x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @local}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000540)={0x5, 0x1000, 0xe6, 0x7fff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
setrlimit(0xc, &(0x7f00000000c0)={0x2})

11:39:21 executing program 5:
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0))
r1 = request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)='/dev/net/tun\x00', 0xfffffffffffffff8)
keyctl$invalidate(0x15, r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
poll(&(0x7f0000000080)=[{r0}, {r2, 0xa00c}], 0x2, 0x2254)
r3 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r3, 0x3)
ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0)

11:39:21 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/autofs\x00', 0x208000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r1, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x3, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0), 0x6}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x2, 0x7, 0xb, 0x102}, 0x0, 0x1ffffe, 0xffffffffffffffff, 0xa)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="5d7702"])
epoll_wait(r0, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x6)
r2 = open(&(0x7f0000000580)='./file0\x00', 0x0, 0x121)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r2, &(0x7f0000000100)=""/241, 0xffd1)

11:39:21 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x8000002, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2, 0x0, @mcast1, 0x20000800}, 0x1c)
splice(r2, 0x0, r1, 0x0, 0x1, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write$cgroup_pid(r1, &(0x7f00000002c0), 0x12)
write(r3, &(0x7f0000000100)="240000001e005f0014f9f407faac470202000000000000000000080008000100000000ff", 0x24)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000280), 0x1)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000300)={0x2, 0xc, 0x4, 0x400, 0x1f, {0x0, 0xea60}, {0x4, 0x8, 0x23, 0x1f, 0x7f, 0x5, "2aaf20fe"}, 0x3, 0x4, @userptr=0x8, 0x7, 0x0, r4})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [{0x0, 0x0, 0xfffffffffffffff9}, {0x2dc, 0x0, 0x3f}, {0x35c, 0x0, 0x8}]})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
ppoll(0x0, 0x0, 0x0, 0x0, 0x1c000000)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={<r5=>r0, 0x49, 0x7, 0x8})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000200)={0xfffe00, 0x8, 0x4000000})

11:39:21 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100))
r2 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r2, 0x3)
close(r2)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})

11:39:22 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r0, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x3)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000600)={0x20002000})
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r1, &(0x7f0000000100)=""/241, 0xffd1)

[ 1195.542492] overlayfs: unrecognized mount option "]w" or missing value
[ 1195.560079] overlayfs: unrecognized mount option "]w" or missing value
[ 1195.660184] net_ratelimit: 4 callbacks suppressed
[ 1195.660190] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:22 executing program 5:
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f0000000000)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={0x0, 0x44, 0x1000}, &(0x7f00000013c0)=ANY=[@ANYBLOB="656e633d726177208afdd21de0f36c83686173683d726d6431363000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000001000000000000"], &(0x7f0000000140)="9bf7107bf7fa8d380b3c8bf270465d6ef468dadf19ad6fc4d844dd62f52713c9e1bcfaacf9b4631825da4202ea9e604410ab81bb888b052aa6d8ad0360082f794d203444", &(0x7f0000000300)=""/4096)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = add_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000001300)="18028a462977cdd8ae3da7a5de633af324c29aba74782b0be1a7596d7eaf76ba237ba9da826d2fe48efb7ac22837c5307f9ee46a389d39735c140e28e0860fcb56e5045d7fd91871cdeca8931193334f0766581841962b4504683b5565dbebfe1f75ec495e4c19164e68fe3fcfd8120f1da39e51448be1e103141c0a5c6d5b8e138b4ff83b2506a4eef2d5cc10a5f1d2e98849be186a095d4afb6c4f0d1e74f277fb02d3fc56bfd6f14c7df8b7", 0xad, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r2)
poll(&(0x7f0000000080)=[{r0}, {r1, 0xa00c}], 0x2, 0x2254)

11:39:22 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r0, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0xa7, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x1b86e, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x4}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0xffff}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000600", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1000"], 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6c6f7765f26469723d2e3a66696c6530"])
getdents64(0xffffffffffffffff, &(0x7f0000000600)=""/225, 0xe1)
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f00000005c0)=ANY=[@ANYBLOB="7f8891efd1ae98e20d13276127826e1ac43b7267c3c200a5f750fdae0ea0828bc732c03af937540b2a11"], &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r1, &(0x7f0000000100)=""/241, 0xffd1)
mkdir(&(0x7f0000000580)='./file0\x00', 0x50)

11:39:22 executing program 5:
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x402, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
poll(&(0x7f0000000080)=[{r0}, {r1, 0xa00c}], 0x2, 0x2254)

11:39:22 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000640)={'vlan1\x00'})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
r3 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r3, 0x3)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000680)={'virt_wifi0\x00'})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x10)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000580)={0x4, 0x0, [{0x10000, 0x70, &(0x7f0000000100)=""/112}, {0x5000, 0xa4, &(0x7f0000000180)=""/164}, {0x4, 0x72, &(0x7f0000000300)=""/114}, {0x1, 0xa8, &(0x7f0000000380)=""/168}]})

[ 1196.092042] overlayfs: unrecognized mount option "loweòdir=.:file0" or missing value
11:39:22 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
write$vhost_msg(r0, &(0x7f0000000140)={0x1, {&(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000000100)=""/14, 0x3, 0x4}}, 0x48)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})

11:39:22 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r1, 0x5452, &(0x7f0000000440)=0x9)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000400)={0x7f, 0x2, 0x5, 0x10001, 0x0, 0x2})
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r3, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:22 executing program 5:
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
poll(&(0x7f0000000080)=[{r0}, {r1, 0xa00c}], 0x2, 0x2254)

11:39:22 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='&6\n\x00\xff\x00\xdc.\xdf\xbbk\xad\x1b\xf3\xf6_|S\x93>\xb4\x15#b\x91\xec\xf2\x12\xbb\xd0\xcd0\xaf\xda\xa8\xe1o+\xbd}EV\xba6\xae\xee(4\xe4\x88\x17\b\xa7\xb04G\xc28\xfb\x19\x94\xdf\x11JE\x02\x98Pm\x0f(\x98\xff\x05[\xd9\xad|\xa3\xc9Y~\xf4\xf7\xf9F\x9c\xf0\x83H\xb5\x12\xdeM\x802\x1f\xa6\x8a\x89\x1c')
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x400, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x336)

11:39:22 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f00000000c0)=0xfffffffd, 0x4)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x4, 0x5, 0x10000006, 0x757, 0x7}, 0x14)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140)=0x5, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)

11:39:22 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x139300, 0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000100))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
r3 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r3, 0x3)
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000140)={0x3, r2})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})

[ 1196.544736] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:23 executing program 5:
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
poll(&(0x7f0000000080)=[{r0}, {r1, 0xa00c}], 0x2, 0x2254)
r2 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r2, 0x3)
write$cgroup_int(r2, &(0x7f0000000000)=0x101, 0x12)
ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000100)={0x7f, 0x0, 0x4, 0x1, 0x0, {0x77359400}, {0x2, 0x8, 0x9, 0xb4, 0x7, 0x2, "a6766163"}, 0x2, 0x4, @planes=&(0x7f0000000040)={0x7, 0x7, @fd=r2, 0x101}, 0x3, 0x0, <r3=>r2})
ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x0)

11:39:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0)

11:39:23 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001640)={0x3, 0x0, [{0x6000, 0x14, &(0x7f0000000240)=""/20}, {0xf000, 0xe0, &(0x7f0000000300)=""/224}, {0x3000, 0xa6, &(0x7f00000016c0)=""/166}]})
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400)='/dev/bsg\x00', 0x202000, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/105, 0x69}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000180)=""/159, 0x9f}], 0x3, 0x7f, 0x4)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})

11:39:23 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
r1 = perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r0, 0x2)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x20010, r1, 0x76684000)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
r2 = perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1)
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000580)={0x0, "9975fdcbb4925403498e211a74fed729"})

11:39:23 executing program 3:
r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xe)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7ff, 0x400000008d}, 0x0)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r1=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000740)=[{&(0x7f0000000040)=""/38, 0x26}, {&(0x7f00000003c0)=""/193, 0xc1}, {&(0x7f00000000c0)=""/117, 0x75}, {&(0x7f0000000280)=""/2, 0x2}, {&(0x7f00000002c0)=""/46, 0x2e}, {&(0x7f00000004c0)=""/99, 0x63}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/34, 0x22}, {&(0x7f0000000700)}], 0xa)
timer_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000240)=<r2=>0x0)
timer_gettime(r2, &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000700)={<r3=>0x0, <r4=>0x0})
timer_settime(r2, 0x0, &(0x7f0000000800)={{}, {r3, r4+10000000}}, &(0x7f0000000840))
futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000400)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)

