x121/0x230 [ 423.693242] ? selinux_ipv4_output+0x40/0x40 [ 423.697655] ? find_get_entry+0x21d/0x690 [ 423.701828] ? check_preemption_disabled+0x35/0x240 [ 423.706872] ? __vm_enough_memory+0x261/0x460 [ 423.711387] shmem_alloc_and_acct_page+0x126/0x680 [ 423.712199] FAULT_INJECTION: forcing a failure. [ 423.712199] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 423.716330] shmem_getpage_gfp+0x388/0x2790 [ 423.716351] ? shmem_mfill_atomic_pte+0x1790/0x1790 [ 423.716368] shmem_file_read_iter+0x447/0xaa0 [ 423.716392] ? shmem_writepage+0xc90/0xc90 [ 423.746424] ? iov_iter_pipe+0x93/0x2b0 [ 423.750407] generic_file_splice_read+0x374/0x5d0 [ 423.755255] ? add_to_pipe+0x350/0x350 [ 423.759144] ? selinux_file_permission+0x7a/0x440 [ 423.763989] ? rw_verify_area+0xe1/0x2a0 [ 423.768045] ? add_to_pipe+0x350/0x350 [ 423.771927] do_splice_to+0xfb/0x150 [ 423.775637] ? alloc_pipe_info+0x2dc/0x380 [ 423.779883] splice_direct_to_actor+0x20a/0x730 [ 423.784896] ? generic_pipe_buf_nosteal+0x10/0x10 [ 423.789741] ? do_splice_to+0x150/0x150 [ 423.793735] ? rw_verify_area+0xe1/0x2a0 [ 423.797817] do_splice_direct+0x164/0x210 [ 423.801973] ? splice_direct_to_actor+0x730/0x730 [ 423.806827] ? rw_verify_area+0xe1/0x2a0 [ 423.810887] do_sendfile+0x469/0xaf0 [ 423.814610] ? do_compat_pwritev64+0x140/0x140 [ 423.819195] SyS_sendfile64+0xff/0x110 [ 423.823073] ? SyS_sendfile+0x130/0x130 [ 423.827396] ? do_syscall_64+0x4c/0x640 [ 423.831377] ? SyS_sendfile+0x130/0x130 [ 423.835352] do_syscall_64+0x1d5/0x640 [ 423.839243] entry_SYSCALL_64_after_hwframe+0x42/0xb7 20:09:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:45 executing program 1 (fault-call:7 fault-nth:2): r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) [ 423.844438] RIP: 0033:0x45c849 [ 423.848234] RSP: 002b:00007fdd25dcac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 423.856134] RAX: ffffffffffffffda RBX: 00007fdd25dcb6d4 RCX: 000000000045c849 [ 423.863405] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 423.870692] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 423.877963] R10: 0000000000200086 R11: 0000000000000246 R12: 0000000000000005 [ 423.885243] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000006 [ 423.905038] CPU: 0 PID: 9701 Comm: syz-executor.1 Not tainted 4.14.175-syzkaller #0 [ 423.913300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.922661] Call Trace: [ 423.925263] dump_stack+0x13e/0x194 [ 423.928907] should_fail.cold+0x10a/0x14b [ 423.933073] __alloc_pages_nodemask+0x1bf/0x700 [ 423.937760] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 423.942789] ? lock_downgrade+0x6e0/0x6e0 [ 423.946953] ? avc_has_perm_noaudit+0x297/0x400 [ 423.951634] alloc_pages_vma+0xc2/0x4a0 [ 423.955622] shmem_alloc_page+0xe1/0x180 [ 423.959690] ? shmem_swapin+0x180/0x180 [ 423.963839] ? cred_has_capability+0x121/0x230 [ 423.968524] ? selinux_ipv4_output+0x40/0x40 [ 423.973065] ? find_get_entry+0x21d/0x690 [ 423.977224] ? check_preemption_disabled+0x35/0x240 [ 423.982260] ? __vm_enough_memory+0x261/0x460 [ 423.986772] shmem_alloc_and_acct_page+0x126/0x680 [ 423.991715] shmem_getpage_gfp+0x388/0x2790 [ 423.996054] ? shmem_mfill_atomic_pte+0x1790/0x1790 [ 424.001066] ? avc_has_perm+0x2bb/0x480 [ 424.005046] ? avc_has_perm_noaudit+0x400/0x400 [ 424.009718] shmem_file_read_iter+0x447/0xaa0 [ 424.014209] ? lock_acquire+0x170/0x3f0 [ 424.018177] ? shmem_writepage+0xc90/0xc90 [ 424.022403] ? iov_iter_pipe+0x93/0x2b0 [ 424.026367] generic_file_splice_read+0x374/0x5d0 [ 424.031195] ? add_to_pipe+0x350/0x350 [ 424.035069] ? selinux_file_permission+0x7a/0x440 [ 424.039899] ? rw_verify_area+0xe1/0x2a0 [ 424.044219] ? add_to_pipe+0x350/0x350 [ 424.048093] do_splice_to+0xfb/0x150 [ 424.051788] ? alloc_pipe_info+0x2dc/0x380 [ 424.056008] splice_direct_to_actor+0x20a/0x730 [ 424.060663] ? generic_pipe_buf_nosteal+0x10/0x10 [ 424.065598] ? do_splice_to+0x150/0x150 [ 424.069556] ? rw_verify_area+0xe1/0x2a0 [ 424.073601] do_splice_direct+0x164/0x210 [ 424.077732] ? splice_direct_to_actor+0x730/0x730 [ 424.082560] ? rw_verify_area+0xe1/0x2a0 [ 424.086608] do_sendfile+0x469/0xaf0 [ 424.090310] ? do_compat_pwritev64+0x140/0x140 [ 424.094879] SyS_sendfile64+0xff/0x110 [ 424.098751] ? SyS_sendfile+0x130/0x130 [ 424.102711] ? do_syscall_64+0x4c/0x640 [ 424.106764] ? SyS_sendfile+0x130/0x130 [ 424.110742] do_syscall_64+0x1d5/0x640 [ 424.114652] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 424.119832] RIP: 0033:0x45c849 [ 424.123010] RSP: 002b:00007f43dbc64c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 424.130701] RAX: ffffffffffffffda RBX: 00007f43dbc656d4 RCX: 000000000045c849 [ 424.137970] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 424.145237] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 424.152495] R10: 0000000000200086 R11: 0000000000000246 R12: 0000000000000005 [ 424.159763] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000002 20:09:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:46 executing program 1 (fault-call:7 fault-nth:3): r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:46 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r4 = socket(0xb, 0x5, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x54, r3, 0x923, 0x70bd28, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8000}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}]}, 0x54}}, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x80000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="8ebaf32f1901070b4d22927156d88d3729487bdce726a7778d1ef611632ccac9d691cb112fa9ddc73edb129a4120c06226fe086d089f70d70b81f42f0b9f3eec438164243bc67d09777af95e731ab8c36bd365155530589496eff2300cf1ee8201d77b5819d5e64e94b58fec9b11cd9fe4e216b965db19ff8ebae02e71715c623c4212022bce90893fabcda4b6dc2e76708777fc69b4208fb8f7bc63ce58f42e1a6690d7233a76250df79aa4ce7383524207", @ANYRES16=r3, @ANYBLOB="100028bd7000ffdbdf250300a0b189d6b3b179e5099377ee1c948d00000500070002000000080009000200000008001800e00000010800090000000000050004000000000014002000"/82], 0x58}}, 0x0) r5 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x0, 0x4a00) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1, 0x6}) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) getpid() r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x48c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0xc3630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x81, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) socket$kcm(0x11, 0x0, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d00)={0x0, 0x0, 0x0}, 0xfd00) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffcc, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:09:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x7, 0x51, 0x80004, 0x1, 0x4, 0x0, 0x0, 0x9, 0x1e}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r7, 0x0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000140)="ed7acb9c811ad571e692da81d296680ddba88cee1b398909df5ab846e96af940c0c9d01c5c6e2736f21d916fe2cc24f4fea6eb93dea6ea", 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r10 = dup(0xffffffffffffffff) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000600)) open_by_handle_at(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x12da00) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) 20:09:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3c1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x902}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) pipe(0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000000)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={r4, 0x400, 0x10, 0xffffffff, 0xfff}, &(0x7f00000001c0)=0x18) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 424.367200] FAULT_INJECTION: forcing a failure. [ 424.367200] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 424.425855] CPU: 1 PID: 9727 Comm: syz-executor.1 Not tainted 4.14.175-syzkaller #0 [ 424.433690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.443050] Call Trace: [ 424.445654] dump_stack+0x13e/0x194 [ 424.449298] should_fail.cold+0x10a/0x14b [ 424.453463] __alloc_pages_nodemask+0x1bf/0x700 [ 424.458145] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 424.463168] ? lock_downgrade+0x6e0/0x6e0 [ 424.467326] ? avc_has_perm_noaudit+0x297/0x400 [ 424.472001] alloc_pages_vma+0xc2/0x4a0 [ 424.475981] shmem_alloc_page+0xe1/0x180 [ 424.480038] ? shmem_swapin+0x180/0x180 [ 424.484012] ? cred_has_capability+0x121/0x230 [ 424.488593] ? selinux_ipv4_output+0x40/0x40 [ 424.492994] ? find_get_entry+0x21d/0x690 [ 424.497139] ? check_preemption_disabled+0x35/0x240 [ 424.502155] ? __vm_enough_memory+0x261/0x460 [ 424.506646] shmem_alloc_and_acct_page+0x126/0x680 [ 424.511580] shmem_getpage_gfp+0x388/0x2790 [ 424.515917] ? shmem_mfill_atomic_pte+0x1790/0x1790 [ 424.521459] shmem_file_read_iter+0x447/0xaa0 [ 424.525977] ? shmem_writepage+0xc90/0xc90 [ 424.530228] ? iov_iter_pipe+0x93/0x2b0 [ 424.534914] generic_file_splice_read+0x374/0x5d0 [ 424.539755] ? add_to_pipe+0x350/0x350 [ 424.543659] ? selinux_file_permission+0x7a/0x440 [ 424.548506] ? rw_verify_area+0xe1/0x2a0 [ 424.552562] ? add_to_pipe+0x350/0x350 [ 424.556449] do_splice_to+0xfb/0x150 [ 424.560156] ? alloc_pipe_info+0x2dc/0x380 [ 424.564998] splice_direct_to_actor+0x20a/0x730 [ 424.569664] ? generic_pipe_buf_nosteal+0x10/0x10 [ 424.574767] ? do_splice_to+0x150/0x150 [ 424.578742] ? rw_verify_area+0xe1/0x2a0 [ 424.582919] do_splice_direct+0x164/0x210 [ 424.587092] ? splice_direct_to_actor+0x730/0x730 [ 424.592043] ? rw_verify_area+0xe1/0x2a0 [ 424.596112] do_sendfile+0x469/0xaf0 [ 424.599841] ? do_compat_pwritev64+0x140/0x140 [ 424.604431] SyS_sendfile64+0xff/0x110 [ 424.608317] ? SyS_sendfile+0x130/0x130 [ 424.614457] ? do_syscall_64+0x4c/0x640 [ 424.618427] ? SyS_sendfile+0x130/0x130 [ 424.622398] do_syscall_64+0x1d5/0x640 [ 424.626286] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 424.631470] RIP: 0033:0x45c849 [ 424.634652] RSP: 002b:00007f43dbc64c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 424.642529] RAX: ffffffffffffffda RBX: 00007f43dbc656d4 RCX: 000000000045c849 [ 424.649805] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 424.657261] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 424.664536] R10: 0000000000200086 R11: 0000000000000246 R12: 0000000000000005 20:09:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) [ 424.672145] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000003 [ 424.760931] Bluetooth: hci0: Frame reassembly failed (-84) [ 424.761235] Bluetooth: hci0: Frame reassembly failed (-84) [ 424.858372] audit: type=1804 audit(1585944587.093:20): pid=9752 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir531473529/syzkaller.kcAFKg/49/bus" dev="sda1" ino=16113 res=1 [ 424.964467] audit: type=1804 audit(1585944587.093:21): pid=9752 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir531473529/syzkaller.kcAFKg/49/bus" dev="sda1" ino=16113 res=1 20:09:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) getpid() r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x48c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0xc3630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x81, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) socket$kcm(0x11, 0x0, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d00)={0x0, 0x0, 0x0}, 0xfd00) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffcc, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:09:47 executing program 1 (fault-call:7 fault-nth:4): r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 425.079367] FAULT_INJECTION: forcing a failure. [ 425.079367] name failslab, interval 1, probability 0, space 0, times 0 [ 425.090682] CPU: 0 PID: 9759 Comm: syz-executor.1 Not tainted 4.14.175-syzkaller #0 [ 425.098481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.107843] Call Trace: [ 425.110442] dump_stack+0x13e/0x194 [ 425.114086] should_fail.cold+0x10a/0x14b [ 425.118246] should_failslab+0xd6/0x130 [ 425.122227] kmem_cache_alloc+0x44/0x770 [ 425.126297] ? __lock_acquire+0x5f7/0x4620 [ 425.130554] radix_tree_node_alloc.constprop.0+0x1b4/0x300 [ 425.136193] radix_tree_extend+0x1e3/0x410 [ 425.140448] __radix_tree_create+0x3b8/0x4c0 [ 425.144871] __radix_tree_insert+0x98/0x4f0 [ 425.149197] ? __radix_tree_create+0x4c0/0x4c0 [ 425.153787] ? shmem_add_to_page_cache+0x236/0x7f0 [ 425.158745] shmem_add_to_page_cache+0x552/0x7f0 [ 425.163513] ? shmem_unused_huge_scan+0xa0/0xa0 [ 425.168191] ? __radix_tree_preload+0x1c3/0x250 [ 425.172880] shmem_getpage_gfp+0x1710/0x2790 [ 425.177308] ? shmem_mfill_atomic_pte+0x1790/0x1790 [ 425.182340] shmem_file_read_iter+0x447/0xaa0 [ 425.186854] ? shmem_writepage+0xc90/0xc90 [ 425.191093] ? iov_iter_pipe+0x93/0x2b0 [ 425.195082] generic_file_splice_read+0x374/0x5d0 [ 425.199935] ? add_to_pipe+0x350/0x350 [ 425.203832] ? selinux_file_permission+0x7a/0x440 [ 425.208687] ? rw_verify_area+0xe1/0x2a0 [ 425.212756] ? add_to_pipe+0x350/0x350 [ 425.217000] do_splice_to+0xfb/0x150 [ 425.220722] ? alloc_pipe_info+0x2dc/0x380 [ 425.224964] splice_direct_to_actor+0x20a/0x730 [ 425.229642] ? generic_pipe_buf_nosteal+0x10/0x10 [ 425.234480] ? do_splice_to+0x150/0x150 [ 425.238452] ? rw_verify_area+0xe1/0x2a0 [ 425.242505] do_splice_direct+0x164/0x210 [ 425.246656] ? splice_direct_to_actor+0x730/0x730 [ 425.251586] ? rw_verify_area+0xe1/0x2a0 [ 425.255659] do_sendfile+0x469/0xaf0 [ 425.259381] ? do_compat_pwritev64+0x140/0x140 [ 425.264313] SyS_sendfile64+0xff/0x110 [ 425.268195] ? SyS_sendfile+0x130/0x130 [ 425.272178] ? do_syscall_64+0x4c/0x640 [ 425.276144] ? SyS_sendfile+0x130/0x130 [ 425.280115] do_syscall_64+0x1d5/0x640 [ 425.284001] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 425.289184] RIP: 0033:0x45c849 [ 425.292368] RSP: 002b:00007f43dbc64c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 425.300078] RAX: ffffffffffffffda RBX: 00007f43dbc656d4 RCX: 000000000045c849 [ 425.307620] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 425.315333] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 425.322696] R10: 0000000000200086 R11: 0000000000000246 R12: 0000000000000005 [ 425.330051] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000004 [ 425.390655] audit: type=1804 audit(1585944587.623:22): pid=9764 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir531473529/syzkaller.kcAFKg/49/bus" dev="sda1" ino=16113 res=1 20:09:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r6, &(0x7f0000000280)=""/4096, 0x1000) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="b4f8ff78fe18bf09294cbd879f2c2adb6b25acf13463d4a717241c5878ffbc5310babbd8d34ba5316d0bc0d2c2f4735b1ff4f147a584180b70cb167eb261924f46733ac290dc184e0b37640263df21e17036645c467029ca2945a5baeaa2f0caa976ee681e8864bc9b51e766d3acd2a4816ffe16702eb61b31042b347a8e20c783"], 0x5}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @local}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="00000000000000000000f1ff0a00010072737670360000003800020014000200fe8001040000000000000000000000aa20000400"/80], 0x68}}, 0x0) [ 425.516737] audit: type=1804 audit(1585944587.623:23): pid=9763 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir531473529/syzkaller.kcAFKg/49/bus" dev="sda1" ino=16113 res=1 20:09:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000000)="851c88eda0b0f100b15e66ba805262414a0dd65326ff3f11e44b9f94c567ac58935a639642e7bfa6654ec54df5bd2028fd9d081fa181856f7ae4f2867add4540e3b416c3fc54882df379444116969bfd9cecd72ff3274ae9823b38ccf72206787e5ef62408cb9744bfab67a75afd6fbe326282425cc431b5960fa2d0fcc6ffb0015e9025e99a7e24dd19b24a0f083dd8fa9bb2dac3b7481b4da906d1d74c98fa320159ec60cdf1196f009ea25b3706120ca926b3122be4d46525923390e025f7e7", 0xc1}, {&(0x7f0000000100)="05577296d94c34052b5c5e85319cfee8aa8e21f1e08b0a6798d46eb579d7ecf1837084da8c0348edf8b4fb4350158d7a059253d0f7c889af5f8ceb97e2522949842d44f746d031365d23966421b0c04b5dc8f9753785aa6df43662179bcc5aa80cef70d89adf90effa3bfa2e9d", 0x6d}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000180)=0x23) 20:09:47 executing program 1 (fault-call:7 fault-nth:5): r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:48 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod(&(0x7f0000000080)='./bus/file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) truncate(&(0x7f0000000040)='./bus/file1\x00', 0x7f) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f726b66696c65312c75707065726469723d2e2f66696e653072044f3ffa82f6a7327da482174464d9388f2a01829db14a067adcae28f2f56a3e6c6f190791ef59c25d37504b9d2ff6ae80427e28785593bef77e3741f934483870b9c746e7ee2565aa452a023fce207fb95eaec46341c9a700cb4923501cef844ebae12f853a4e5ebd2de190c40ec3566b28f96877f470e10d98ad2d800e344657148bc753b300"/191]) setuid(0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0xc, 0x0, 0xffffffffffffffff, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$chown(0xc, 0x0, 0xffffffffffffffff, r3) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x2}, [{}], {0x4, 0x6}, [{0x8, 0x4e23e91b32751be5, r1}, {0x8, 0x0, r3}], {0x10, 0x3}, {0x20, 0x5}}, 0x3c, 0x2) chdir(&(0x7f0000000200)='./bus\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='./file0\x00') 20:09:48 executing program 5: mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus/file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) socketpair(0x27, 0xa, 0x101, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000080)='f8', 0x2, r2}, 0x68) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000010000000000000004dae4fbdf3e79c091000000000000002000000000000000"], 0x24, 0x0) 20:09:48 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000000105042, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000400)={0x526, 0x8003, 0x4, 0x6, 0x6}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x2012, r1, 0xffffc000) write(r0, &(0x7f0000000200)="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", 0x2fde00) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdb7b, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) [ 425.736264] FAULT_INJECTION: forcing a failure. [ 425.736264] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:09:48 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) close(0xffffffffffffffff) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000200)={{0x2, @name="72fda85479d2affa847854e78b48d252eb1842d76dc8b0521f203fc318878c19"}, 0x8, 0x80, 0x8}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x48, 0x1402, 0x2, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}}, 0x4008000) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) sendfile(0xffffffffffffffff, r0, 0x0, 0x200086) [ 425.782354] CPU: 0 PID: 9783 Comm: syz-executor.1 Not tainted 4.14.175-syzkaller #0 [ 425.790178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.799014] overlayfs: unrecognized mount option "workfile1" or missing value [ 425.799658] Call Trace: [ 425.799677] dump_stack+0x13e/0x194 [ 425.799694] should_fail.cold+0x10a/0x14b [ 425.799709] __alloc_pages_nodemask+0x1bf/0x700 [ 425.799723] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 425.799733] ? lock_downgrade+0x6e0/0x6e0 20:09:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x1, 0x6, 0x28}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x28}, 0x10) [ 425.799748] ? avc_has_perm_noaudit+0x297/0x400 [ 425.799759] alloc_pages_vma+0xc2/0x4a0 [ 425.799771] shmem_alloc_page+0xe1/0x180 [ 425.799780] ? shmem_swapin+0x180/0x180 [ 425.799792] ? cred_has_capability+0x121/0x230 [ 425.799801] ? selinux_ipv4_output+0x40/0x40 [ 425.799813] ? find_get_entry+0x21d/0x690 [ 425.820443] overlayfs: unrecognized mount option "workfile1" or missing value [ 425.822094] ? check_preemption_disabled+0x35/0x240 [ 425.822115] ? __vm_enough_memory+0x261/0x460 [ 425.822126] shmem_alloc_and_acct_page+0x126/0x680 20:09:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xfbdd}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={[], [], @empty}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x68}}, 0x0) [ 425.822138] shmem_getpage_gfp+0x388/0x2790 [ 425.887338] ? shmem_mfill_atomic_pte+0x1790/0x1790 [ 425.892370] shmem_file_read_iter+0x447/0xaa0 [ 425.896877] ? shmem_writepage+0xc90/0xc90 [ 425.901118] ? iov_iter_pipe+0x93/0x2b0 [ 425.905099] generic_file_splice_read+0x374/0x5d0 [ 425.909949] ? add_to_pipe+0x350/0x350 [ 425.913853] ? selinux_file_permission+0x7a/0x440 [ 425.918715] ? rw_verify_area+0xe1/0x2a0 [ 425.923573] ? add_to_pipe+0x350/0x350 [ 425.927486] do_splice_to+0xfb/0x150 [ 425.931218] ? alloc_pipe_info+0x2dc/0x380 [ 425.935480] splice_direct_to_actor+0x20a/0x730 [ 425.940164] ? generic_pipe_buf_nosteal+0x10/0x10 [ 425.945013] ? do_splice_to+0x150/0x150 [ 425.949875] ? rw_verify_area+0xe1/0x2a0 [ 425.954647] do_splice_direct+0x164/0x210 [ 425.958813] ? splice_direct_to_actor+0x730/0x730 [ 425.963682] ? rw_verify_area+0xe1/0x2a0 [ 425.967938] do_sendfile+0x469/0xaf0 [ 425.971677] ? do_compat_pwritev64+0x140/0x140 [ 425.976279] SyS_sendfile64+0xff/0x110 [ 425.980560] ? SyS_sendfile+0x130/0x130 [ 425.984547] ? do_syscall_64+0x4c/0x640 [ 425.988530] ? SyS_sendfile+0x130/0x130 [ 425.992604] do_syscall_64+0x1d5/0x640 [ 425.997044] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 426.002237] RIP: 0033:0x45c849 [ 426.005427] RSP: 002b:00007f43dbc64c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 426.013142] RAX: ffffffffffffffda RBX: 00007f43dbc656d4 RCX: 000000000045c849 [ 426.020416] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 426.027694] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 426.034968] R10: 0000000000200086 R11: 0000000000000246 R12: 0000000000000005 [ 426.042368] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000005 [ 426.075391] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 426.809342] Bluetooth: hci0 command 0x1003 tx timeout [ 426.815387] Bluetooth: hci0 sending frame failed (-49) [ 428.899292] Bluetooth: hci0 command 0x1001 tx timeout [ 428.904592] Bluetooth: hci0 sending frame failed (-49) [ 430.969198] Bluetooth: hci0 command 0x1009 tx timeout 20:09:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:09:57 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$chown(0xc, 0x0, r3, r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x808000, &(0x7f0000001380)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@uid_gt={'uid>', r6}}, {@fowner_gt={'fowner>', 0xee01}}, {@measure='measure'}, {@subj_user={'subj_user', 0x3d, 'fd/3\x00'}}, {@context={'context', 0x3d, 'user_u'}}]}}) r9 = socket$pppoe(0x18, 0x1, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r10, &(0x7f0000000280)=""/4096, 0x1000) connect$pppoe(r9, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:09:57 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x94001, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) syz_open_procfs(0x0, 0x0) r0 = creat(0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x40000) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d3b7e9ac8be83d53658f2cfda8f52f704faa", @ANYBLOB="100029bd7000ffdbdf2521010100060098"], 0x2}, 0x1, 0x0, 0x0, 0x20040080}, 0x4040044) close(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) acct(0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xb0ace1131912d42a) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write(r1, &(0x7f00000002c0)="00058aa582691f9075a3c4fdd647086174ef1480f3239218edcecaf0395de300cb2d98acdea7eb4cffff000000000000768ecc0574740996edfe07593b4812957d152b94d5297cc6da344ca826376887d6475a3212842b8a6b4c9b0f7ac6f1cce46575bcf0", 0x65) 20:09:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="9cd569b8f85a65e9c7a61e7b71925945243f60c3dec8d9c08c9b672da645a0702db1d2fa0686b7160e275a3b314e204757072265d251144c644c59fd722e960aaa0c24b66cfea9bb45f94d4e11c54d5812ac47ae88dea9e2b73bdbd07bc98b5be1cc5b14bf6619df647c8f38c6932f2ebed9ec1f57d8fc481efa6174acc505520131d7f7f9779058c132d7ddd4ebb7d03e9c48f9b55be5351f5b13"], 0x2}}, 0x4000010) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x400200, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x1) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000080)={0xb, 0x77, 0x0, 0x3}, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r1, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) 20:09:57 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) getpgrp(r2) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r5, 0x711, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000001300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001280)={0x68, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0xfe}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008801}, 0x20000050) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x5, 0x8440) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r9, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0xb00, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xb700}]) 20:09:57 executing program 1 (fault-call:7 fault-nth:6): r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 435.031037] FAULT_INJECTION: forcing a failure. [ 435.031037] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 435.036993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9826 comm=syz-executor.2 [ 435.055107] Bluetooth: hci0: Frame reassembly failed (-84) [ 435.055759] CPU: 0 PID: 9823 Comm: syz-executor.1 Not tainted 4.14.175-syzkaller #0 [ 435.068729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.068734] Call Trace: [ 435.068754] dump_stack+0x13e/0x194 [ 435.068773] should_fail.cold+0x10a/0x14b [ 435.068788] __alloc_pages_nodemask+0x1bf/0x700 [ 435.068801] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 435.068812] ? lock_downgrade+0x6e0/0x6e0 [ 435.068824] ? avc_has_perm_noaudit+0x297/0x400 [ 435.068836] alloc_pages_vma+0xc2/0x4a0 [ 435.068849] shmem_alloc_page+0xe1/0x180 [ 435.068858] ? shmem_swapin+0x180/0x180 [ 435.068870] ? cred_has_capability+0x121/0x230 [ 435.068880] ? selinux_ipv4_output+0x40/0x40 [ 435.068890] ? find_get_entry+0x21d/0x690 [ 435.068904] ? check_preemption_disabled+0x35/0x240 [ 435.068920] ? __vm_enough_memory+0x261/0x460 [ 435.068930] shmem_alloc_and_acct_page+0x126/0x680 [ 435.068943] shmem_getpage_gfp+0x388/0x2790 [ 435.068962] ? shmem_mfill_atomic_pte+0x1790/0x1790 [ 435.068982] shmem_file_read_iter+0x447/0xaa0 [ 435.069000] ? shmem_writepage+0xc90/0xc90 [ 435.069009] ? iov_iter_pipe+0x93/0x2b0 [ 435.069023] generic_file_splice_read+0x374/0x5d0 20:09:57 executing program 1 (fault-call:7 fault-nth:7): r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 435.069036] ? add_to_pipe+0x350/0x350 [ 435.069049] ? selinux_file_permission+0x7a/0x440 [ 435.069063] ? rw_verify_area+0xe1/0x2a0 [ 435.069071] ? add_to_pipe+0x350/0x350 [ 435.069079] do_splice_to+0xfb/0x150 [ 435.069087] ? alloc_pipe_info+0x2dc/0x380 [ 435.069099] splice_direct_to_actor+0x20a/0x730 [ 435.069111] ? generic_pipe_buf_nosteal+0x10/0x10 [ 435.069122] ? do_splice_to+0x150/0x150 [ 435.069131] ? rw_verify_area+0xe1/0x2a0 [ 435.069143] do_splice_direct+0x164/0x210 [ 435.069152] ? splice_direct_to_actor+0x730/0x730 [ 435.069166] ? rw_verify_area+0xe1/0x2a0 [ 435.069194] do_sendfile+0x469/0xaf0 [ 435.069212] ? do_compat_pwritev64+0x140/0x140 [ 435.069229] SyS_sendfile64+0xff/0x110 [ 435.069236] ? SyS_sendfile+0x130/0x130 [ 435.069244] ? do_syscall_64+0x4c/0x640 [ 435.069250] ? SyS_sendfile+0x130/0x130 [ 435.069257] do_syscall_64+0x1d5/0x640 [ 435.069271] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 435.069279] RIP: 0033:0x45c849 [ 435.069284] RSP: 002b:00007f43dbc64c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 435.069295] RAX: ffffffffffffffda RBX: 00007f43dbc656d4 RCX: 000000000045c849 [ 435.069301] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 435.069306] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 435.069312] R10: 0000000000200086 R11: 0000000000000246 R12: 0000000000000005 [ 435.069318] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000006 [ 435.184764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9826 