11:39:23 executing program 5:
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r2, 0x3)
preadv2(r2, &(0x7f0000001780)=[{&(0x7f00000000c0)=""/233, 0xe9}, {&(0x7f0000000300)=""/234, 0xea}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000000)=""/25, 0x19}, {&(0x7f0000001400)=""/250, 0xfa}, {&(0x7f0000001500)=""/195, 0xc3}, {&(0x7f0000001600)=""/251, 0xfb}, {&(0x7f0000000040)=""/4, 0x4}, {&(0x7f0000001700)=""/124, 0x7c}], 0xa, 0x3, 0x20, 0x1)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001840)='/dev/snd/timer\x00', 0x109000)
r5 = syz_open_dev$ptys(0xc, 0x3, 0x0)
poll(&(0x7f0000001880)=[{r2, 0x8027}, {r3, 0x400}, {r4, 0x4010}, {r1, 0x4220}, {r0, 0x1}, {r5, 0x1}, {r2, 0x8000}], 0x7, 0x2254)

11:39:23 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r0, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000580))
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000600))
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000640)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {}, [{0x2, 0x5}, {0x2, 0x7}, {0x2, 0x6}], {}, [{0x8, 0x6, 0xee00}, {}]}, 0x4c, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r1, &(0x7f0000000100)=""/241, 0xffd1)

11:39:23 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:23 executing program 5:
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x20000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r2, 0x3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'bridge0\x00'})
poll(&(0x7f0000000080)=[{r0}, {r1, 0xa00c}], 0x2, 0x2254)

11:39:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:24 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000005c0)={0x40000000})
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r1, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r2, &(0x7f0000000100)=""/241, 0xffd1)

11:39:24 executing program 5:
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0\x00'})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000300)={<r2=>0x0, "3c408f0d7ae7de80ffec255a7d0fa993"})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001300)={<r3=>0x0, 0x800, 0x0, 0x1})
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001700)={0x1, 0x2, {0x4, @usage=0x8, 0x0, 0x1, 0x10001, 0x100000000, 0x6, 0xba000000000, 0x6a, @usage=0x7ff, 0x401, 0x7, [0xffffffffffff321c, 0x0, 0x5, 0x0, 0x401, 0x4]}, {0x1ad9dc16, @usage=0x1ff, r2, 0x2, 0x5b87, 0x7fff, 0x5, 0x3, 0x94, @struct={0x7, 0x4}, 0x7c56, 0x4, [0x9, 0x9, 0x2, 0x8, 0x1, 0x2]}, {0xffffffffffffffb1, @struct={0x5}, r3, 0xa2, 0xf7d8, 0x80000001, 0x9, 0x7, 0x21, @usage=0xffffffffffffffff, 0x6, 0x3, [0x1, 0x8, 0x0, 0x74b6, 0x400, 0x2]}, {0x55, 0x7, 0x6}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0))
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x800, 0x0)
ioctl$TUNSETLINK(r5, 0x400454cd, 0xff65)
poll(&(0x7f0000000080)=[{r0}, {r4, 0xa00c}], 0x2, 0x2254)

[ 1197.512455] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:24 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'syz_tun\x00'})
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
fcntl$lock(r0, 0x5, &(0x7f0000000280)={0x0, 0x2, 0x1000000000, 0x0, r1})
wait4(r1, &(0x7f0000000080), 0x8, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x1c, 0x80000)
getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240), 0x10)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
getpid()
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)=ANY=[])
r5 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r5, 0x3)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x311)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x2, r4})

11:39:24 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0))
r1 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
r2 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r2, 0x3)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000340)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0xb, r2, 0x3)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x2, 0x3}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="168a6ab80f837025360997a904f98db14f38530aedd6c5", 0x17}], 0x1}, 0x20000801)
lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000300)=@v1={0x1000000, [{0x7d}]}, 0xc, 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r4, 0x3)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'bridge0\x00'})
poll(&(0x7f0000000080)=[{r0}, {r3, 0xa00c}], 0x2, 0x2254)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10)

11:39:24 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)

11:39:24 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
socket$inet(0x2, 0x0, 0x0)
socketpair(0x8, 0x1, 0x8000, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
sendto$inet6(r1, &(0x7f00000000c0)="90ecee1e427f9aa53bac134ba9f99d3c4203b063da704cbdafa47043ad939270acbf0828df20b549f0f37c2172c1e89b37eba8774dc0877b8e", 0x39, 0x4000, &(0x7f0000000100)={0xa, 0x4e20, 0x46a0, @empty, 0xfffffffe}, 0x1c)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x2b8)

11:39:24 executing program 5:
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x103080, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'xfrm0\x00', @multicast})
r2 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r2, 0x3)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000001c0)={0x7}, 0x1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'ip6erspan0\x00'})
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={0x0, 0x1000, 0x6b}, 0x0, &(0x7f0000000300)="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", &(0x7f00000000c0)=""/107)
poll(&(0x7f0000000080)=[{r0}, {r3, 0xa00c}], 0x2, 0x2254)

11:39:24 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f0000000100)="d8ed8e6203dd8833cacd1944a539b885199f411974d21b3242bf5e90d4c9730c102252cdfd335f9bdf475a2554ce5ff8e279027e4653", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})

11:39:24 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:24 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000480)={'veth0_virt_wifi\x00'})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'geneve1\x00', @remote})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'ipvlan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'netdevsim0\x00', @link_local})
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000280))
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@nfc={0x104, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)="0a030000000d08233e496d568adc71ff04291b2c150188a8", 0x18}, {&(0x7f0000000300)="498671cc454766bbce11253fc8efa33eabd4b80137da1905d1097e5166f8a2e8", 0x20}], 0x2, 0x0, 0x0, 0x1a0}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000980))

11:39:24 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syz_tun\x00'})
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
fcntl$lock(r1, 0x5, &(0x7f0000000280)={0x0, 0x2, 0x1000000000, 0x0, r2})
ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0xcb72)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r3})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x9f, 0x3a, &(0x7f0000000680)="c06f7c074e16d94abf10ae350abe942458378eb32ea789951bb15ada7238ffc78f2b756edaac0aae48f25761403c84cb8663955dbdcabf55a0906712d9a993f1ce1fdeb5c07bdab53e5827e82e045da686b9c84df0c35e1008cdfb9d7eb8bb95582c66ca72a467172c572f3b76b83590000bd9c962ede5e681dd782d5004d08d39cdf142eb172e368efe34e764f3e18a6a2428b9299dc4db8876ca2a211b73", &(0x7f0000000080)=""/58, 0x9, 0x0, 0xe4, 0xe3, &(0x7f0000000300)="8268697a799085021e8577e55ecbc6ae29e41cb65221faa3e0249188c088943be060d72869cc4716c64b3664307d393f225670dc88886240500abcdc1a2c4fe49e4793cb410889aa3c7fcc4b9e94f0be21e93650a2112b0ef77a00eb5e0cf1ed6ca8ec89654da486e59c5b677d941d6cf4bc1d7dc1810e150aad3fa7f5ad9a397719be549ed06f28fd2943dd66084e1be19a98a397903d1d2c6f0a27f84de57a0b892674a2a792e9881b3f33dbbbada2fc07c43d4328645df2ae3a930beba9b6383c5f6fba637001a9aafbd4a86c5f48c5d7b75bef39693ba78f12e3dea8f552b0e10ca4", &(0x7f0000000580)="3c289edb59a83f90a9a2c9dd44bb4b2a8460713827a19d7c4674cb0e286d5b53168fa4fd8c5e0312d7431d3f92b43b4319c1fbeeb05fe874b7ec18e57da227545d2886ee3e3522ed46283f3855187a77173184ce32c3423c4ae9bf1ff81569f94935ae1d09bd8f8c4d962b4cd33b2bddb9108d94d85630dc1eb8d1a9871a2467adaf737459bdc6ee815d6c48491327c2bfb9275cb9f7515d917805de6f4abfb56db1eaf499cd4a7cfa325a93c0d3e424b39dfb7a51dcd1ecb7f80be60fea32b3d65759335994bd1dba9d6f426624426701668f69550d267bbe51311183d167809ceba6", 0x0, 0x3}, 0x48)

[ 1198.329851] overlayfs: fs on 'file0' does not support file handles, falling back to index=off.
[ 1198.429989] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:25 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:25 executing program 5:
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x400000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0))
mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x11, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
poll(&(0x7f0000000080)=[{r0}, {r1, 0xa00c}], 0x2, 0x2254)

11:39:25 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = getpgid(0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r1, 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'syz_tun\x00'})
sched_setparam(r0, &(0x7f0000000580)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x4, 0x28, 0x80, 0x2, 0x0, 0x0, 0x384c4, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, r0, 0x200004, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="0200000001000000003f0000040000000000000008000600", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000200000000002000000000000000"], 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=ANY=[@ANYBLOB="000100000000000000"], &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1)