comm=syz-executor.2 [ 435.184953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9826 comm=syz-executor.2 [ 435.185137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9826 comm=syz-executor.2 [ 435.190227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9826 comm=syz-executor.2 [ 435.190426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9826 comm=syz-executor.2 [ 435.190609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9826 comm=syz-executor.2 [ 435.195827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9826 comm=syz-executor.2 [ 435.320776] FAULT_INJECTION: forcing a failure. [ 435.320776] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 435.324829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9826 comm=syz-executor.2 [ 435.336805] CPU: 0 PID: 9840 Comm: syz-executor.1 Not tainted 4.14.175-syzkaller #0 [ 435.341314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9826 comm=syz-executor.2 [ 435.344486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.344491] Call Trace: [ 435.344509] dump_stack+0x13e/0x194 [ 435.344526] should_fail.cold+0x10a/0x14b [ 435.344541] __alloc_pages_nodemask+0x1bf/0x700 [ 435.565979] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 435.565994] ? lock_downgrade+0x6e0/0x6e0 [ 435.575162] ? avc_has_perm_noaudit+0x297/0x400 [ 435.579917] alloc_pages_vma+0xc2/0x4a0 [ 435.583907] shmem_alloc_page+0xe1/0x180 [ 435.587963] ? shmem_swapin+0x180/0x180 [ 435.591932] ? cred_has_capability+0x121/0x230 [ 435.596495] ? selinux_ipv4_output+0x40/0x40 [ 435.600886] ? find_get_entry+0x21d/0x690 [ 435.605018] ? check_preemption_disabled+0x35/0x240 [ 435.610040] ? __vm_enough_memory+0x261/0x460 [ 435.614530] shmem_alloc_and_acct_page+0x126/0x680 [ 435.619454] shmem_getpage_gfp+0x388/0x2790 [ 435.623759] ? shmem_mfill_atomic_pte+0x1790/0x1790 [ 435.628828] shmem_file_read_iter+0x447/0xaa0 [ 435.633332] ? shmem_writepage+0xc90/0xc90 [ 435.637557] ? iov_iter_pipe+0x93/0x2b0 [ 435.641524] generic_file_splice_read+0x374/0x5d0 [ 435.646355] ? add_to_pipe+0x350/0x350 [ 435.650252] ? selinux_file_permission+0x7a/0x440 [ 435.655196] ? rw_verify_area+0xe1/0x2a0 [ 435.659249] ? add_to_pipe+0x350/0x350 [ 435.663122] do_splice_to+0xfb/0x150 [ 435.666928] ? alloc_pipe_info+0x2dc/0x380 [ 435.671180] splice_direct_to_actor+0x20a/0x730 [ 435.675846] ? generic_pipe_buf_nosteal+0x10/0x10 [ 435.680682] ? do_splice_to+0x150/0x150 [ 435.684815] ? rw_verify_area+0xe1/0x2a0 [ 435.688898] do_splice_direct+0x164/0x210 [ 435.693036] ? splice_direct_to_actor+0x730/0x730 [ 435.697864] ? rw_verify_area+0xe1/0x2a0 [ 435.701909] do_sendfile+0x469/0xaf0 [ 435.705610] ? do_compat_pwritev64+0x140/0x140 [ 435.710178] SyS_sendfile64+0xff/0x110 [ 435.714049] ? SyS_sendfile+0x130/0x130 [ 435.718021] ? do_syscall_64+0x4c/0x640 [ 435.721985] ? SyS_sendfile+0x130/0x130 [ 435.725957] do_syscall_64+0x1d5/0x640 [ 435.729838] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 435.735014] RIP: 0033:0x45c849 [ 435.738210] RSP: 002b:00007f43dbc64c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 435.745900] RAX: ffffffffffffffda RBX: 00007f43dbc656d4 RCX: 000000000045c849 [ 435.753240] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 435.760494] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 435.767793] R10: 0000000000200086 R11: 0000000000000246 R12: 0000000000000005 20:09:58 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl(r3, 0x4, &(0x7f0000000180)="1981a0337f7b4e9d34bcd46f4ef03bdb24ca6160de2df5cc0e8bd1198bddad40ebd2b8986127ffeef662b8b63fa8e619669e03894bc2aa4bd0fed659c86a1dba5985c6b0574664176cca376b09312ca81e58c7b452167102a2b00799d94c88a7c9332baba9a6b4139440fe3126486980ca9641f312d93143387c1286bd9df406c3736d30680703e72308ea008fc6884d5c38ae5e295134b1bb8291d1a6b3c33a230737fb95d3d43547fe3b2eded098dfec1ea365f1ab8a6e2f5fdb8e9414cdfac06b4b8a") getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007250000004007a2a30005000003", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x7}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', r4}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000001280)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80, r5}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r6, &(0x7f0000000280)=""/4096, 0x1000) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) sendfile(r1, r0, 0x0, 0x200086) [ 435.775693] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000007 20:09:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) getuid() sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) lsetxattr$system_posix_acl(0x0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="0200000001000000000000", @ANYRES32=0x0, @ANYBLOB="0800ecff41ff708ea9ae0a8898af004228733983779645b24c6a4ec4b926ed5e6aa06d", @ANYRES32=0x0, @ANYBLOB="e9678effffff8783c7ecb676075b872800f77ffbc2f0a7b1ad73a696a69a8a6d664e3228b87eab1da10ca099e04045a65f07ba629eb5724652527c5f65e8d88b1e6ff2394c39cb313082decd1d2f0ac7a8b40517d50cc501000000000000003658e492e01b571a6c47925610180b00000000000000", @ANYPTR, @ANYPTR64=&(0x7f0000000380)=ANY=[], @ANYRES32=0x0, @ANYBLOB="1000000000000000"], 0x9, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x14044800) 20:09:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x6357) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x1f2) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) open_by_handle_at(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x12da00) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000140), 0x3) 20:09:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) write$P9_RFLUSH(r4, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r5, &(0x7f0000000280)=""/4096, 0x1000) write$P9_RFSYNC(r5, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) write$evdev(r1, &(0x7f00000000c0)=[{{0x0, 0x7530}, 0x0, 0x2, 0x7ff}, {{r2, r3/1000+30000}, 0x12, 0x7, 0x1}, {{}, 0x15, 0x3, 0xfffffffc}, {{0x77359400}, 0x5, 0x2, 0x3}, {{0x0, 0x2710}, 0x14, 0xfff, 0x7f}, {{}, 0x15, 0x8000, 0x7fff}], 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0x18, 0x32, 0x3ef, 0x0, 0x0, {}, [{0x4, 0x2}]}, 0x18}}, 0x0) 20:09:58 executing program 1 (fault-call:7 fault-nth:8): r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 436.158135] audit: type=1804 audit(1585944598.394:24): pid=9868 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir377318334/syzkaller.UpfeWh/49/bus" dev="sda1" ino=16049 res=1 [ 436.225464] overlayfs: filesystem on './file0' not supported as upperdir [ 436.343392] FAULT_INJECTION: forcing a failure. [ 436.343392] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 436.389906] CPU: 0 PID: 9872 Comm: syz-executor.1 Not tainted 4.14.175-syzkaller #0 [ 436.397739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.407099] Call Trace: [ 436.409763] dump_stack+0x13e/0x194 [ 436.413405] should_fail.cold+0x10a/0x14b [ 436.417574] __alloc_pages_nodemask+0x1bf/0x700 [ 436.422615] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 436.427639] ? lock_downgrade+0x6e0/0x6e0 [ 436.431804] ? avc_has_perm_noaudit+0x297/0x400 [ 436.436489] alloc_pages_vma+0xc2/0x4a0 [ 436.440472] shmem_alloc_page+0xe1/0x180 [ 436.444539] ? shmem_swapin+0x180/0x180 [ 436.448532] ? cred_has_capability+0x121/0x230 [ 436.453123] ? selinux_ipv4_output+0x40/0x40 [ 436.457534] ? find_get_entry+0x21d/0x690 [ 436.461701] ? check_preemption_disabled+0x35/0x240 [ 436.466728] ? __vm_enough_memory+0x261/0x460 [ 436.471229] shmem_alloc_and_acct_page+0x126/0x680 [ 436.476164] shmem_getpage_gfp+0x388/0x2790 [ 436.480497] ? shmem_mfill_atomic_pte+0x1790/0x1790 [ 436.485525] shmem_file_read_iter+0x447/0xaa0 [ 436.490034] ? shmem_writepage+0xc90/0xc90 [ 436.494269] ? iov_iter_pipe+0x93/0x2b0 [ 436.498254] generic_file_splice_read+0x374/0x5d0 [ 436.503101] ? add_to_pipe+0x350/0x350 [ 436.506994] ? selinux_file_permission+0x7a/0x440 [ 436.511842] ? rw_verify_area+0xe1/0x2a0 [ 436.515945] ? add_to_pipe+0x350/0x350 [ 436.519819] do_splice_to+0xfb/0x150 [ 436.523521] ? alloc_pipe_info+0x2dc/0x380 [ 436.527734] splice_direct_to_actor+0x20a/0x730 [ 436.532386] ? generic_pipe_buf_nosteal+0x10/0x10 [ 436.537209] ? do_splice_to+0x150/0x150 [ 436.541166] ? rw_verify_area+0xe1/0x2a0 [ 436.545277] do_splice_direct+0x164/0x210 [ 436.549431] ? splice_direct_to_actor+0x730/0x730 [ 436.554276] ? rw_verify_area+0xe1/0x2a0 [ 436.558329] do_sendfile+0x469/0xaf0 [ 436.562040] ? do_compat_pwritev64+0x140/0x140 [ 436.566650] SyS_sendfile64+0xff/0x110 [ 436.570532] ? SyS_sendfile+0x130/0x130 [ 436.574627] ? do_syscall_64+0x4c/0x640 [ 436.578595] ? SyS_sendfile+0x130/0x130 [ 436.582569] do_syscall_64+0x1d5/0x640 [ 436.586483] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 436.591655] RIP: 0033:0x45c849 [ 436.594827] RSP: 002b:00007f43dbc64c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 436.602567] RAX: ffffffffffffffda RBX: 00007f43dbc656d4 RCX: 000000000045c849 [ 436.609822] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 436.617095] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 436.624349] R10: 0000000000200086 R11: 0000000000000246 R12: 0000000000000005 [ 436.631711] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000008 [ 436.823158] audit: type=1804 audit(1585944599.054:25): pid=9883 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir377318334/syzkaller.UpfeWh/49/bus" dev="sda1" ino=16049 res=1 [ 436.850229] audit: type=1804 audit(1585944599.054:26): pid=9884 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir377318334/syzkaller.UpfeWh/49/bus" dev="sda1" ino=16049 res=1 [ 437.128889] Bluetooth: hci0 command 0x1003 tx timeout [ 437.134179] Bluetooth: hci0 sending frame failed (-49) [ 438.175378] NOHZ: local_softirq_pending 08 [ 439.208945] Bluetooth: hci0 command 0x1001 tx timeout [ 439.214252] Bluetooth: hci0 sending frame failed (-49) [ 441.288705] Bluetooth: hci0 command 0x1009 tx timeout 20:10:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x5) 20:10:07 executing program 0: ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @dev}, 0x6c) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffffb5, 0x60, 0x0, 0xffffffffffffff8a) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x7fffffff) 20:10:07 executing program 5: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="0400000000000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@discard='discard'}]}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) fchmodat(r0, &(0x7f0000000200)='./file0\x00', 0x100) r1 = semget$private(0x0, 0x3, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x200]) semop(r1, &(0x7f0000000100), 0x2d) semtimedop(r1, &(0x7f0000000040), 0x1b9, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)) semtimedop(r1, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x3, 0x6, 0x1000}, {0x1, 0x15, 0x1000}], 0x3, &(0x7f0000000180)={0x0, 0x1c9c380}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r2, 0x0, 0x80000005) 20:10:07 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x80, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000017c0)={0x0, {}, 0x0, {}, 0x4600000, 0x4, 0x3, 0x1c, "00acbf78077456c6882ddb71345c1d7dc7136dad9afc5f4fdf4a6505636ad87ec965af9fe6d5871877003fb41bfe493a1893005cf6efa7ccc626f7c4483308c7", "cc37581e0acfab6529f9ac1374d342203c6aab8172790c914c5831123dc7174d", [0x56, 0x7fffffff]}) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$chown(0xc, 0x0, 0xffffffffffffffff, r7) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="6e617400000000000000fe0100000000000000000000000000000000000000001b0000000500000058140000e001000000000000ffffffff08010000c0020000c0130000c0130000ffffffffc0130000c013000005000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/80], @ANYBLOB="ac1414aaffffffff000000ff000000ff64756d6d7930000000000000000000007767300000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000006200020d00000000d00008010000000000000000000000000000000000000000280069636d70000000000000000000000000000000000000000000000000000010cbe5040000000038006f776e657200"/184, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="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"], 0x14b8) close(r1) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000000040)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x40200, 0x0) sendfile(r1, r0, 0x0, 0x200086) 20:10:07 executing program 1 (fault-call:7 fault-nth:9): r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:10:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x6357) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x1f2) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) open_by_handle_at(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x12da00) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000140), 0x3) 20:10:07 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) bind$isdn(r3, &(0x7f0000000000)={0x22, 0x80, 0xff, 0x4, 0x3f}, 0x6) sendfile(r1, r0, 0x0, 0x200086) [ 445.284722] ip_tables: iptables: counters copy to user failed while replacing table [ 445.307614] FAULT_INJECTION: forcing a failure. [ 445.307614] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 445.311569] FAT-fs (loop5): mounting with "discard" option, but the device does not support discard [ 445.353856] Bluetooth: hci0: Frame reassembly failed (-84) [ 445.354365] Bluetooth: hci0: Frame reassembly failed (-84) [ 445.381506] CPU: 1 PID: 9904 Comm: syz-executor.1 Not tainted 4.14.175-syzkaller #0 [ 445.389334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.398696] Call Trace: [ 445.401294] dump_stack+0x13e/0x194 [ 445.404936] should_fail.cold+0x10a/0x14b [ 445.409095] __alloc_pages_nodemask+0x1bf/0x700 [ 445.413775] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 445.418799] ? lock_downgrade+0x6e0/0x6e0 [ 445.422968] ? avc_has_perm_noaudit+0x297/0x400 [ 445.427642] alloc_pages_vma+0xc2/0x4a0 [ 445.431734] shmem_alloc_page+0xe1/0x180 [ 445.433969] selinux_nlmsg_perm: 503 callbacks suppressed [ 445.433977] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29231 sclass=netlink_xfrm_socket pig=9903 comm=syz-executor.5 [ 445.435795] ? shmem_swapin+0x180/0x180 [ 445.457431] ? cred_has_capability+0x121/0x230 [ 445.462023] ? selinux_ipv4_output+0x40/0x40 [ 445.466434] ? find_get_entry+0x21d/0x690 [ 445.470589] ? check_preemption_disabled+0x35/0x240 [ 445.475618] ? __vm_enough_memory+0x261/0x460 [ 445.480123] shmem_alloc_and_acct_page+0x126/0x680 [ 445.485066] shmem_getpage_gfp+0x388/0x2790 [ 445.489404] ? shmem_mfill_atomic_pte+0x1790/0x1790 [ 445.494115] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29231 sclass=netlink_xfrm_socket pig=9917 comm=syz-executor.5 [ 445.494428] shmem_file_read_iter+0x447/0xaa0 [ 445.511134] ? shmem_writepage+0xc90/0xc90 [ 445.515378] ? iov_iter_pipe+0x93/0x2b0 [ 445.519363] generic_file_splice_read+0x374/0x5d0 [ 445.524214] ? add_to_pipe+0x350/0x350 [ 445.528113] ? selinux_file_permission+0x7a/0x440 [ 445.532966] ? rw_verify_area+0xe1/0x2a0 [ 445.537031] ? add_to_pipe+0x350/0x350 [ 445.540920] do_splice_to+0xfb/0x150 [ 445.544639] ? alloc_pipe_info+0x2dc/0x380 [ 445.548882] splice_direct_to_actor+0x20a/0x730 20:10:07 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 445.553560] ? generic_pipe_buf_nosteal+0x10/0x10 [ 445.558422] ? do_splice_to+0x150/0x150 [ 445.562403] ? rw_verify_area+0xe1/0x2a0 [ 445.566478] do_splice_direct+0x164/0x210 [ 445.570653] ? splice_direct_to_actor+0x730/0x730 [ 445.575522] ? rw_verify_area+0xe1/0x2a0 [ 445.579608] do_sendfile+0x469/0xaf0 [ 445.583333] ? do_compat_pwritev64+0x140/0x140 [ 445.587931] SyS_sendfile64+0xff/0x110 [ 445.591831] ? SyS_sendfile+0x130/0x130 [ 445.595818] ? do_syscall_64+0x4c/0x640 [ 445.599799] ? SyS_sendfile+0x130/0x130 [ 445.603786] do_syscall_64+0x1d5/0x640 [ 445.607687] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 445.613323] RIP: 0033:0x45c849 [ 445.616512] RSP: 002b:00007f43dbc64c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 445.624229] RAX: ffffffffffffffda RBX: 00007f43dbc656d4 RCX: 000000000045c849 [ 445.631500] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 445.638862] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 445.646229] R10: 0000000000200086 R11: 0000000000000246 R12: 0000000000000005 20:10:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x6357) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x1f2) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) open_by_handle_at(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x12da00) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000140), 0x3) 20:10:07 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f8, 0x1f8, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@broadcast, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg1\x00', 'ip6erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e71b8636352b", @loopback, @rand_addr, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x7fff}}}, {{@arp={@rand_addr, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'macvlan1\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 445.653507] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000009 [ 445.702082] arp_tables: arptables: counters copy to user failed while replacing table [ 445.815479] audit: type=1804 audit(1585944608.054:27): pid=9928 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir377318334/syzkaller.UpfeWh/50/bus" dev="sda1" ino=16137 res=1 20:10:08 executing program 0: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f8, 0x1f8, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@broadcast, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg1\x00', 'ip6erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e71b8636352b", @loopback, @rand_addr, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x7fff}}}, {{@arp={@rand_addr, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'macvlan1\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 445.984564] arp_tables: arptables: counters copy to user failed while replacing table 20:10:08 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000000)={0x1fa, 0x1b, &(0x7f0000000180)="d1466a8fe8d007e94c7ddae3725dd2dbfb1eab0c97ba31e7d13b5f0a3c2c8140fcba5e7aae728b16065e113d897c6844fde4fd60eea0490fe94a596157778a0db917220538a6b60646df4bf0cd684b48cd87deccd94d124f6b3c4db78ff50005bda7540e74bb4067846c057e73d3a1a531cb2b59d390a309fa8bff740760b3efd32c864824d1236a6759220c495a63149134ece88f35b62373f801887b6f590899b7d1ffc9e4a5545f643c4da03953e45febfcf2ffb57c810882e6b217ac415ecaf67157f174e2c35c49764d42019c094012df93b15acda8d0d497da31720100270dca3fcece4641f0cbf38de0415079bd4c46072533786afa49d4fda93fbd3ed74fe98f4116eed44b3f8d2790bdca35f72358f82c6591661062ac167c2ef6b28674ff0359021b1e7f4375b3e8fb3d644f5c86571fa98c9eff51ebddc4952dcc283ac371002b74869e71ab103f03c6b4764fb6f5193bc0e6c4057f0c8b12b5bf46b730e3eb833c915f4210b0c070301ca02db7fc3b1960f77e9e86b4034b951498662058ad958176492d3ac1dae16d22bfa67ee1bd0467e2e5183b5a827e4afbab58d4b813c38c99bbbeffa8bd59911f6324a2435f3960369ee99462017694477bd4fa08ad3d0ef18da23d431d15f39b5bab58ca0b15a610d1fe25e64fba815163208f1e173dadfcec2ac138d7bc475123c3798e2c020adfb16366f32ce927439e88b6f0c40cf502e6b4ce0da73217ded1bebc18e1277101dfa9475ce7a6b8c5f30ca2f0f357a21b5246fef2a21da608eaa24423871e624049f5c07bfd68f766307e428201edeff505df953a1ac409cf237c67cbf1709116faa73c60ba705597fae0de9fc520240d639fe9f1695eeeb1ddf2c3c89d1c6b0dcdbe4d4ddd42b02dd7ffa8666ec72f66568fdc10306b8f92f996c70ff8f6a56ac1a28f913964ef2639e2acb688740baec1300808c3cdc717838924ad062612f8d509758e9ebd5e4fc6b83316ff9fa0e4a3a4680836a21cc513a62ece995146097c8c1744a3d105c6c7e1f37c9b2f7f0d69f40b6f41b2ce128550091f54cd6020f5eeb23ca830c5e008f4c34373d2566944edb0062c7fcd872e9b7bb6a5408efd84cd66e6b9e891e1d54316ad8dc4eace4a55f68a5d84aff9d8d39f534ac10072f0ea203064a31dcd15b5e112f1cd60530b3c82a1bd4ee1b5b2778667b57a57ea3fdadc3f7ad702e11f0d0ca9e1df44dc5587cfcd1e85a64cba53d90b055787356f10b6651f60117425ddf61dcab93aea51437236491ba600895d56c70ffa652fb8416da0a55e37b8ccbc07c73b6d7c43db6db3ce95ff186576f0d7c5f1485bcfb3403c941b788d0dcfb36d0f3143b7723be6ba36ffcfdaff7c7eb46f3060961e8329596b53cbb7b42c34fedb641bc79036b74ef12610f3c46d46c2b18003116525a54e8ded8cae7a"}) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 446.111575] arp_tables: arptables: counters copy to user failed while replacing table [ 446.230873] audit: type=1804 audit(1585944608.464:28): pid=9943 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir476170561/syzkaller.lSIuwh/56/bus" dev="sda1" ino=15873 res=1 [ 447.368386] Bluetooth: hci0 command 0x1003 tx timeout [ 447.373741] Bluetooth: hci0 sending frame failed (-49) [ 449.448420] Bluetooth: hci0 command 0x1001 tx timeout [ 449.453719] Bluetooth: hci0 sending frame failed (-49) [ 451.528277] Bluetooth: hci0 command 0x1009 tx timeout 20:10:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x5) 20:10:17 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x42200, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x1) 20:10:17 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x0, @empty, 'lo\x00'}}, 0xffffffffffffff52) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:10:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2220, 0x0, 0x0, 0x7, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x503843, 0x0) socket$phonet(0x23, 0x2, 0x1) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7fb, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0xa, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000100)={0x101, 0x5}) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) 20:10:17 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) getdents64(0xffffffffffffffff, &(0x7f0000000280)=""/4096, 0x1000) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @mcast2, 0x83}, 0x1c) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) sendto$rxrpc(r3, &(0x7f0000000080)="8a307aa8e06b584ec6dd2e79a12796d5c0e14b1585693bd0503a455869cfea369af69d6c95", 0x25, 0x10, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x81, @remote}}, 0x24) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000140)={0x18, 0x0, {0xc03, @dev={[], 0x31}, 'lo\x00'}}, 0x1e) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r5, &(0x7f0000000280)=""/4096, 0x1000) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r6, &(0x7f0000000280)=""/4096, 0x1000) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x18103, 0x0) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:10:17 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000000)={0x1fa, 0x1b, &(0x7f0000000180)="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"}) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:10:17 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000000)={0x1fa, 0x1b, &(0x7f0000000180)="d1466a8fe8d007e94c7ddae3725dd2dbfb1eab0c97ba31e7d13b5f0a3c2c8140fcba5e7aae728b16065e113d897c6844fde4fd60eea0490fe94a596157778a0db917220538a6b60646df4bf0cd684b48cd87deccd94d124f6b3c4db78ff50005bda7540e74bb4067846c057e73d3a1a531cb2b59d390a309fa8bff740760b3efd32c864824d1236a6759220c495a63149134ece88f35b62373f801887b6f590899b7d1ffc9e4a5545f643c4da03953e45febfcf2ffb57c810882e6b217ac415ecaf67157f174e2c35c49764d42019c094012df93b15acda8d0d497da31720100270dca3fcece4641f0cbf38de0415079bd4c46072533786afa49d4fda93fbd3ed74fe98f4116eed44b3f8d2790bdca35f72358f82c6591661062ac167c2ef6b28674ff0359021b1e7f4375b3e8fb3d644f5c86571fa98c9eff51ebddc4952dcc283ac371002b74869e71ab103f03c6b4764fb6f5193bc0e6c4057f0c8b12b5bf46b730e3eb833c915f4210b0c070301ca02db7fc3b1960f77e9e86b4034b951498662058ad958176492d3ac1dae16d22bfa67ee1bd0467e2e5183b5a827e4afbab58d4b813c38c99bbbeffa8bd59911f6324a2435f3960369ee99462017694477bd4fa08ad3d0ef18da23d431d15f39b5bab58ca0b15a610d1fe25e64fba815163208f1e173dadfcec2ac138d7bc475123c3798e2c020adfb16366f32ce927439e88b6f0c40cf502e6b4ce0da73217ded1bebc18e1277101dfa9475ce7a6b8c5f30ca2f0f357a21b5246fef2a21da608eaa24423871e624049f5c07bfd68f766307e428201edeff505df953a1ac409cf237c67cbf1709116faa73c60ba705597fae0de9fc520240d639fe9f1695eeeb1ddf2c3c89d1c6b0dcdbe4d4ddd42b02dd7ffa8666ec72f66568fdc10306b8f92f996c70ff8f6a56ac1a28f913964ef2639e2acb688740baec1300808c3cdc717838924ad062612f8d509758e9ebd5e4fc6b83316ff9fa0e4a3a4680836a21cc513a62ece995146097c8c1744a3d105c6c7e1f37c9b2f7f0d69f40b6f41b2ce128550091f54cd6020f5eeb23ca830c5e008f4c34373d2566944edb0062c7fcd872e9b7bb6a5408efd84cd66e6b9e891e1d54316ad8dc4eace4a55f68a5d84aff9d8d39f534ac10072f0ea203064a31dcd15b5e112f1cd60530b3c82a1bd4ee1b5b2778667b57a57ea3fdadc3f7ad702e11f0d0ca9e1df44dc5587cfcd1e85a64cba53d90b055787356f10b6651f60117425ddf61dcab93aea51437236491ba600895d56c70ffa652fb8416da0a55e37b8ccbc07c73b6d7c43db6db3ce95ff186576f0d7c5f1485bcfb3403c941b788d0dcfb36d0f3143b7723be6ba36ffcfdaff7c7eb46f3060961e8329596b53cbb7b42c34fedb641bc79036b74ef12610f3c46d46c2b18003116525a54e8ded8cae7a"}) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 455.572931] Unknown ioctl 1074033725 20:10:17 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000000c0)={0x990000, 0x5, 0x1ff, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x3, [], @value=0xffff}}) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:10:17 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x42200, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x1) 20:10:17 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000000)={0x1fa, 0x1b, &(0x7f0000000180)="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"}) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:10:17 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r5, 0xfffffff8}, 0x8) pread64(r4, &(0x7f0000001340)=""/94, 0x5e, 0x2) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r6, &(0x7f0000000280)=""/4096, 0x1000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r6, 0x40bc5311, &(0x7f0000001280)={0x2, 0x1, 'client0\x00', 0x0, "891e5641ef101ad7", "50a16c48d1629069fe4ea04e7f6eb5cf4f792ec1fcf4592c9c64882fd8424011", 0x9, 0x3}) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000180)="9c9e3b755c0a753c09eb853a5d4667953967c1ee93ca3458e3f6216991ca438b5b9a392eca1f2faa5181f9364f249768d1af003542b0b75999b967780353892c1ba5d4b2c4ed715c61239d2a18be0bb70ff5f8322b1dfb8871d26e5384598667437815f4c966fbcb61621e30b584697fed2b9daeccd5220b7b0c2a860ddf306b70a8505de52da25417f4c58f2d1b115ac86c48cd4da061f8e660f87d251ade1c7638683df97aacb3e00720be76") 20:10:18 executing program 4: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000000)={0x1fa, 0x1b, &(0x7f0000000180)="d1466a8fe8d007e94c7ddae3725dd2dbfb1eab0c97ba31e7d13b5f0a3c2c8140fcba5e7aae728b16065e113d897c6844fde4fd60eea0490fe94a596157778a0db917220538a6b60646df4bf0cd684b48cd87deccd94d124f6b3c4db78ff50005bda7540e74bb4067846c057e73d3a1a531cb2b59d390a309fa8bff740760b3efd32c864824d1236a6759220c495a63149134ece88f35b62373f801887b6f590899b7d1ffc9e4a5545f643c4da03953e45febfcf2ffb57c810882e6b217ac415ecaf67157f174e2c35c49764d42019c094012df93b15acda8d0d497da31720100270dca3fcece4641f0cbf38de0415079bd4c46072533786afa49d4fda93fbd3ed74fe98f4116eed44b3f8d2790bdca35f72358f82c6591661062ac167c2ef6b28674ff0359021b1e7f4375b3e8fb3d644f5c86571fa98c9eff51ebddc4952dcc283ac371002b74869e71ab103f03c6b4764fb6f5193bc0e6c4057f0c8b12b5bf46b730e3eb833c915f4210b0c070301ca02db7fc3b1960f77e9e86b4034b951498662058ad958176492d3ac1dae16d22bfa67ee1bd0467e2e5183b5a827e4afbab58d4b813c38c99bbbeffa8bd59911f6324a2435f3960369ee99462017694477bd4fa08ad3d0ef18da23d431d15f39b5bab58ca0b15a610d1fe25e64fba815163208f1e173dadfcec2ac138d7bc475123c3798e2c020adfb16366f32ce927439e88b6f0c40cf502e6b4ce0da73217ded1bebc18e1277101dfa9475ce7a6b8c5f30ca2f0f357a21b5246fef2a21da608eaa24423871e624049f5c07bfd68f766307e428201edeff505df953a1ac409cf237c67cbf1709116faa73c60ba705597fae0de9fc520240d639fe9f1695eeeb1ddf2c3c89d1c6b0dcdbe4d4ddd42b02dd7ffa8666ec72f66568fdc10306b8f92f996c70ff8f6a56ac1a28f913964ef2639e2acb688740baec1300808c3cdc717838924ad062612f8d509758e9ebd5e4fc6b83316ff9fa0e4a3a4680836a21cc513a62ece995146097c8c1744a3d105c6c7e1f37c9b2f7f0d69f40b6f41b2ce128550091f54cd6020f5eeb23ca830c5e008f4c34373d2566944edb0062c7fcd872e9b7bb6a5408efd84cd66e6b9e891e1d54316ad8dc4eace4a55f68a5d84aff9d8d39f534ac10072f0ea203064a31dcd15b5e112f1cd60530b3c82a1bd4ee1b5b2778667b57a57ea3fdadc3f7ad702e11f0d0ca9e1df44dc5587cfcd1e85a64cba53d90b055787356f10b6651f60117425ddf61dcab93aea51437236491ba600895d56c70ffa652fb8416da0a55e37b8ccbc07c73b6d7c43db6db3ce95ff186576f0d7c5f1485bcfb3403c941b788d0dcfb36d0f3143b7723be6ba36ffcfdaff7c7eb46f3060961e8329596b53cbb7b42c34fedb641bc79036b74ef12610f3c46d46c2b18003116525a54e8ded8cae7a"}) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 