11:39:25 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'syz_tun\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'macvlan1\x00'})
write$binfmt_elf32(r2, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0xe5, 0x1f, 0x80, 0x40, 0x6, 0x3, 0x3, 0x1, 0x26, 0x38, 0x302, 0x7, 0x0, 0x20, 0x1, 0x8, 0xbbf2, 0x200}, [{0x60000005, 0x7, 0x2, 0xfffffffa, 0x800, 0x7, 0x8, 0x6}], "f80118df3c46a407af1b22b5880ea53c5d2acabc3d77e132d021795e2ca85b6d"}, 0x78)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
r3 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
clock_gettime(0x0, &(0x7f0000004c00)={<r5=>0x0, <r6=>0x0})
recvmmsg(r4, &(0x7f0000004ac0)=[{{&(0x7f00000006c0)=@xdp, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000740)=""/38, 0x26}, {&(0x7f0000000780)=""/29, 0x1d}, {&(0x7f00000007c0)=""/112, 0x70}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/160, 0xa0}, {&(0x7f0000001900)=""/78, 0x4e}, {&(0x7f0000001980)=""/254, 0xfe}, {&(0x7f0000001a80)=""/83, 0x53}, {&(0x7f0000001b00)=""/178, 0xb2}, {&(0x7f0000001bc0)=""/253, 0xfd}], 0xa, &(0x7f0000001d80)=""/71, 0x47}, 0x3}, {{&(0x7f0000001e00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/170, 0xaa}, {&(0x7f0000002f40)=""/136, 0x88}, {&(0x7f0000003000)=""/2, 0x2}, {&(0x7f0000003040)=""/68, 0x44}, {&(0x7f00000030c0)=""/4096, 0x1000}], 0x6, &(0x7f0000004140)=""/43, 0x2b}, 0x6e7f}, {{&(0x7f0000004180)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004200)=""/62, 0x3e}, {&(0x7f0000004240)=""/89, 0x59}, {&(0x7f00000042c0)=""/125, 0x7d}, {&(0x7f0000004340)=""/118, 0x76}, {&(0x7f00000043c0)=""/69, 0x45}, {&(0x7f0000004440)=""/179, 0xb3}], 0x6, &(0x7f0000004580)=""/232, 0xe8}, 0x1aae}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000004680)=""/213, 0xd5}, {&(0x7f0000004780)=""/179, 0xb3}, {&(0x7f0000004840)=""/146, 0x92}, {&(0x7f0000004900)=""/107, 0x6b}], 0x4}, 0xff}, {{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/158, 0x9e}], 0x1}, 0xfffffff9}], 0x5, 0x2000, &(0x7f0000004c40)={r5, r6+60000000})
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r3, 0x3)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000240)={0x3, r3})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})
r7 = add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000640)=ANY=[@ANYBLOB="030008000000880100eb5bc2d73dd0ba961ca14d30c065897c2399c008ed021665576083c9844cb8b3de6895df4d18fd1e20b9e0c810ba3ab27967d875dcfbd29f178d20e5a6ea5cd6492ef8"], 0xc, 0xfffffffffffffffb)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={r7, 0x77, 0xbd}, &(0x7f0000000300)={'enc=', 'pkcs1', ' hash=', {'sha1-ni\x00'}}, &(0x7f0000000380)="0c9a62bf0788de666882ebf4bd8b42076c7af7958fa9af3e26daf79edf0cd9003987a4c76f4814c0fad5db19231c2cf577a23994aeaffaf9f2f67316df122b92717f439c8a402fb2c3e3e54ad4bb0904264c98a87553debb1baf6cb3d318772b46c0bfe74fd558d32dbfaff44222b83d5647b99eb9a625", &(0x7f0000000580)=""/189)

11:39:25 executing program 3:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)

11:39:25 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

[ 1199.511168] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:26 executing program 5:
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0))
socket$inet_udp(0x2, 0x2, 0x0)
timerfd_create(0x4, 0x80000)
r1 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r1, 0x3)
r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7ffffffc, 0x10d000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syz_tun\x00'})
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
fcntl$lock(r3, 0x5, &(0x7f0000000280)={0x0, 0x2, 0x1000000000, 0x0, r4})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'syz_tun\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0\x00'})
r6 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2)
r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ashmem\x00', 0x0, 0x0)
poll(&(0x7f0000000300)=[{r2, 0xa}, {r3, 0x1012}, {0xffffffffffffffff, 0x80}, {r5, 0x200}, {r6, 0x8520}, {r7, 0x4020}], 0x30, 0x2254)

11:39:26 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r0, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x3, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000600", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000200000000002000f0ff00000000"], 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r1, &(0x7f0000000100)=""/241, 0xffd1)

11:39:26 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
r1 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r1, 0x3)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x3})
ioctl$int_in(r0, 0x40000000af01, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xc2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0))
r3 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000200)='.\x00')
r4 = open(&(0x7f0000000240)='./file0\x00', 0x200000, 0xf2)
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000280)={'bond0\x00', @broadcast})
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000140)={0x0, r3})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2})

11:39:26 executing program 3:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)

11:39:26 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x101040, 0x0)
r3 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r3, 0x3)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000180)={0x3, r3})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0xd, @private1={0xfc, 0x1, [], 0xfe}, 0xfffffffb}, @in={0x2, 0x4e24, @private=0xa010100}], 0x2c)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth1_macvtap\x00'})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0xf000, 0x97, &(0x7f0000000300)=""/151}]})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})

11:39:26 executing program 5:
r0 = getpgrp(0x0)
sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0x5)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x8000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0xa4, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_fuse_handle_req(r1, &(0x7f0000000040)="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", 0x2000, &(0x7f0000008c40)={&(0x7f0000002040)={0x50}, &(0x7f00000020c0)={0x18}, &(0x7f0000002100)={0x18, 0x0, 0x0, {0x969b}}, 0x0, 0x0, 0x0, &(0x7f0000002240)={0x60, 0x0, 0x0, {{0x200, 0x0, 0x0, 0x9, 0x3f, 0x0, 0x0, 0x3}}}, 0x0, 0x0, 0x0, &(0x7f00000043c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x7, 0x0, 0x8f, 0x40, 0x0, 0x0, 0x1000, 0xfffeffff, 0x0, 0x0, 0x4a93}}}, &(0x7f0000006480)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="100010000000000000000000000000008d1efd2b410d4e3de67ab060a4f44edc161cad053a16c4595bc1a3bcfaeaeb5b43a550837cac2f7b3b26cae725bcf3c99675918953965609ce32c7ba3c63299db84eca2dc71aebfb711f64b7dfcd21b65d47ce86d1eb0408de8042efedcd16c8aecfdba709ccf3bb5800930beb3f28a010d5f75aabef2be776d4596741c4355d985c38a7d241e8c9"], 0x0, 0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r4, 0x3)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002140)={'bond_slave_0\x00'})
poll(&(0x7f0000000080)=[{r2}, {r3, 0xa00c}], 0x2, 0x2254)

11:39:26 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:26 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r0, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
pwritev2(r1, &(0x7f00000005c0)=[{&(0x7f0000000580)}], 0x1, 0x3, 0x88a3, 0x12)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r1, &(0x7f0000000100)=""/241, 0xffd1)

11:39:26 executing program 3:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)

11:39:26 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r0, r1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)={0x1, [<r3=>0x0]}, &(0x7f0000001700)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x108, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x18)

11:39:26 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:26 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
fcntl$setownex(r1, 0xf, &(0x7f0000000080))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})

11:39:26 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000180)=ANY=[@ANYBLOB="001c4e2100000000ff"], &(0x7f0000000100)=0x94)

[ 1200.596942] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:27 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10)
sendto(r0, &(0x7f0000000500)="8cd891907fbd1d3ad056c7ae115442ed31cb8e0c260434ecf796b0e1b80e15fd81d6d900181d07257299c95691a5cc97ffff1000", 0x34, 0x0, 0x0, 0x0)
recvfrom(r0, &(0x7f0000000c40)=""/51, 0x33, 0x42, 0x0, 0x0)

11:39:27 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x204900, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2})
fcntl$setown(r0, 0x8, 0x0)

11:39:27 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4)

11:39:27 executing program 1:
r0 = epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r1, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r2, &(0x7f0000000100)=""/241, 0xffd1)
r3 = fcntl$getown(r0, 0x9)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, &(0x7f0000000580)=""/4096)

11:39:27 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000340)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000000)=0x8)

11:39:27 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})

11:39:27 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10)
sendto(r0, &(0x7f0000000500)="8c", 0x1, 0x0, 0x0, 0x0)
recvfrom(r0, &(0x7f0000000c40)=""/51, 0x33, 0x42, 0x0, 0x0)

11:39:27 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000380), &(0x7f00000003c0)=0x8)

11:39:27 executing program 1:
r0 = epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000000})
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x3, 0x400, 0x2, 0x7ffb, 0x7, 0x100}, 0x0, 0xd, r1, 0x2)
epoll_create1(0x80000)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x2, 0x81, 0x2, 0x0, 0x100002, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x9}, 0x0, 0x4, 0x5, 0x4, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000600", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000000"], 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r2, &(0x7f0000000700)=""/226, 0xe2)

11:39:27 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:27 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:27 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x21, &(0x7f0000000080), 0x6)

11:39:27 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10)
listen(r0, 0x1)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r1, &(0x7f00000015c0)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000080)="d2", 0x1}], 0x1}, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r2, &(0x7f0000000000)={0x10, 0x2}, 0x10)
dup2(r2, r0)

11:39:27 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x800, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000100)=0x1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})

11:39:28 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r0, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r1, &(0x7f0000000100)=""/241, 0xffd1)

11:39:28 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001680)=""/4081, 0xff1}], 0x1}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0xffffff68, 0x0, 0x0, 0x800e00547)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/210, 0xd2}, {0x0}], 0x2}, 0x40002)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e)
shutdown(r2, 0x0)
connect$inet(r3, &(0x7f0000000380)={0x10, 0x2}, 0x10)
shutdown(r3, 0x0)

[ 1201.491528] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:28 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000340)={0x1, [<r1=>0x0]}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000140)={r1}, &(0x7f00000001c0)=0x8)

[ 1201.634445] Unknown ioctl 1074048865
11:39:28 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000280)={0x1, [<r1=>0x0]}, &(0x7f00000002c0)=0x8)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r1}, 0x10)

11:39:28 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = getpgid(0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r1, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='xprtrdma_fixup\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0xff, 0xf8, 0x1, 0xdd, 0x0, 0x20, 0x42040, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7ff, 0x9}, 0x40, 0x2, 0x200, 0x7, 0xfffffffffffff5b1, 0x932, 0x4}, r0, 0x0, r3, 0x8)
getdents64(r2, &(0x7f0000000100)=""/241, 0xffd1)

[ 1201.779101] Unknown ioctl 1074048865
11:39:28 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000240)={r2, 0x95, 0xcd}, &(0x7f0000000300)={'enc=', 'oaep', ' hash=', {'cbcmac(camellia-generic)\x00'}}, &(0x7f0000000380)="de8a736f408ecd91cb246ff32241469f7a1eab692f569ab50775fe59ff7b306a81019280e4cf60b754a062e70a7fb869cf4d6bb2a409c94b612ebf359d1299be76b9ec42fa97899af2ec8d38f571ad396dfe23bfb0e254c6056feb97c4b1531f5c1446263c7bb034b9b0eb5d9daa5520c2d3a4b069edf75285ecd9d34e6755a2ad6654d461519d5c86d774efbd5be84de2a085af63", &(0x7f0000000580)=""/205)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000100)={"e223c4ceeb2bb23b1777784b746fcdac", 0x0, 0x0, {0x201, 0x6}, {0x7, 0x7}, 0xffffffffffff8001, [0xeb8, 0x10000, 0x0, 0x1, 0x6, 0x1000000004, 0xc25a, 0x1, 0x2000000000000001, 0x7f, 0x7, 0x1, 0x1f, 0x3ff, 0x400, 0x2]})

11:39:28 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)
r1 = dup2(r0, r0)
shutdown(r0, 0x1)
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0x100, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180)=0xb0)

11:39:28 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:28 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)

11:39:28 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001140)={0x20, 0xa, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_USERDATA={0x4}]}, 0x20}}, 0x0)

11:39:28 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, 0xffffffffffffffff, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb}, 0xe1090e6e3f1f626f, 0x0, 0x0, 0x8, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000600", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="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"], 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="00000000000000000000e5259c32f271f2c6b0ee47b2ebeaa1e5b20d6bf739491ef712105b5fcd5eafee357a22b5a30bb67ecf77ff5480df30b68313f27e0d7582623847912d37cd7cd1dbc3ac3c9381a2de574707005e6cfb16e109fb2008bbc895c7410d439acb2767da09cbd4f20a4026c13ac92f69baafebd2066327ed99c912c559ced8d4af5ea9fddd3b9161849a8c39f2e7fc389490"])
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f05a41fbcb41a2f4a"], &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1)
lsetxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='security.capability\x00', &(0x7f0000000540)=@v2={0x2000000, [{0x2, 0x20}, {0x2, 0xa7}]}, 0x14, 0x2)

11:39:28 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000100)=""/278, 0x0, 0x6000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})

[ 1202.225604] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:28 executing program 5:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000))
pipe(&(0x7f0000000140))

11:39:28 executing program 3:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:39:28 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r0, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6c6f7765726469723d2e3a66696c65305a143a00a5b3e4d589654eb1c0aa807442a7745e651b973b9fbf6bdfb5e398fb0b0cfe7529e3c5c6482717875c72e430773b76f7943929da30d929df4b"])
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r1, &(0x7f0000000100)=""/241, 0xffd1)