455.794148] Unknown ioctl 1074033725 [ 457.608021] Bluetooth: hci0 command 0x1003 tx timeout [ 457.613907] Bluetooth: hci0 sending frame failed (-49) [ 458.652132] NOHZ: local_softirq_pending 08 [ 459.687981] Bluetooth: hci0 command 0x1001 tx timeout [ 459.694228] Bluetooth: hci0 sending frame failed (-49) [ 461.767973] Bluetooth: hci0 command 0x1009 tx timeout 20:10:27 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x42200, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x1) 20:10:27 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x0, @empty, 'team_slave_1\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) setuid(0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$chown(0xc, 0x0, 0xffffffffffffffff, r5) write$FUSE_ENTRY(r3, &(0x7f0000001280)={0x90, 0x0, 0x5, {0x4, 0x0, 0x3a5, 0x3, 0x4, 0xffffffff, {0x0, 0x6, 0x31, 0x15188255, 0x40, 0x200000, 0x2, 0x2, 0x3, 0x1, 0xffff, 0x0, r5, 0x80000001, 0x800}}}, 0x90) r6 = openat$cgroup(r3, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000414000825bd7000eadbdf25080001000000000008000100020000000800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0xc00, 0x0) ioctl$TIOCCONS(r7, 0x541d) sendfile(r1, r0, 0x0, 0x3) 20:10:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x5) 20:10:27 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000000)={0x1fa, 0x1b, &(0x7f0000000180)="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"}) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:10:27 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) ioctl$SNDCTL_DSP_GETFMTS(r2, 0x8004500b, &(0x7f0000000000)=0xfffffffa) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x403, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'team_slave_0\x00'}}, 0x1e) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) ioctl$SNDRV_PCM_IOCTL_STATUS32(r4, 0x806c4120, &(0x7f0000000080)) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:10:27 executing program 4: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r5, 0xfffffff8}, 0x8) pread64(r4, &(0x7f0000001340)=""/94, 0x5e, 0x2) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r6, &(0x7f0000000280)=""/4096, 0x1000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r6, 0x40bc5311, &(0x7f0000001280)={0x2, 0x1, 'client0\x00', 0x0, "891e5641ef101ad7", "50a16c48d1629069fe4ea04e7f6eb5cf4f792ec1fcf4592c9c64882fd8424011", 0x9, 0x3}) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000180)="9c9e3b755c0a753c09eb853a5d4667953967c1ee93ca3458e3f6216991ca438b5b9a392eca1f2faa5181f9364f249768d1af003542b0b75999b967780353892c1ba5d4b2c4ed715c61239d2a18be0bb70ff5f8322b1dfb8871d26e5384598667437815f4c966fbcb61621e30b584697fed2b9daeccd5220b7b0c2a860ddf306b70a8505de52da25417f4c58f2d1b115ac86c48cd4da061f8e660f87d251ade1c7638683df97aacb3e00720be76") 20:10:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000480), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) getuid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='htcp\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0x4d, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007250000004007a2a30005000003", @ANYRES32, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008fccf0d00000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)=@getqdisc={0x48, 0x26, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfffd}, {0x8}, {0xd, 0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8000) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x4e24, 0x5ef0, @rand_addr="0fb3550163cdae45174f368808f2faec", 0x7}}}, 0x88) creat(0x0, 0x10003) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000091400042cbd7000fddbdf25080001000100800008000100020000000800010002000000080001000000000008000100000000450008000100020000000800010000001500080001000100000008000100020004"], 0x58}, 0x1, 0x0, 0x0, 0x20004081}, 0x4004800) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) mknod$loop(0x0, 0x0, 0x0) 20:10:28 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x42200, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000000c0)=0x1) [ 465.806929] Unknown ioctl 1074033725 20:10:28 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00', 0x6) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0xfffffffe, 0x6, 0x4, 0x4000000, 0x3, {0x77359400}, {0x1, 0x1, 0x40, 0x6, 0x5, 0x7, "30ce19ca"}, 0x1, 0x3, @userptr=0x5, 0x7, 0x0, r0}) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000000)={0x401, 0x43}) ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x5) close(r1) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:10:28 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x42200, 0x0) [ 465.932546] Unknown ioctl 1074033725 20:10:28 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) ioctl$SNDCTL_DSP_GETFMTS(r2, 0x8004500b, &(0x7f0000000000)=0xfffffffa) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x403, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'team_slave_0\x00'}}, 0x1e) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) ioctl$SNDRV_PCM_IOCTL_STATUS32(r4, 0x806c4120, &(0x7f0000000080)) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:10:28 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:10:28 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) memfd_create(&(0x7f0000000000)='lo\x00', 0x1) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000240)={0x400, 0x7, &(0x7f0000000080)=[0x40, 0xffff0000, 0x2, 0x9, 0x8, 0x1, 0x2], &(0x7f0000000180)=[0x5, 0xafc, 0x7fffffff], &(0x7f00000001c0)=[0x7fff, 0x7fff], &(0x7f0000000200)=[0x3, 0x0], 0x0, 0xffffffff80000000}) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080), 0x0) sendfile(r1, r0, 0x0, 0xfb58) 20:10:28 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 466.214538] 9pnet: Insufficient options for proto=fd [ 467.847537] Bluetooth: hci0 command 0x1003 tx timeout [ 467.852954] Bluetooth: hci0 sending frame failed (-49) [ 469.927314] Bluetooth: hci0 command 0x1001 tx timeout [ 469.933117] Bluetooth: hci0 sending frame failed (-49) [ 472.016984] Bluetooth: hci0 command 0x1009 tx timeout 20:10:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x5) 20:10:38 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x42200, 0x0) 20:10:38 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) bind$phonet(r1, &(0x7f0000000080)={0x23, 0x6, 0x1, 0x2}, 0x10) sendfile(r2, r0, 0x0, 0x200086) 20:10:38 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'geneve0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000f004000020020000000000001001000008040000080400000804000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000b16b457b000000000000000000000000000000000400"/64], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000100100000000000000000000000000000000000000000000000050006d616e676c6500000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb00000000000000000000ac1e0101ac1414bb0d0000000100000000000000e000000200000000ffffff000c06bbbbbbbbbbbb00000000000000000000ff7f00ffffff0000000000000000000000000000000000000000000000000000ffffff0000ff00000000000000000000002004000002412600050002626f6e6430000000000000000000000069705f76746930000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000020000c000100100000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaaaa00000000000000000000000000000000000000000000000000007f0000017f00000101000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e80100000000000000000000000000000000000000000000000028015345434d41524b0000000000000000000000000000000000000000000000010000001f00000073797374656d5f753a6f626a6563745f723a666f6e74735f63616368655f743a73300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x540) sendfile(r1, r0, 0x0, 0x200086) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r5 = socket(0x28, 0x5, 0x10001) sendfile(r5, r4, &(0x7f0000000000)=0x12c, 0xddf5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001480)=ANY=[@ANYBLOB="602100003e77b2895e9051e7b5156b3f7beea08aa448142b175a715c2985ca494a2d75084fe077c908900b035121ebc3b952014065a49ec23b4c702f6aea3c800badce35114fc11da1526fddce697635364e4638cb73ac96c889fa8818a0c97ab4f91d3894af8b7c243a811a211cfffcab0a8127d55400b50fd2ee42a28e7cdaac01970400000099c2ec0e68399af4c1300dffc499302da9e1701c1604eef146b45f", @ANYRES16=r6, @ANYBLOB="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"], 0x2160}, 0x1, 0x0, 0x0, 0x24000080}, 0x4044005) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r7, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r6, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x64}}, 0x4c005) 20:10:38 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 20:10:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fsync(r5) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:10:38 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x42200, 0x0) 20:10:38 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 475.991257] 9pnet: Insufficient options for proto=fd 20:10:38 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x42200, 0x0) [ 476.048689] ip_tables: iptables: counters copy to user failed while replacing table 20:10:38 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) tkill(r3, 0x20) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000000)={0xfffffffffffffff5}) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:10:38 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 476.122399] 9pnet: Insufficient options for proto=fd 20:10:38 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 476.624381] ip_tables: iptables: counters copy to user failed while replacing table [ 478.086037] Bluetooth: hci0 command 0x1003 tx timeout [ 478.091351] Bluetooth: hci0 sending frame failed (-49) [ 479.127566] NOHZ: local_softirq_pending 08 [ 480.165792] Bluetooth: hci0 command 0x1001 tx timeout [ 480.171111] Bluetooth: hci0 sending frame failed (-49) [ 482.255544] Bluetooth: hci0 command 0x1009 tx timeout 20:10:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 20:10:48 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 20:10:48 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) sendfile(r3, r0, 0x0, 0x5) 20:10:48 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:10:48 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fsync(r5) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:10:48 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:10:48 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 486.227458] 9pnet: Insufficient options for proto=fd 20:10:48 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) close(r3) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000013c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYRESOCT, @ANYRES32=r7, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007250000004007a2a30005000003", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00+\r\x00'/20, @ANYRES32=r7, @ANYBLOB="0700000000fcff00f1ff030008000100627066001800020006000400010000000c0005000600000000000000172a46f5a44eec782591eade474a8106d456212c6460a793e008346a1087236758b47545ab49a65f2ffe1f"], 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', r7}) 20:10:48 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 486.279335] ip_tables: iptables: counters copy to user failed while replacing table [ 486.309566] 9pnet: Insufficient options for proto=fd 20:10:48 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 486.391442] 9pnet: Insufficient options for proto=fd 20:10:48 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnetuser\x00\x00\x00\x00\x00', 0x1) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="cf2aecf58a04d89ce6c35ee60c116e351907f8022c3128d6c3867209fca9a5d9929c35189bdd09b16e", @ANYBLOB="a7b74aad84a9d68309edfe37d385a7c5959263093c6547c70921cd03f191f3b525328e92fad8556bc84028c53466ba9d95a6b464336d4f7eadad3878640848d2e5fa8b4739d9fb4ec579bc08000000e05a0b5dcfe211d1755bf6bb14b485a0d6a6302817bc90809a5369654737bd690aa8c3d0f47f92474410d086c0f409319b188ef91b"], 0x0, 0xb9}, 0x20) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x403, @dev={[], 0x3b}, 'batadv0\x00'}}, 0x1e) 20:10:48 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x407, @local, 'bridge0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000180)=""/4108, 0x100c) write$input_event(r3, &(0x7f0000000000)={{}, 0x16, 0x4ce8, 0x2}, 0x18) sendfile(r1, r0, 0x0, 0x200086) [ 488.324828] Bluetooth: hci0 command 0x1003 tx timeout [ 488.330166] Bluetooth: hci0 sending frame failed (-49) [ 490.404562] Bluetooth: hci0 command 0x1001 tx timeout [ 490.409874] Bluetooth: hci0 sending frame failed (-49) [ 490.644881] NOHZ: local_softirq_pending 08 [ 492.484279] Bluetooth: hci0 command 0x1009 tx timeout 20:10:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 20:10:58 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0xa200, 0x0) 20:10:58 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fsync(r5) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:10:58 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:10:58 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:10:58 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000000)=0x5, 0x2) sendfile(r1, r0, 0x0, 0x200086) 20:10:58 executing program 2: ftruncate(0xffffffffffffffff, 0x1000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) sendfile(r0, 0xffffffffffffffff, 0x0, 0x200086) [ 496.500834] ip_tables: iptables: counters copy to user failed while replacing table 20:10:58 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:10:59 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x102, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="001b000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000101c0012800c0001006d6163766c616e000c00028008000100080000000a0005000400000000000000"], 0x48}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="60010000", @ANYRES16=r5, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x24000094}, 0x2404c081) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f00000008c0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="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"], @ANYRES16=r5, @ANYPTR], 0x3}, 0x1, 0x0, 0x0, 0x20000010}, 0x810) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="74010000", @ANYRES16=r5, @ANYBLOB="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"/366], 0x174}}, 0x801) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/mice\x00', 0x10200) ioctl$SNDRV_PCM_IOCTL_PAUSE(r6, 0x40044145, &(0x7f0000000380)=0x1) 20:10:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000000)={r2}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000000)={r2, 0x2}) r3 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x23}, 0x5}, @in6={0xa, 0x4e20, 0x87, @remote, 0x7fffffff}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @rand_addr=0x2}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @multicast1}], 0xa8) ftruncate(r3, 0x1000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000040)) sendfile(r5, r3, 0x0, 0x200086) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r7, &(0x7f0000000280)=""/4096, 0x1000) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000001680)=ANY=[@ANYBLOB="00000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000ef070000000028622114000063f8ffffffffffffff01000000000000080000000000000000000000000000000000000000000000000000000000000001000000020000000800000000000000e50e0000000000000008000000000000f8ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099bb05ff71d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c1e6709ae06916bf1dd090521700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002371b32ef21f183bbccb9e2abc9682bd13785a3f642c23e78470c768da2bdb3a2690128dae1582ba995ab296cf289d9d9023eec8c1458dc25414ab455517857d2a53aae09c0a34bda627c4b014145b3b7a698e59bf42fdab98bc34a87807d3c0de99d96e5a560f7dfd940509b2761f4e22be89584f173ea4ed61f9ee19f759e17f46f4fe1b4b8f0d71c5"]) [ 496.847939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10234 comm=syz-executor.2 20:10:59 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000000)={0x2, 0x8002, 0x8, 0x102}) [ 497.072629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10236 comm=syz-executor.2 20:10:59 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) close(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001280)=ANY=[@ANYBLOB="0000000000000000040000000004000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000001000000cb5a0000eaffffffffffffff03000000000000000100000001000000020000000000000000000000000000000000000000000000000000000000000009000000001000009a17000000000000ffffffff0000000004000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000560f9604d095457c00"/438]) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022bbd7000fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x84) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f0000001440)={{0x0, 0x2}, 'port1\x00', 0x22, 0x31001, 0x9, 0x2, 0x0, 0x401, 0x0, 0x0, 0xb}) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r6, &(0x7f0000000280)=""/4096, 0x1000) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000001500)={0x2000, 0x800, 0x140, 0x400, 0x6, 0x7df7773c, 0x20, 0x0, {0x1f, 0x11, 0x1}, {0x7, 0x4}, {0x6, 0x3}, {0x4, 0xa7}, 0x2, 0x2, 0xfffffffc, 0x1, 0x1, 0x8, 0x7c, 0x401, 0x3, 0x39, 0x2, 0x1, 0x0, 0x203, 0x0, 0x5}) connect$pppoe(r5, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) sendfile(r0, r0, 0x0, 0x200086) [ 498.563431] Bluetooth: hci0 command 0x1003 tx timeout [ 498.568786] Bluetooth: hci0 sending frame failed (-49) [ 500.643169] Bluetooth: hci0 command 0x1001 tx timeout [ 500.648500] Bluetooth: hci0 sending frame failed (-49) [ 502.722956] Bluetooth: hci0 command 0x1009 tx timeout 20:11:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, 0x0) 20:11:08 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:08 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:08 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2420000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000003e0004002bbd7000ffdbdf250a0000005e38f80121516cf967e123049be7f46cfc4dcd84185bd0fa9a7f9df72896a6bb66a5fb3c741df20e652043c33b4ed995f08e33c54b7bd660ceb0c2939c8ae55b2ed88b15b3f3ed8164198326efe750fd14151b4f6b6b576d34fb1dafedf533cd73060404e0e29e45a08696dedca9503df791b32153e202d4ecade48ddb4846e92f76381203e53816d72a3a1a37067ea76d187988a9755e6d540b98423fdcb45d62a984aa8db15791b5189f1a229b64f66000f7e2ef"], 0x14}, 0x1, 0x0, 0x0, 0x20010}, 0x400c010) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) tkill(r4, 0x20) syz_open_procfs$namespace(r4, &(0x7f00000001c0)='ns/net\x00') sendfile(r1, r0, 0x0, 0x200086) 20:11:08 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fsync(r5) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:08 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) close(r4) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:11:08 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:09 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0xffffffffffffff4d, 0x3) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:11:09 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 506.754008] ip_tables: iptables: counters copy to user failed while replacing table 20:11:09 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:09 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:09 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r1, r0, 0x0, 0x200086) [ 508.802133] Bluetooth: hci0 command 0x1003 tx timeout [ 508.808168] Bluetooth: hci0 sending frame failed (-49) [ 510.881959] Bluetooth: hci0 command 0x1001 tx timeout [ 510.887430] Bluetooth: hci0 sending frame failed (-49) [ 512.961678] Bluetooth: hci0 command 0x1009 tx timeout 20:11:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 20:11:19 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:19 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000000)={@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}}, 0xc) 20:11:19 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000000)={0x8200000000000000, 0x0, 0x38000000, 0x0, 0xa}) ftruncate(r0, 0x1000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0xffffffff7fffffff) close(r2) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000040)) sendfile(r2, r0, 0x0, 0x200086) 20:11:19 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fsync(r5) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:19 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:19 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:19 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:19 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 516.983320] ip_tables: iptables: counters copy to user failed while replacing table 20:11:19 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:19 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fsync(r5) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:19 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 517.150858] ip_tables: iptables: counters copy to user failed while replacing table [ 519.040996] Bluetooth: hci0 command 0x1003 tx timeout [ 519.046393] Bluetooth: hci0 sending frame failed (-49) [ 521.120741] Bluetooth: hci0 command 0x1001 tx timeout [ 521.126042] Bluetooth: hci0 sending frame failed (-49) [ 523.200527] Bluetooth: hci0 command 0x1009 tx timeout 20:11:29 executing program 2: r0 = memfd_create(&(0x7f0000000080)='\xd2\xb4mnet\xffm\xd4\xef\xc5|\xff\xffl\xf5\xab\x85[W\xce\x1bZ\xe9\xb5Vr\x00\x00\x00\xff\xfe\xd6\xc2]s\xe3\xec\x14A^\x04\x970\x80H\x06Y&\xd4\xa7\xc8\x02\f5&\x0f\xe6Q\x9cB\x1a9\x95,6\x0e8b\"^\xaa\x13\xb2\xce\xbe\xf7pI\b\x19\xb1\x06\xafo\x8bv\x02(\xa3b_\xe7\x98\xca\xf6E,\xf92O\xcb\x12\x86D\\z\xc5L\x9eK\xfb9\x93;d\xe1a\xb7!!\xe5g\xf4[$\xbd\xd4\xae&z\xf7\a\xed\xddN\xc7N\x9a\xcf\xe7_\xd6@\xd6L\f\xf4!\xba', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) ioctl$SIOCRSACCEPT(r2, 0x89e3) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:11:29 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:29 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:29 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fsync(r5) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:29 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r3}) ftruncate(r0, 0x1000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) sendfile(r4, r0, 0x0, 0x200086) 20:11:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 20:11:29 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:29 executing program 0: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 20:11:29 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 527.198086] ip_tables: iptables: counters copy to user failed while replacing table 20:11:29 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0xfffffd) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000000)) sendfile(r1, r0, 0x0, 0x200086) 20:11:29 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fsync(r5) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:29 executing program 0: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 20:11:29 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:29 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:29 executing program 0: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 527.326846] ip_tables: iptables: counters copy to user failed while replacing table 20:11:29 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fsync(r5) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 527.467490] ip_tables: iptables: counters copy to user failed while replacing table 20:11:29 executing program 2: r0 = memfd_create(&(0x7f0000000080)='\\vmnet0?\'`@{,vmnutV\xb9\xe0\x83user\x00\xda\x81\x15+\xbfT\xa9\x1b\xbfeG{\x9d\xb0\x92:c|\x9f\xc7\']`#\xfc\xc1\xf6k\x89G\xf3\x97(\x892\xd2\x9e\xee\xbd\x80\x9e\xbc#\x1c\xb8\xe6\a\xdf3\"\xd2D0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fsync(r5) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:39 executing program 0: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:39 executing program 4: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 20:11:39 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fsync(r5) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:39 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) ioctl$SNDRV_PCM_IOCTL_DROP(r4, 0x4143, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:11:39 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x32b6}, &(0x7f0000000080)=0x8) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x403, @remote, 'veth0_vlan\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:11:39 executing program 0: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:39 executing program 4: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 20:11:39 executing program 0: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:39 executing program 4: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 537.449393] ip_tables: iptables: counters copy to user failed while replacing table [ 537.493077] ip_tables: iptables: counters copy to user failed while replacing table 20:11:39 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:39 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:39 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:39 executing program 4: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:39 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0xe5) sendfile(r1, r0, 0x0, 0x200086) 20:11:39 executing program 4: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 537.664944] ip_tables: iptables: counters copy to user failed while replacing table 20:11:40 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000014c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r5, &(0x7f0000000280)=""/4096, 0x1000) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:11:40 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fsync(r5) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:40 executing program 4: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:40 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:40 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:40 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 537.885905] ip_tables: iptables: counters copy to user failed while replacing table 20:11:40 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:40 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:40 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fsync(r5) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:40 executing program 2: r0 = memfd_create(&(0x7f0000000180)='\\\x00\x0f\x00\x00@r\x9b\xf0\x8dY\x9f}>\x04\x00\x00\x00,\x16\xf5\x7fmoet0\xc5d\x10\xe3\x89\xc8\xd7m\xe8\x18\xd9\xb70\x0f\x8e?d\x8e=8\xe4\x0e\x97\xc8\xfcJ:\x02\xb5`\xdb\x0fxH\x93B=\xbe\xee\xde\x8eN\x99\xa2D\xd3\xc8\xcf\xf4\xc3\xef\xcb\xcc\xb1\xe6\xe0\x99\x90\x80/\x06\xba)\xdf\x93`\x05\x82\xea\x9e\xbe\xeeQ\xe7\x8d\xd4\xae\xb8\x12_Y\xc0\xc7\xe7\x8c\xa8R\xd7\xf7N\x83]\xc9x,\xf3\xfcp\xbb', 0x4) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r5, &(0x7f0000000280)=""/4096, 0x1000) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x0) keyctl$chown(0xc, 0x0, 0xffffffffffffffff, r4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x3ff, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="8773cb654d35dd598a05a6ca81392c9c1920a1f3b8a0e1758f53cb7f3817850d67f115a972085f86a787a94954263af8ea02d1b691f85853ecd13720a384c93494fbf6307d00d7e3d271730d0e598b095c76a595a3d7de779c6c00cb3ab23730a75faf1a28ebc6b292fc717d461a329ea95d4bc095d1f6bdab6ffc05629db0dd3e919d9f007e56a6c31f42cbaae4fa", 0x8f, 