11:39:28 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'syz_tun\x00'})
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
fcntl$lock(r2, 0x5, &(0x7f0000000280)={0x0, 0x2, 0x1000000000, 0x0, r3})
r4 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r4, 0x3)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES16, @ANYRES32=r0, @ANYRES16=r3, @ANYRESDEC=r1, @ANYRES16=r4, @ANYRES64=r0, @ANYRESDEC=r3])
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x14d400, 0x0)
r6 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r6, 0x3)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000001580)={'veth1_to_batadv\x00', @broadcast})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x1000, 0x97, &(0x7f0000000580)="ce3c0583ac3fb4f6443ec4833ed038cb19456ac65599e420c36683c22525b16fec62c0705086abedc6deb09619de9e09155b97bf82dc11076a03ef727c3534a9ea1dfba33fbfbc10244f11031fbc894764b39b6a04524bbdfc6e85758274b705e5d5310a6cc83f2af1dec722f2e3b34e218fe1f45d29f84a03b7f954d1fe3cea4e72ebfacb3f51e45b6470054ce00ecefd12b11b6614f64cd6b366a0cbbd68713ba0af5822b17bfe8b8437ecc8614bbb3874da00ae6c30e7d0cb5404c5a5dda4afa9a33fb1893c5701a219377290809323568f8a0fdd7c837c0f2f2f334bb6372673a7a7d4080d410e64fc98404c027e8f487db0d3f77bb6e2749e720dfb5c994926a779bb1cfe054519a81a59520027265a568b4cce65037efbacae38e3dff062328090395a5399f7955388bca87f1ffdfd8606942a90abfdf3346b29883232beb71d60424a62eb8b9e34fbda8e6fa1bf59244210080ba545c29a3bcd63d6d32b410d283c71244b3870688437b4be7861fdbec2c18cff59875a785d007d56228fb05c73c08298ec6c44fd99ceefa9a519a40ca002413eaae3d695db864e738eb3cd72696f0677de57556cd07019281b154469fbba5171b19b9e1df663824e8eb5cffe74f29afa69dc42788e71c3c89d5492fe6a452074d41bb2f5399387d7a6cf9e07c343bfc8da2127654ff107f066a1136af92cc1e1e19076b99e46a6a0d6e0e0e5d937aa6b6a743e5deb54ad810cfc6d95756ed836ec76a0314591a840fc28e33777a61ecd138e1fea7a5e1366a4d58e6f6670f3aff64beaed10bdc33e50df2c3ba935dbdf76bf10b11fda074cbe1b39c67cac483ffac3755bdff344903ddec4ddd181c4fe4fe40a46d90b062ff019950763c22091e8b1bb338eaae923aada226e0f496c79c53837f0913b9f876c7e266fdf4fd18a02ef5bb779ce029993c214484c60be5163faf4dab5971096d8424e3877bbbbc4734ddccbee45281f0ef1474fd6c3f97c638f62c110da16d16f1d97c45c9debe5fe20d6964a8cadad170f408ccaaa9604d0398cb74219a256d5b880b96ed83a0c9f8e88c7310d5a792b07506c8daba8bf6d65c86281ff9162d94bbae1934667923b36c8432291325231b6a0ad46feab2f378e8fd7a4d5113b6353b86d465522a14a22be4e1ec6154b8c177d35446e7e35be5a47822d5cbf42cd985cdd0ea0b191c1eb5d83be1b36a096e5c3b28298ab4d84136c8fb531f36bb698344f29a0e7c87d4b91b87ebceaf692229a2641bd16ba897e0544f0362a0821a860280239d91776b86da31a196ed246239b87b12ab1bd15a0245792083ea458ede75758546b649725942fa7196ee4c119507774e8e006fce4b66102a303a1810caf0a1063c25303be08c0c28e3139601f7a0b84de36d752421e6f653a3653c6bc1be18e0be841e8a6cf683e918d310aa22be928744f1963f5fa58384a35768e70704c26de1d595b0b83bec6044d2018a94a2fd32e40d06e7daf56b4e65acfa7c3b40af267737f4bea84c86b2cacb80b025a7bb1061dfcc271870e4026b67ceda0827762055060c53414e5c8d4fd9622ae7e3615b90c1c05004849d86c9c439d037b38205acf97c32445b1215d72ef9499cfacf6476dfa579d350b1791228fcc20920097346d0c05746b1501b3757ae84de30a5ddd1850d687698c7d21662ded7fe91833f969ac818afc034ad6987c821ccab8d91d53ba48a26b6e3aad485efe5721b33a947ac9b8b818440becc7ae7ba37abf537cdd888b3aae99fc61159db7878f5a5a566938c7aefa983e68d3ca15db0567414c5d4b3bdc8184ff4e27657358daa2a5e439c36740c0e99d616a4367d6c0470f205a81e9becc9498dcd5bd3daf6da6cdbe143ff14414f9e3629471dfe74f7eb4896c43b9d7a1c7e20d8381708cbbc854ec12bd8b4a39b81b9b9fe1833d0c10220ac5bdc68e9795e55a37d6e2dc8f127c7c4b4752ce436bda0bbecdf93db0c236cb89072653fcea873399d6424c07150118e9b81d15ec53d22ddcafa64955d66f166a2b674df69972c1f54312452bf2aa0f6fda3b340a28a7b4c2fc12b0316cb1df47eec0ed1ab1353d424f15b76cf458c1e5d005d95ae92a25a4db81987e6271504e0447bdfc087a35f5e856dccc7cf82d945440f8dec9b36a335bc0530e40840c137ed9eb058ca07d0c2cb7fc335dbcadb0f571d00c299d6e33e97fc3d04f8b86ea36a81da1c38ca002eb4f17e0d0aad2735e3ff17e8e22ca1635ddb8baf285039666810fb479331ab55b2dfac8dd8a9cca54ea883fdf586f3e8d249c76e33da40576b385a3720351112d52f48933ee406320c9494c5d99337a4f7f2c0c6340bd4db9c50225f85134da6690ad48a32aaa4bd5f2aa1c671734eba4d89dc8b81b1f15ab29a5242d7988a9c94f29c0b8dcbf76305f7b33bf6d6f5818f1907b40acb62b75db847de39444f760008de951c681770b13069f3b0fa82dd7e9e464623bc6bc3c6e3be5727b4db471fc13991597de5d5478b2d3febcefafdd363ae62a5a117e6bdbaa855bea199820daaa6c423aedb89408d5ef506339f98e4882b50c7b0f68f997dd3e47d7e6cc3140a0770be3064fa3eec061acaf534e7d8fcad6344d875afe98ed8a7aef3867cebc6c121548ee3c5d147ca8f2e106e4cb3632620a2ae8e806316b0c3f2e7fd5b2e6ff3e1bc777676cb6736f40d36d957904123b995349c14ddf95dee5396ff1b8ffedd2d92255fc3efedafb095be5a5ba4ddf2cfc2c96ed04ac9372fe759bb55c3193651ca52edda0f6635d40c8186a2d075b39e3c2a17d3cbef7111819a5463af581a2f8bdf7fe7e441fef58ee5311f19db1501f1d50899d5e0ff0266ea97e6f24f0fa667b247ed9525a8fb79f58fc5bbb52ea082b010ac4a16f4b46bfb132c223612c9139c9ecbaa0e6d22c0fad16aad10b171d2181dc79822287258da5880f46b5760dcd61e06ed2f2c7696d7bc24ecabe02e95c320a9661ebc9dce2a43ca55a5b46cf62e2db9bf776b63de522932821cbad96215b6c15491a084870ee329cc869901fb8dade5ad63e95aaad62695476b74ecaa2b2ad0f895837fce1d559e591e4e3e66bc7a7003e5d2401af50a4cf70badf58ddb9bc7e4eb2532f231040d3b516bdb699f7ebd88cec73ca6db328daf8a777a3c1aaa490269ad56191da46bc21918f282426c246860b54ab4c93f4c56601e5e3b50ab1c4806917408cc9b9a29ee6547aca68257b487b77085a594e570ceda9168591d0a87e7788083f49214b847c0ac6c8a2326a3fd42eb9b518ca24529ea1d848643fc83e1dca6770070d1638ba5ddd9e988def7f215e97cdba7d72f3aa18b2d4899e4ea9b86542b721ecbe6263d499c7b987834835e985cb928272df4085a0e1e04db7457cd2a1577d436ed28e0de784daf075eb396a6b826a7c7b1f7d760c2e20d4753715856c917a94a9f4eec232d0f1569cd0eb05e7503053e8af6719306dc6c640eec9d81339171e613b83cf27471916d1faf6a4353507dc77061721e79f82fd1d43992ca14a42660fd937c33f1a28175b0496dba9cf26534bcf5d2be271e573a1dc64f18e1a3e4cf3b339db0839b249af9e7b72732632830781cbe28010b76dd20fba79eca310b67fea720a4e446332c70bdcb75021aa7629a7bd5fcc6845def06151ed475efb52bfa6f5975fd046e283e72d75b8bb82f8abc788da7a2e2836ecff7048cc404b2aa262ed1093d65263f1a9386f049ab37da7104c6c009bd27e28f3947ba937fe54a5d30cd2be6ace9bee9e18a9e24e6d27157aeaab2f6960547298735ef8110b79c331968b436d0e8fa668fe7ef2e753c95e68f6d71f64db88b78799c7e78c8cd6ad43f5377b124961bdb7a507bd36cd3f402ce919f183b42f5feb023f152368a4a4e19737d9c27ddcd45bd843da04b397dcc6270265f2c838a1b43c92bd7e280be42fb24396aa19e6b2ff0065a0debe0dbcad9291b8c1f5309861f2aa95836606381e3e827c78fc8ff9bf8285e7a0cceaae266216cbf9e9f45861e13d482b686798bb36e584f22a8c64fbb5fc3adb53c1b9c18bd84c6a820a62ecff6e0281742497911b02a4e354a37f677678a2268ea2368f0c049625a6fae2683141af4ebcff01241a1334a2cd3cbefd214e30c10123a74475e51a23aa96d90c688019e95c8360cfd8c84ac8f650d393f60b2bb38e7d6c6d49485fcd0b5d385fcd403614d4112bc23c909ed8ec5fd1ec701e93790efeb6eec996195c6000a7398a475f3b7a3c12ce3ad09ecc73291b98566ec17fa0e4c32257a365fa96f313e9e145d454985d8bca8959d2574865098cb923e2edd210ba4c48e3b15d705ad57cd7149fb8fc2049407dbad9d2d8c62b8f0627e09d60de0c503f2621fe7519d392ec24cf2a06dbc3e6e9a131f31045f8ee3c8a0c6f7eb336f5e619576a66cb68c9ec441679274675f29c9412ffb431a9de5f729434047ca662739c125c5027b239e0621cb3dd0d8da9995b48f9576e06be1f826359c4e6a6bf83e67b7a80bd9d0fea69ac2c13c0c99cdcd4b661052d7e0681203b9ce1074be8a953f672ffe34f44dbc34b77dd31e05a7ddd1eb230fc0771ced2dbe9927c22782e3d2b705714526567195691cdb4d2c3c18801e7f74f9fbfe26c96cc638fb6fc796a3afe20e6c18ef74f7fcdf8631659ae9a1174893d5b1168d42c281ef6c582a1a8beaee0ffeca254a1af6fc48054b084c4f6fbbe2d127b84944b6df73c4d32596f3e8d0138b22dce1b4b494105bfa48719e89eda4975acd6c62883c1e3a1ebe84f94f92cb2f93581fa09357a63e3e9397dc3715019cb692f8d22d586e4f40884555507304c939b89f5f6fb3b3d9ae5e4f0140fec4ae734bec703e89e8c34efbf655532eeb0cfe8fc68adccc05ca1dda508d9a506e5b9530b2544ffeecc825575283f386c681a7e7584a2b0c0789866ea4e364b167e4ac5bd7eeada1a14c0ec5e1403c5ac126538b27e2098e993a03c8b63dff9ad151173b498da57b475f948a8dbabab7ed05b0740fc55f250c35f8ec4c433314ef479b89922020e4a64d160a20e681dd2c29c28529ee9013a49b902134081aa0db1ec5dc1e71bbe6d7a6f1e479e2057fc65679cc2e3d0c5a9090a8703f73bb1b61dd0099b909bec2e05271647ed147e91ed3356f1ab1bc0e14dad2b45bba7dc5e353fb35863e8dc4535b02cccebda33cb2695a27ece461ff5d02472c25d272ecd5bdb9ac26a9257d9478dda0b06ee8a28bfdcd3598ef209c361721e91f0596677e79e0c7309d72c7ff75287f7fc7240716faea697219e6c4663bf1ee98728f36a154779f109b9a72c67db0c03fdaa8772c8b82b28d932c7e8a7bd5a48a70e5a34b3d184bb16d8e47e9053242306dd60b74a24fcdc61c5ee187e11d51d5f3db1d8fdd7dd287b9937fa9bab08e1bb3632149e38557ce59ae03f2abf4f3ec0c0991ad9336bfb2e887b7e5cc1e7403fb1d8bf601753771779e973403d30a6488617a69b25490859af33555f0684f23df65c9778abc8581b5d934f455ed6b159619dbbedff9b2a1ed339b7a6cf4fd4036a87db4bd8935508d2ac5c9ae634f0c2e69861dda11937c93b3d5c42027ee101ea29668088aab60eb4d45c98ec15f3f3a4c8d49e6cb2998112b3ec654d5b6d25ea8518711c1f067d3e528f63e08b04bb6dc3593cd9dd34baf625513b6b43733f8e583ffeb0d06ee804f4e4c64cbffc180d96d15afd77f32bc2d0531c977dbf9dd9fc0a049bcded68e298411f6df82cfdace445719e2f222160b3bb9ad386", &(0x7f0000000100)=""/151, 0x54806ce4, 0x0, 0x93, 0x36, &(0x7f00000001c0)="02965718064db15f63f5d466c0b4f400171e6341866cac7f12e6e91bc6710f1e984d4a1f385eeed1d4cbec516f2e5e6d88e60c52f404e801a266465e4b00f6b4eeca48256f4550113145ea5a29a8f821a500e4197633605715523a13200d8370a9e28f55ae7738c7a99a7a70c64026ccb82ed21019e2fec87964fd078fe44767ca06761db2a1463689243b51fae2d983af3402", &(0x7f0000000300)="b607f45e5db542f3009a919217140249bb57257483ee5984883f8fac77deee39e9efde57ac7ad9ecf575ad2ea09b6d5cb31b98733a01"}, 0x48)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})

[ 1202.483436] overlayfs: missing 'lowerdir'
11:39:29 executing program 5:
r0 = epoll_create(0x5)
ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, &(0x7f0000000140)={[0x3]}, 0x8)

11:39:29 executing program 3:
socketpair(0x28, 0x0, 0x0, &(0x7f00000001c0))

11:39:29 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:29 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed}, 0x8)

[ 1202.709335] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1202.756216] overlayfs: failed to resolve 'file0Z': -2
11:39:29 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)

11:39:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040))

11:39:29 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0xa11f, 0x0, 0x0, 0x0, 0x100000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r0, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000740)=0xe8)
syz_mount_image$fuse(&(0x7f0000000580)='fuse\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other='allow_other'}], [{@appraise_type='appraise_type=imasig'}]}})
getdents64(r1, &(0x7f0000000100)=""/241, 0xffd1)

11:39:29 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x800)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000580)={{r2}, "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"})

11:39:29 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:29 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040)='802.15.4 MAC\x00', r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf252500000006000600"], 0x38}}, 0x0)

11:39:29 executing program 5:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_elf64(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0)

[ 1203.433760] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:30 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000140))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x220800, 0x0)
r3 = fcntl$dupfd(r0, 0x406, r1)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f00000000c0)=""/26, &(0x7f00000001c0)=""/116, &(0x7f0000000300)=""/144, 0x100000})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'veth0\x00'})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})

11:39:30 executing program 1:
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001100000139bd70000000df2507000000", @ANYRES32=0x0, @ANYBLOB="650000003080000008001c00", @ANYRES32, @ANYBLOB="08000400ff030000"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x800)
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = getpgid(0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, 0xffffffffffffffff, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
r1 = perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="020000004100000000000008000600"/24, @ANYRESOCT=r1, @ANYBLOB="00e6ff00", @ANYRES64=r0, @ANYBLOB="10000200000000002000000000000000"], 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="26696c653000000000000000a92b942c2a9ec2dcc04fd82b829e534fa1abd14f00000000"])
r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r2, &(0x7f0000000100)=""/241, 0xffd1)

[ 1203.573474] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
11:39:30 executing program 5:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={[], 0x10}}, 0x60)

11:39:30 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001140)={0x14, 0xa, 0xa, 0x3}, 0x14}}, 0x0)

11:39:30 executing program 5:
r0 = epoll_create1(0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20000004})

[ 1203.914748] overlayfs: unrecognized mount option "&ile0" or missing value
11:39:30 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)

11:39:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00', 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x64}}, 0x0)

11:39:30 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)={0x2, 0x0, [{0x10000, 0xcb, &(0x7f0000000100)=""/203}, {0xd000, 0xcc, &(0x7f0000000300)=""/204}]})

11:39:30 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x71, 0x0, 0xfc, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r0, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000001640)={'batadv_slave_1\x00'})
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000600)=""/4096, &(0x7f0000001600)=0x1000)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000600", @ANYRES32=0xee00, @ANYBLOB="08000004", @ANYRES32=0x0, @ANYBLOB="10000200000000002000000000000000"], 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r1, &(0x7f0000000100)=""/241, 0xffd1)

11:39:30 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040)='802.15.4 MAC\x00', r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25250000000600", @ANYRES32], 0x38}}, 0x0)

11:39:30 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:30 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0)

[ 1204.270421] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1204.322401] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1204.344483] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1204.373958] overlayfs: fs on 'file0' does not support file handles, falling back to index=off.
11:39:30 executing program 3:
pipe(&(0x7f0000003800))
bpf$ITER_CREATE(0x21, 0x0, 0x0)

11:39:30 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x24, @long}, 0x14, &(0x7f0000000380)={&(0x7f00000002c0)="1f778189985a0c87a4d460d6409507165aa1399730cd2f076e56d6804179a7f0a6d3bcad64b818c268e56d0ec676d4e9a3b25eee41998a2390a00b3a85c1098a648546fff1767688c65b4d9fd02835c5fdb781575194dc94b4a3c248b2ce1b306bd03ee9460893", 0x67}}, 0x0)

[ 1204.424476] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'.
11:39:31 executing program 3:
r0 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4)

11:39:31 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x30, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1040200}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x188, r1, 0xfc9c081e57d5804b, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x74}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x149, 0x33, @assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x51}, @device_a, @broadcast, @random="cc5fe2942b12", {0x6, 0x5}}, 0x20, 0x1f, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x6c, 0x1}, {0x30, 0x1}, {0x6, 0x1}, {0x60}, {0x2}, {0x6c, 0x1}, {0x1, 0x1}, {0xc}]}, @val={0x2d, 0x1a, {0x2, 0x1, 0x4, 0x0, {0xa32e, 0x9, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x200, 0x3f}}, [{0xdd, 0x7f, "153356873576e5f2c5ba8f0d1f932b2d22a2cce2717c14c5ba10867cb4b191e7f72f407f4030ddfc6245ac79a234720b10a8019dcec14cba506dc70c6c4e5f3e097d66fe631defbb14958cc09a176da124af67c95ee4b40476b824cc1e9b496ace58f6896da39e842e0b760029df6cb44e1642b9c6e62378610846facd81d1"}, {0xdd, 0x64, "41d3fdff6de39c60a952bc3cb55206acd7e8087bdf45e03833c9fd45851cd7f775d382261666a92f48e67856001ca1ab7214b4e8d2ba557f54e80d6986821e61377783fe018edd9e3588c338558c7421fab8f22426bfb7fc3392d89a14413170dfb4fda6"}, {0xdd, 0x12, "a5b868b001457f49de086115bb8445f583e7"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0xff, 0xff81, 0x7, 0x0, 0x6, 0x5, 0x6, 0x5]}]}, 0x188}, 0x1, 0x0, 0x0, 0x48084}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2})

11:39:31 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}})

11:39:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:31 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r0, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa04, {{0x6000000, 0x4e24, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x3f}}}}, 0x48)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000780)={0x5, 0x10, 0xfa00, {&(0x7f0000000580), 0xffffffffffffffff, 0x1}}, 0x18)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r1, &(0x7f0000000100)=""/241, 0xffd1)