0x5}, {&(0x7f00000002c0)="75cf0a6614f47d866e6f1ba783243d2bfb6ff044b561966caadd2a73b0d2f8ab41eea8091e825f65280afb9c6a6525f8157cb86880e7446e1523cf20179c6c5c38950363b8410eea0fcf5cba44df3b189e90ce2e0911c78bff142f29f28bef91787d695507c93c69f494e6d801705b38d550ab1e3be039ce37304f928a49a3a9af4ec30c44301fc2f637ce1a74d5b7c7da19cd356c0bc0aab3769be498404c356c6f6a304f80b63d3e14b01a7b71e719d2717cae2b6501", 0xb7, 0x80000000}, {&(0x7f00000000c0)="7108368d7b942c73d3609c2c0f32b9c9f47694c3d1c83e8c96d54c", 0x1b}], 0x4004, &(0x7f0000000400)={[{@gid={'gid', 0x3d, r4}}, {@uid={'uid', 0x3d, r8}}, {@huge_advise={'huge=advise', 0x3d, 'lo\x00'}}, {@huge_within_size={'huge=within_size', 0x3d, 'lo\x00'}}], [{@dont_hash='dont_hash'}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@appraise_type='appraise_type=imasig'}, {@dont_measure='dont_measure'}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@subj_type={'subj_type', 0x3d, '['}}, {@context={'context', 0x3d, 'user_u'}}, {@smackfshat={'smackfshat', 0x3d, '\\\x00\x0f\x00\x00@r\x9b\xf0\x8dY\x9f}>\x04\x00\x00\x00,\x16\xf5\x7fmoet0\xc5d\x10\xe3\x89\xc8\xd7m\xe8\x18\xd9\xb70\x0f\x8e?d\x8e=8\xe4\x0e\x97\xc8\xfcJ:\x02\xb5`\xdb\x0fxH\x93B=\xbe\xee\xde\x8eN\x99\xa2D\xd3\xc8\xcf\xf4\xc3\xef\xcb\xcc\xb1\xe6\xe0\x99\x90\x80/\x06\xba)\xdf\x93`\x05\x82\xea\x9e\xbe\xeeQ\xe7\x8d\xd4\xae\xb8\x12_Y\xc0\xc7\xe7\x8c\xa8R\xd7\xf7N\x83]\xc9x,\xf3\xfcp\xbb'}}]}) 20:11:40 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001340)) sendfile(r1, r0, 0x0, 0x200086) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x52d204, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000180)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000200)={r5, 0x4}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001280)=@assoc_value={r6, 0x6}, &(0x7f00000012c0)=0x8) getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r7, &(0x7f0000000280)=""/4096, 0x1000) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f00000001c0)='veth0_macvtap\x00') ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000000)={'geneve0\x00', {0x2, 0x4e20, @loopback}}) 20:11:40 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:40 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:40 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 538.417861] ip_tables: iptables: counters copy to user failed while replacing table 20:11:40 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 538.467687] ip_tables: iptables: counters copy to user failed while replacing table 20:11:40 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 538.636138] ip_tables: iptables: counters copy to user failed while replacing table 20:11:41 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:41 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:41 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:41 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) tkill(r3, 0x20) tkill(r3, 0x41) 20:11:41 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x100, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000080)={{0x77359400}}, &(0x7f00000000c0)) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000180)={0x100, 0x0, 0x2022, 0x8, 0x3f, {0x0, 0x4}}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000001c0)=0xb7) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:11:41 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:41 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:41 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 539.311497] ip_tables: iptables: counters copy to user failed while replacing table 20:11:41 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:41 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:41 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0x29}, 'syzkaller1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) write$P9_RWRITE(r3, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x3}, 0xb) sendfile(r1, r0, 0x0, 0x200086) 20:11:41 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 539.683012] ip_tables: iptables: counters copy to user failed while replacing table 20:11:42 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:42 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:42 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:42 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$nl_generic(r3, &(0x7f00000012c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001280)={&(0x7f0000001300)=ANY=[@ANYBLOB="c80000003b00000825bd7000fedbdf2520000000cf02eda40ee147d0dddefef4f6cbc12ab6f2f7f03422d4e008deb13830428d6614ce42124fe70661b05174597dc2b61173a451073cbeb58bf9b17531e2a823aeff0800000069664582dc4504300dfe91ef12bd9d0be4d560330dac377897280c58d33988c6e2219485c1f9d980fe0a3913a4a8847f64b44ab4da4ebdedf57af8d226bd975a967c92bec6fdf39b0ed4d069c729b21d99c83a563bf19fddea502f33de9d640e866dc941d4595b61a6c2fbfef40000ac5f2a3948a5ed25a8"], 0xc8}, 0x1, 0x0, 0x0, 0x4044}, 0x90) getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'veth1_to_bond\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:11:42 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:42 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:42 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:42 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:42 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 539.885586] ip_tables: iptables: counters copy to user failed while replacing table 20:11:42 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:42 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:42 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:42 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:42 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:42 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x5ed, 0x440, {0x0}, {r4}, 0x47, 0x6}) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) tkill(r6, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') getdents64(r7, &(0x7f0000000280)=""/4096, 0x1000) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r8, &(0x7f0000000280)=""/4096, 0x1000) kcmp(r5, r6, 0x6, r7, r8) 20:11:42 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:43 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:43 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:43 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:43 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:43 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:43 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:43 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:43 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r2, &(0x7f0000000280)=""/4096, 0x1000) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000000)) close(r1) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x403, @dev={[], 0x16}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:11:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:43 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:44 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:44 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:44 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="a40000000001010400000000000000000100000424001080080001400000000808000140000000080800024000000000080001400009e36b1703ad04c2a03b00bd2008000c4000000003240010800800034000000007080003400000000408000140ed000004080002400000099c08000340000000022800048024000180050002000300000005000200f80000000600050003040000050001000600000010001640000035e5a6511e9547746907ebb7905cdcca74fdafe9d91dd6137360c74f7eac4aee69f27b3710f0e947905b49e31946e583cf47e0d0ae495083dabcf9467fe5fe9ee376a9d375907513fbdb5c83bf945128d7d67488f39b3414896d39fb0ecdcf914552b32b156e73ce7bf2ba3e1139df2a349b5061d6755a3c3bddeef1717403c4075c1a57c15ac97e2155a40d2c0a6b27a9c272a3134f619a527efb91e9317c5cd672c858903c4f09680d81ab83f08946170e8ea356ad145c3e5e3d449f9627806431257accf7b7dde508b3e90b5c5161f9a5d9e531b3d5a48d"], 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ftruncate(r0, 0x1000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) sendfile(r2, r0, 0x0, 0x200086) 20:11:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:44 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 542.582167] net_ratelimit: 12 callbacks suppressed [ 542.582181] ip_tables: iptables: counters copy to user failed while replacing table 20:11:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:45 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:45 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r4, &(0x7f0000000280)=""/4096, 0x1000) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 542.985960] ip_tables: iptables: counters copy to user failed while replacing table 20:11:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:45 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`R{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) sendfile(r2, r0, 0x0, 0x200086) 20:11:45 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:45 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:45 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:45 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:46 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:46 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:46 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:46 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:46 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:46 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:46 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:46 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f00000012c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000180)={r6, 0xc7, "b69e1105f14c78b72780f03a2cb925c3be6247631ada3eedee2592849e125a7d54ffb04f7e60043b2f2fdf59e7a68b12f3c6e04f56a5056ccc43e999c47ffade90f31b2761daeb798b7e2cb639091779ee7235e186dd4ae2f1d013cc7f9c99c12c193d1d5fb4b2ccd944f0ad1e3d31f916d10bf10305865aa74f3e883c530ae5ad7c87e56dc64b51ca25f5ab15a845cb4afd645bb6b922cba3c530007ca531029e9cf89bbee506172bd8133114a14f4f38c67c7fee0021a44028e0876237b96e53860433444201"}, &(0x7f0000001280)=0xcf) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000080)={0x0, 0x101, 0x7, &(0x7f0000000000)=0x3}) 20:11:46 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:46 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:46 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:46 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, 0x0) [ 544.239585] sctp: [Deprecated]: syz-executor.2 (pid 10846) Use of struct sctp_assoc_value in delayed_ack socket option. [ 544.239585] Use struct sctp_sack_info instead 20:11:46 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, 0x0) 20:11:46 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, 0x0) 20:11:46 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, 0x0) 20:11:46 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, 0x0) 20:11:46 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, 0x0) [ 544.463066] sctp: [Deprecated]: syz-executor.2 (pid 10846) Use of struct sctp_assoc_value in delayed_ack socket option. [ 544.463066] Use struct sctp_sack_info instead 20:11:47 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:47 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:47 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:47 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) sendto$phonet(r3, &(0x7f0000000180)="aaaaa9a15dab3c433ee04a10b34ab231ff74e056d2426bd2003fa6b48606a78437abc6257ea9e450d8d06de90fb95a2967d66369b52d44658c861e2221483d6c1b2ade20582522e724e4ec4a7427e3ba5c6cd293faad7327629308ef835a6bde98b911d2188c6b232010af5fc9125961c8f6882c7eaceb47238a5acf41cde6339fa3a70f776649750b2d48456ab5d77a2ceb27add104a8044c3cf6050d2dde1801278a8070a5ce97111e1a9e6bdba34a22f2b49c7b3844246295bc429642a817bffaa512297a0d21aa6efcb8986badb49773dc18aa37080a104e30a4032f87f27dcd5fa03728a877b6594e1e024fda8bcbaff687", 0xf4, 0x6000, &(0x7f0000000000)={0x23, 0x9, 0x6d}, 0x10) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:11:47 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:47 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:47 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) [ 545.128029] 9pnet: Insufficient options for proto=fd [ 545.135821] 9pnet: Insufficient options for proto=fd 20:11:47 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:47 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) [ 545.261602] 9pnet: Insufficient options for proto=fd [ 545.272696] 9pnet: Insufficient options for proto=fd [ 545.402591] 9pnet: Insufficient options for proto=fd 20:11:47 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 20:11:47 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 545.423735] 9pnet: Insufficient options for proto=fd 20:11:47 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 545.506662] 9pnet: Insufficient options for proto=fd [ 545.559606] 9pnet: Insufficient options for proto=fd [ 545.641260] 9pnet: Insufficient options for proto=fd 20:11:48 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:48 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:48 executing program 2: r0 = memfd_create(&(0x7f0000000100)='_vmnet0\x06\'`@{,vmnet1em\x02\x00\x00\x00r\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) 20:11:48 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 20:11:48 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 20:11:48 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 546.052178] 9pnet: Insufficient options for proto=fd 20:11:48 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 546.102244] 9pnet: Insufficient options for proto=fd 20:11:48 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 546.147584] 9pnet: Insufficient options for proto=fd [ 546.387438] ip_tables: iptables: counters copy to user failed while replacing table 20:11:48 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x1000) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', r0}, 0x10) signalfd4(r1, &(0x7f00000000c0), 0x8, 0x80000) r2 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r2, 0x1000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000040)) sendfile(r3, r2, 