11:39:31 executing program 5:
pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), 0x0)

11:39:31 executing program 3:
socketpair(0x2b, 0x0, 0x0, &(0x7f0000005300))

11:39:31 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})

11:39:31 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:31 executing program 3:
r0 = epoll_create1(0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x60000009})

11:39:31 executing program 5:
getsockname$tipc(0xffffffffffffffff, 0x0, 0x0)

11:39:31 executing program 3:
bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8)

[ 1205.396217] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:31 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, 0x0, 0x0)

11:39:31 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = getpgid(0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r1, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0xa8, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r2, &(0x7f0000000100)=""/241, 0xffd1)
r3 = syz_open_dev$vcsn(&(0x7f0000000640)='/dev/vcs#\x00', 0x0, 0x300)
perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x0, 0x8, 0x6, 0x1, 0x0, 0x6, 0x132, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffd49, 0x4, @perf_bp={&(0x7f0000000580), 0x4}, 0x480, 0x7, 0x2, 0x6, 0x8001, 0x80, 0x2}, r0, 0xe, r3, 0x2)

11:39:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00', 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000094da01000000000000001da9"], 0x64}}, 0x0)

[ 1205.653006] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1205.682635] overlayfs: fs on 'file0' does not support file handles, falling back to index=off.
[ 1205.726835] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'.
11:39:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:32 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
write$vhost_msg(r0, &(0x7f0000000200)={0x1, {&(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000000100)=""/204, 0x3, 0x1}}, 0x48)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
r2 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7, 0x8000)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000300))
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})

11:39:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00', 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0)

11:39:32 executing program 1:
epoll_create1(0x0)
r0 = epoll_create1(0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000580)={0x60000001})
getpgid(0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r2, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="0200000000000000000000a5000000000000000000000000004855daeb9d4f94c0342b6347b6146adaca0c43351e0b8cf460074fcd8e579bbfd330899f158a50d5c325bff4dcf2c8f002f0490b6f4af9b0c4297099b21f93b7a2fadec49dc997bb3b245c08fab1f412730c", @ANYRES32=0xee00, @ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="10000200000000002000000000000000e6ae237f1de584b30b68f33737b6cf8d1db4e19f501b057eacefb4f04c073d2e03e324890b0f0f0aecb9fe6f84fba63439a3f075ed16e5acffa1fbd0a40317a40c3c56007c800e774b2c392a6444ac4fee933f3b23b48d3c10f6563207af0d80dad63cac82ed170664fae79417e5851436e9ceddc6fc4c98fb0ae523ea3b2b52951a"], 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000005c0)=0xfffffffffffffff9)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r3, &(0x7f0000000100)=""/241, 0xffd1)

11:39:32 executing program 3:
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0xffff}, &(0x7f0000000080), &(0x7f0000000100)={0x0, r0+10000000}, &(0x7f0000000180)={0x0})

11:39:32 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:32 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[ 1206.444218] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:33 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f00000000c0)=@framed={{}, [@jmp, @func]}, &(0x7f0000000140)='GPL\x00', 0x3, 0xf3, &(0x7f0000000180)=""/243, 0x0, 0x1e, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:39:33 executing program 2:
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f0000000080)={0x0, {0x800, 0x800}})
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x5452, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'syz_tun\x00'})
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
fcntl$lock(r2, 0x5, &(0x7f0000000280)={0x0, 0x2, 0x1000000000, 0x0, r3})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'syz_tun\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0\x00'})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[@ANYBLOB="da09ff9471b0bfb5b6d08cd31499e34416b78f762f65945185c33f77b15e310f271de728585a1a9b09f262d0e295433e124e40dd55f1c9", @ANYRES16=r2, @ANYBLOB="615c377edf6b2ce91b58f51f6af64ebeefbc28b4c06835ffe4f237920df4d67edc37b8a1daa2bfb5edca36bd5d38f1de2de36d1860815b4c1189efabb69ecbc9d4fe88f29f1876ac9c664f443ad45206a430801d1b9b0b5b6506643c7b4e2ae2a34620", @ANYRESDEC=r4, @ANYRESHEX, @ANYRES16=r0, @ANYRESDEC=r2, @ANYRES64=r1])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})

11:39:33 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r0, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r1, &(0x7f0000000100)=""/241, 0xffd1)

11:39:33 executing program 5:
openat$full(0xffffffffffffff9c, 0xfffffffffffffffe, 0x0, 0x0)

11:39:33 executing program 5:
clock_gettime(0x3, &(0x7f0000000240))

[ 1206.755491] overlayfs: fs on 'file0' does not support file handles, falling back to index=off.
11:39:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:33 executing program 3:
timerfd_create(0x0, 0x0)
pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0)

11:39:33 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r0, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
syz_mount_image$tmpfs(&(0x7f0000000580)='tmpfs\x00', &(0x7f00000005c0)='./file0\x00', 0x101, 0x4, &(0x7f0000000880)=[{&(0x7f0000000600)="ba64", 0x2, 0x9}, {&(0x7f0000000640)="b8572d88b0311b1b920f8fd68e86726b1619fc1e283cb6cc2d0efa7c0c762f0720e4afa92d78d3eeaa1b8d2f77be55aa87", 0x31, 0x1000}, {&(0x7f0000000680)="6aca7b001f5f1803ceb91cf34002ef707846de625fb6ad22450b690b11afcd6f51a654f643115115f40501382d89faad6a2778f9c0b4fe703bd6f0519479cf0cd958412c89b5516b8a95554fac328319fb526d48a7ad3a0ca8525d3baa66ea18ad3d4d1fa416ec7a4f7ac386fce4b4b3019d75b0e0d5d958b43c515b9aa4b663f546a551d1ca357291a41e00581ccaa7dc519ad313bbb144092480e8810aa823564e8ea2d12a5e4d3177dc942cc4c67d1db918a1f94afa3cfedfb61a06e69b1e2cf7a9e78b51b79163baaeb260", 0xcd, 0xfff}, {&(0x7f0000000780)="86b82b4c26d8d7d66caac19b65e3215a1fd1e0440b981bbdaf3b564f56f8147f9ce019da0c742ee85985e59a58acdd61377cc96c46f320eab396a09a531b16aab0edc7f37910d033cbe073698fe9d2a9b07e4a65bc2d3482485f8ee45df6f121d5efde8ca33d5d8a92f45e5f39ec057543a4fe0de04b86caf68f901079b3e5eab1f99bbf22ecb4c14c3b6d243dc4eb9794e82f277042bf5d72520be57504ef3234a05befcadf8c7b90a368f234e4ed0fd8bd7c3e48606ba491706264cba0f8eb04d862079134e5051c6ca3adf59eebb8", 0xd0, 0x9}], 0x0, &(0x7f0000000900)={[{@huge_within_size='huge=within_size'}, {@huge_never='huge=never'}, {@huge_advise='huge=advise'}, {@size={'size', 0x3d, [0x74, 0x33, 0x34, 0x25]}}], [{@obj_user={'obj_user', 0x3d, ')-'}}, {@obj_type={'obj_type', 0x3d, 'overlay\x00'}}]})
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r1, &(0x7f0000000100)=""/241, 0xffd1)

11:39:33 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6)

11:39:33 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x48000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
r2 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r2, 0x3)
r3 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r3, 0x3)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x1, 0x2000001, &(0x7f0000000080)=""/35, &(0x7f0000000140)=""/128, &(0x7f0000000580)=""/4096})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})

11:39:33 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:33 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0xf}, 0x14}}, 0x0)

11:39:33 executing program 5:
r0 = add_key$fscrypt_v1(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000280)={0x0, "dcf3ac51d8ef3cf0c723d935d0f3c779dd855def451350ac06cd4e1d43b922dacccfa9b428ece645d841b363f55a21cfc1879f05a62c746641364ccd02c085a5"}, 0x48, 0xfffffffffffffffe)
keyctl$search(0xa, r0, &(0x7f0000000300)='trusted\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0)

11:39:33 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000400)=ANY=[@ANYBLOB="1002"], &(0x7f00000004c0)=0x94)

[ 1207.390495] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:33 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x1})
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x3)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x3})

11:39:33 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r0, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/241, 0xffd1)

11:39:33 executing program 3:
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x2)

11:39:34 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:34 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, &(0x7f0000000240)=':', 0x1, 0x0, &(0x7f0000000280)={0x10, 0x2}, 0x10)

11:39:34 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x9, 0x0, 0x0)

11:39:34 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})
r2 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, r2, 0x3)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x81, 0xd9, 0x6, 0x231}, {0xa09, 0xf0, 0x20, 0xf1}, {0x5, 0x80, 0x7, 0x9e1}]})