0x0, 0x200086) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r5, &(0x7f0000000280)=""/4096, 0x1000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000012c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000000200)={0x54, r6, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd401}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x600}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4040) [ 546.739554] ip_tables: iptables: counters copy to user failed while replacing table 20:11:49 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:49 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 547.061189] ip_tables: iptables: counters copy to user failed while replacing table 20:11:49 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:49 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) vmsplice(r3, &(0x7f0000002500)=[{&(0x7f0000000180)="0d42409f607dc5480587c13a6880f14f8d298993124219673e72e5ee17cfea2db7ebfcf40dda7fbe4df06a55a68c5b255b21cdb6e9aafa768c9b3758be003e2267d3156527a9e8ae89a70892c8d3b0092f9bd2050ef4d64cb5e687b28d2bb3a9da7d557ca03b23f99d20abbfd5bc1d4b7aaddfe56dbb462fef4711076c9c97e009893e1f88e38b7ccb8682ad1dc5d08c6da990ad37febed731748dcea3dfdc8e9349cfe7145e62c5", 0xa8}, {&(0x7f0000000080)="93b258a1d745dcc4bc4388cd1d2d03723a3a024820b582d6728802d9374fe6307d4eb66279d14ac2b52fa09409fdffbb932174ee1b6cec07f41ba8efac8c92f1bbedec0bf1a3", 0x46}, {&(0x7f0000000240)="78fbda3aa5174543025a7ec23a225d8a7c748d0bb8e8c003596fbaf5f83948618536568a8ad5bdf5d29b02866bff131e991818c59e0885ee71328c778413e78ae19446a3dee8d378bf118862543a81626b3879864d6fff4301362899da1442d64e7944bfb3b06bdbeada0069016ada4531cab7bf78d47df8ae12cd6c2849da70bf74da50277695b72e9ef5906a6805c691", 0x91}, {&(0x7f0000000300)="62d1a2d8356365b2bf6c777acbaddb5fab4f4bd8db51b767767ee615d04735c5458b17d7fe2ed5f643bec7f2ea08311cb59d528c3fda9cb1277e282d70188450ff5150d706f820d3a20400bcc69cb3b3d9c55f589997992d3161bed6f6d14dbde6648af9b1ae01ae61dfb31650b38dbfdd5ef97ae4afa4f3096c4912f4239cc9fd373db5a55386356ca4172b9be6805f84647a666af35c395339c99ef2569b8764129fe6184ae616f677bad885acef0c6bfb100c41af36383db068a036d47dfd1a97f4d09ca0b4e4ac2d8692e736ba1fbd682eda2ef9df35dc1ab3a35313c1494674ead45bdb298d938afeec874b31f6325dc394c799408557243ee84b3f", 0xfe}, {&(0x7f0000000000)="91cb3b438ac451b2371fee708b2d529a992a61d87385cc86d5d29e24b35b6507b3e214ac8b5ae6024884f50aa794ebaccc3da403b1d8b074993a672e0d02cf3d", 0x40}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="6cf69f2cbae4fbd0efb41f7aa2784599aed6ea2c2791a70756bfe4ceb8afb6e1efb0176da5022681fe2871c835fbfd2ab9a0955c943f0aba8a4adc1f7288bd82230fdfd3d4ba14291984f729309acfa7bfca71645e60cbf708", 0x59}, {&(0x7f0000002480)="41db49053ce0efa7de844ec949fb3c33a0a98593325146e4f7cc1019b187a962721c23a0028015a13226c863603db31c5ea401be0d1ad28397f37dccf1317e5f9c700970c6ae6dd52fbe21a94b02209205abcf40e38d12af2113", 0x5a}], 0x9, 0x3) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) [ 547.388781] ip_tables: iptables: counters copy to user failed while replacing table 20:11:49 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 547.670395] ip_tables: iptables: counters copy to user failed while replacing table 20:11:50 executing program 2: r0 = memfd_create(&(0x7f0000000080)='\\vmnet0?\'`@{,vmnet1em0user\x00Z$\xb5\xc3\xe6c\xda\xa1\x16j\xc7w \x04\x03i\\s\xe9\xe4\x1a\xfc\xdc\xb3\xc1tP\xe2\xcbp5\xdcHf,\xc8\xe0\xdbZz\x1d*\xf5\x88\x9e\xe7\x94\x9ewQ\xa9\xd4w\xc5\xd8\xc6\xe9u\r\xe4\xfc<\xd6\xae\xc9\xae\x88\x1f\xb4\xdb9N\x81\xfc\x0ec\xc0\x03\x89J\x7fA\xea\xae\xafX', 0x5) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) ftruncate(r1, 0x1000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) sendfile(r2, r0, 0x0, 0x200086) 20:11:50 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r4, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:11:50 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 548.050662] ip_tables: iptables: counters copy to user failed while replacing table 20:11:50 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fsync(r5) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 548.202749] ip_tables: iptables: counters copy to user failed while replacing table 20:11:50 executing program 4: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r1, r0, 0x0, 0x200086) [ 548.363301] ip_tables: iptables: counters copy to user failed while replacing table 20:11:50 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000000)={0x2, 0x8002, 0x8, 0x102}) 20:11:50 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000000)=0xd6) ftruncate(r0, 0x1000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) sendfile(r2, r0, 0x0, 0x200086) 20:11:50 executing program 3 (fault-call:6 fault-nth:0): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:50 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r0, 0x1000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x403, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x200086) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r3, &(0x7f0000000280)=""/4096, 0x1000) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000000)={0x2, 0x8002, 0x8, 0x102}) [ 548.620648] FAULT_INJECTION: forcing a failure. [ 548.620648] name failslab, interval 1, probability 0, space 0, times 0 [ 548.671401] CPU: 1 PID: 11018 Comm: syz-executor.3 Not tainted 4.14.175-syzkaller #0 [ 548.679661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 548.689536] Call Trace: [ 548.692131] dump_stack+0x13e/0x194 [ 548.695770] should_fail.cold+0x10a/0x14b [ 548.699927] should_failslab+0xd6/0x130 [ 548.703905] __kmalloc_track_caller+0x2e1/0x7b0 [ 548.708582] ? strndup_user+0x5b/0xf0 [ 548.712386] ? wait_for_completion+0x390/0x390 [ 548.717358] ? vfs_write+0xff/0x4e0 [ 548.720988] memdup_user+0x22/0xa0 [ 548.724532] strndup_user+0x5b/0xf0 [ 548.728330] ? copy_mnt_ns+0x8a0/0x8a0 [ 548.732221] SyS_mount+0x39/0x120 [ 548.735674] ? copy_mnt_ns+0x8a0/0x8a0 [ 548.739577] do_syscall_64+0x1d5/0x640 [ 548.743473] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 548.748753] RIP: 0033:0x45c849 [ 548.751946] RSP: 002b:00007f3eaad9cc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 548.759650] RAX: ffffffffffffffda RBX: 00007f3eaad9d6d4 RCX: 000000000045c849 [ 548.768396] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000 [ 548.775666] RBP: 000000000076bf00 R08: 0000000020000200 R09: 0000000000000000 [ 548.782947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 548.790214] R13: 000000000000074a R14: 00000000004ca085 R15: 0000000000000000 20:11:51 executing program 0 (fault-call:6 fault-nth:0): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20:11:51 executing program 4 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) [ 548.922765] FAULT_INJECTION: forcing a failure. [ 548.922765] name failslab, interval 1, probability 0, space 0, times 0 [ 549.000524] CPU: 1 PID: 11027 Comm: syz-executor.0 Not tainted 4.14.175-syzkaller #0 [ 549.008440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 549.017796] Call Trace: [ 549.020396] dump_stack+0x13e/0x194 [ 549.024036] should_fail.cold+0x10a/0x14b [ 549.028199] should_failslab+0xd6/0x130 [ 549.032616] __kmalloc_track_caller+0x2e1/0x7b0 [ 549.037290] ? strndup_user+0x5b/0xf0 [ 549.041100] ? wait_for_completion+0x390/0x390 [ 549.045684] ? vfs_write+0xff/0x4e0 [ 549.049316] memdup_user+0x22/0xa0 [ 549.052857] strndup_user+0x5b/0xf0 [ 549.056486] ? copy_mnt_ns+0x8a0/0x8a0 [ 549.060384] SyS_mount+0x39/0x120 [ 549.063846] ? copy_mnt_ns+0x8a0/0x8a0 [ 549.068192] do_syscall_64+0x1d5/0x640 [ 549.072103] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 549.077292] RIP: 0033:0x45c849 [ 549.080478] RSP: 002b:00007f03ab297c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 549.088185] RAX: ffffffffffffffda RBX: 00007f03ab2986d4 RCX: 000000000045c849 [ 549.095452] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000 [ 549.102721] RBP: 000000000076bf00 R08: 0000000020000200 R09: 0000000000000000 [ 549.109988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 549.117253] R13: 000000000000074a R14: 00000000004ca085 R15: 0000000000000000 [ 549.160808] FAULT_INJECTION: forcing a failure. [ 549.160808] name failslab, interval 1, probability 0, space 0, times 0 [ 549.210017] CPU: 0 PID: 11036 Comm: syz-executor.4 Not tainted 4.14.175-syzkaller #0 [ 549.217933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 549.227405] Call Trace: [ 549.230001] dump_stack+0x13e/0x194 [ 549.233639] should_fail.cold+0x10a/0x14b [ 549.237796] should_failslab+0xd6/0x130 [ 549.241774] kmem_cache_alloc_node+0x55/0x7a0 [ 549.246332] ? tty_ldisc_ref_wait+0x22/0x80 [ 549.250728] __alloc_skb+0x9a/0x4c0 [ 549.254364] ? skb_trim+0x160/0x160 [ 549.258034] bcsp_recv+0x39e/0x1530 [ 549.261674] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 549.267110] hci_uart_tty_receive+0x1ec/0x4c0 [ 549.271590] ? hci_uart_write_work+0x670/0x670 [ 549.276186] tty_ioctl+0xd5b/0x1220 [ 549.279810] ? tty_vhangup+0x30/0x30 [ 549.283523] ? trace_hardirqs_on+0x10/0x10 [ 549.287756] ? tty_vhangup+0x30/0x30 [ 549.291458] do_vfs_ioctl+0x75a/0xfe0 [ 549.295246] ? selinux_file_mprotect+0x5c0/0x5c0 [ 549.299990] ? ioctl_preallocate+0x1a0/0x1a0 [ 549.304619] ? security_file_ioctl+0x76/0xb0 [ 549.309019] ? security_file_ioctl+0x83/0xb0 [ 549.313509] SyS_ioctl+0x7f/0xb0 [ 549.316883] ? do_vfs_ioctl+0xfe0/0xfe0 [ 549.320847] do_syscall_64+0x1d5/0x640 [ 549.324724] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 549.329896] RIP: 0033:0x45c849 [ 549.333077] RSP: 002b:00007f2758edac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.340775] RAX: ffffffffffffffda RBX: 00007f2758edb6d4 RCX: 000000000045c849 [ 549.348027] RDX: 0000000020000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 549.355283] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 549.362545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 549.369804] R13: 0000000000000582 R14: 00000000004c8177 R15: 0000000000000000 [ 549.404334] kasan: CONFIG_KASAN_INLINE enabled [ 549.412940] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 549.446751] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 549.453005] Modules linked in: [ 549.456202] CPU: 1 PID: 2319 Comm: kworker/u4:3 Not tainted 4.14.175-syzkaller #0 [ 549.463812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 549.473167] Workqueue: events_unbound flush_to_ldisc [ 549.478265] task: ffff8880a14ec600 task.stack: ffff8880a1570000 [ 549.484321] RIP: 0010:skb_put+0x2b/0x1a0 [ 549.488717] RSP: 0018:ffff8880a1577b98 EFLAGS: 00010202 [ 549.494073] RAX: dffffc0000000000 RBX: ffff8880981ec340 RCX: 0000000000000000 [ 549.501334] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000000 [ 549.508598] RBP: 0000000000000000 R08: ffff8880981ec438 R09: ffffffff8a085e90 [ 549.516035] R10: ffff8880a14ecf20 R11: ffff8880a14ec600 R12: 0000000000000001 [ 549.523299] R13: 000000000000000a R14: 00000000000000c8 R15: 000000000000005e [ 549.530562] FS: 0000000000000000(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 549.538778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 549.544652] CR2: 00007ffc5293ac20 CR3: 00000000a4991000 CR4: 00000000001406e0 [ 549.551923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 549.559708] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 549.566968] Call Trace: [ 549.569558] bcsp_recv+0x92e/0x1530 [ 549.573193] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 549.578639] hci_uart_tty_receive+0x1ec/0x4c0 [ 549.583129] ? hci_uart_write_work+0x670/0x670 [ 549.587704] tty_ldisc_receive_buf+0x12e/0x170 [ 549.592282] tty_port_default_receive_buf+0x6e/0xa0 [ 549.597293] flush_to_ldisc+0x1dd/0x3f0 [ 549.601325] process_one_work+0x813/0x1540 [ 549.605563] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 549.610229] ? worker_thread+0x15d/0x1070 [ 549.614373] ? _raw_spin_unlock_irq+0x24/0x80 [ 549.618863] worker_thread+0x5d1/0x1070 [ 549.622836] ? process_one_work+0x1540/0x1540 [ 549.627375] kthread+0x30d/0x420 [ 549.630735] ? kthread_create_on_node+0xd0/0xd0 [ 549.635399] ret_from_fork+0x24/0x30 20:11:51 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x1000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007250000004007a2a30005000003", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x7}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x44}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, [], 0x2a}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr="5c988b66b3ff7fd9513d147972bebdbc"}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0xcb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x44c340, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 20:11:51 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write(r0, &(0x7f0000000300)="b93f202aedaef5a82863af71e493baa151f29896dd52915ed7588a153aa314dc01004e5e6aacf6e10e23e8030000ffff000098f05d599dc91196d172a32d27313c9646928202b9742764140c984f000d56636a53558c65e9c6625ce40000000000001900004ce8f108000000c6bd4f7e54f226839e8da62f7de1dc9d0cdd55a103a537bb2bdd378fac21310e9d2d7cdc4e374953b05272e430187f4c73db34962b13aa364e65e97ff4c2a1a5e7b651ccac0df7c3ba", 0xb5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) fallocate(r1, 0x3, 0x0, 0x8020003) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x0, 0x260, 0x0, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@dev, @rand_addr, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ip={@remote, @local, 0x0, 0x0, 'batadv_slave_0\x00', 'bond_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 549.639108] Code: 41 56 41 55 41 54 41 89 f4 55 48 89 fd 4c 8d b5 c8 00 00 00 53 e8 66 e9 60 fc 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 549.658258] RIP: skb_put+0x2b/0x1a0 RSP: ffff8880a1577b98 [ 549.693685] ---[ end trace 6b6e81a8300d6699 ]--- [ 549.715101] 9pnet: Insufficient options for proto=fd [ 549.727773] Kernel panic - not syncing: Fatal exception [ 549.735089] Kernel Offset: disabled [ 549.738707] Rebooting in 86400 seconds..