11:39:34 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0xe5, 0xff, 0x3, 0x0, 0x9a1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1d00, 0x8, 0x0, 0x0, 0x4, 0x0, 0x20}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f00000005c0)={0x5, 0x70, 0x7f, 0x6, 0x6, 0xff, 0x0, 0xffffffffffffffff, 0x6000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffff07, 0x6, @perf_bp={&(0x7f0000000580), 0x1}, 0x204, 0xddd, 0x1000, 0x1, 0x8a, 0x7, 0x84b}, 0x0, 0x7, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r0, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x6, 0xee00}, {}], {0x10, 0x2}}, 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=ANY=[@ANYBLOB="220400000000000000"], &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r1, &(0x7f0000000100)=""/241, 0xffd1)

11:39:34 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:34 executing program 5:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f00000011c0)=@file={0xa}, 0xa)
open$dir(&(0x7f0000001040)='./file0\x00', 0x0, 0x0)

[ 1208.341466] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:34 executing program 3:
r0 = socket$unix(0x1, 0x5, 0x0)
getsockname(r0, 0x0, &(0x7f00000000c0))

11:39:34 executing program 5:
socket$inet6(0x1c, 0x3, 0x9)

11:39:35 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519", 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'wg2\x00'})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/278, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1})

11:39:35 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000340)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040), 0xa0)

11:39:35 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r0, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1b604d, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x350)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000600)='system.posix_acl_default\x00', &(0x7f0000000640)={{}, {}, [{0x2, 0x2, 0xee00}, {0x2, 0x4, 0xee00}], {0x4, 0x5}, [{0x8, 0x6}, {0x8, 0xf}], {0x10, 0x2}}, 0x44, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
r2 = accept4$inet(r1, &(0x7f0000000580)={0x2, 0x0, @empty}, &(0x7f00000005c0)=0x10, 0x0)
ftruncate(r2, 0x80000000)
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r1, &(0x7f0000000100)=""/241, 0xffd1)

11:39:35 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:35 executing program 3:
r0 = socket$inet6_udplite(0x1c, 0x2, 0x88)
getsockopt$inet6_buf(r0, 0x29, 0x1c, 0x0, 0x0)

11:39:35 executing program 5:
r0 = socket$unix(0x1, 0x2, 0x0)
sendto$unix(r0, 0x0, 0x0, 0x81, &(0x7f0000000000)=@abs={0x8}, 0x8)

11:39:35 executing program 2:
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040))

11:39:35 executing program 1:
epoll_create1(0x0)
epoll_create1(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getpgid(0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x125400, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7}, 0x2, 0x5fd, 0x400, 0x2, 0x7fff, 0x7, 0x100}, 0x0, 0xd, r0, 0x2)
sched_setparam(0x0, &(0x7f0000000400)=0x22)
sched_getscheduler(0x0)
perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x2, 0x28, 0x81, 0x2, 0x0, 0x0, 0x384c6, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb}, 0xe1090e6e3f1ba047, 0x0, 0x0, 0x6, 0x7, 0x7, 0x101}, 0x0, 0x200001, 0xffffffffffffffff, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xffffffffffffffe2)
setxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000108000600"/24, @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000200000000002000000000000000"], 0x34, 0x0)
setfsuid(0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='overlay\x00', 0x4010, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\)'}}, {@dont_hash='dont_hash'}]})
mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='efivarfs\x00', 0x88800, &(0x7f0000000480)='system.posix_acl_access\x00')
getdents64(r1, &(0x7f0000000100)=""/241, 0xffd1)

11:39:35 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:35 executing program 5:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f00000011c0)=@file={0xa}, 0xa)
open$dir(&(0x7f0000001040)='./file0\x00', 0x0, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

11:39:35 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x153042, 0x0)

11:39:35 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x16, 0x0, 0x401, 0x81}, 0x40)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4)

11:39:35 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004dc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x1)

11:39:35 executing program 5:
socketpair(0x1, 0x0, 0x3, &(0x7f0000000180))

11:39:35 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x401, 0x81}, 0x40)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x0, <r0=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0x15, &(0x7f0000000040)={r0}, 0xc)

[ 1209.165302] overlayfs: unrecognized mount option "measure" or missing value
11:39:35 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:35 executing program 3:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f00000026c0)={0x0, 0x0, 0x0}, 0x0)

11:39:35 executing program 1:
bpf$OBJ_PIN_MAP(0x1e, &(0x7f0000000040)={0x0}, 0x10)

11:39:35 executing program 5:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x42, 0x0)

11:39:35 executing program 2:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000700))
recvmsg(0xffffffffffffffff, 0x0, 0x40)

[ 1209.262878] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:36 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:36 executing program 2:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=0x1, 0xffffffffffffffff, 0x10}, 0x10)

11:39:36 executing program 3:
socketpair(0x26, 0x0, 0x0, &(0x7f0000001140))

11:39:36 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000740)="f8", 0x1}, {&(0x7f0000000780)="cb", 0x1}, {0x0}, {&(0x7f00000018c0)='\n', 0x1}], 0x4, &(0x7f0000001a00)="58e113263b7a27ef8ddee680290ae59d7fa7ba2fe070b0f92930fd481c6cb41c63bb7de2b0", 0x25}, 0x20000075)

11:39:36 executing program 5:
socketpair(0x9, 0x0, 0x0, &(0x7f0000001500))

11:39:36 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x8, 0x7ffffffe, 0x84}, 0x40)

11:39:36 executing program 2:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000007c0)="a0", &(0x7f0000000840)="f4"}, 0x48)

[ 1209.707328] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:36 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)

11:39:36 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x16, 0x0, 0x401, 0x81}, 0x40)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)

11:39:36 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10)

11:39:36 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[{0x10, 0x1}], 0x10}, 0x0)

11:39:36 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000680)=""/226, 0x26, 0xe2, 0x1}, 0x20)

11:39:36 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:36 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10)
unlink(&(0x7f0000000180)='./file0\x00')
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)

11:39:36 executing program 2:
socketpair(0x2c, 0x3, 0x6, &(0x7f0000000900))

11:39:36 executing program 1:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x48)

11:39:36 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000140)="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", 0xf80}, {&(0x7f0000001140)="f02453e975e50d5a1a668608c4697a6153c51df5fc97c48f96ec1bb52c0acdcb53f04c4d9d4ee60ee264b710c5277e5138f034744cb653c288de049d0fc280af3b760b24f70839fd17529eb5b157cddd10e2974d6e3d809b82c5660f30ca7db74639e5f842cc785ab790eaee182bd39aeed0f1a9a90dfe51487e4a6d476955dc18", 0x81}], 0x2}, 0x0)
recvmsg$kcm(r0, &(0x7f000000e1c0)={0x0, 0x0, &(0x7f000000e040)=[{&(0x7f000000cbc0)=""/58, 0x3a}], 0x1}, 0x10022)

11:39:36 executing program 1:
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14}}], 0x18}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x2, 0x1000000000000005, 0x0)
socket$kcm(0x29, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x26e1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r0, 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080))

11:39:36 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@generic={0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0xc9, &(0x7f0000000100)=""/201, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[ 1210.168158] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:37 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)

11:39:37 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x41, 0x0]}}, &(0x7f0000000680)=""/226, 0x28, 0xe2, 0x1}, 0x20)

11:39:37 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x2, 0x0, 0x4}, 0x40)

11:39:37 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a0c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$sock(r0, &(0x7f000001a300)={&(0x7f000001a100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f000001a2c0)=[{&(0x7f000001a180)='3', 0x1}], 0x1}, 0x0)

11:39:37 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000700)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000004340)={0x0, 0x0, 0x0}, 0x0)

11:39:37 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:37 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0x0, 0x0, 0x0, 0x2208}, 0x40)

11:39:37 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_opts(r0, 0x0, 0x1600bd74, 0x0, 0x0)

11:39:37 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$sock_timeval(r0, 0x1, 0x1a, 0x0, &(0x7f0000000180))

11:39:37 executing program 1:
bpf$MAP_CREATE(0x10, &(0x7f0000000100), 0x40)

11:39:37 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78)

11:39:37 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$sock_timeval(r0, 0x1, 0x9, 0x0, &(0x7f0000000180))

[ 1210.947743] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:38 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)

11:39:38 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'team0\x00', @ifru_hwaddr=@dev})

11:39:38 executing program 5:
sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0)
pipe(0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00', 0xffffffffffffffff)

11:39:38 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000280)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0}, @ldst]}, &(0x7f00000002c0)='syzkaller\x00', 0x2, 0xf6, &(0x7f0000000300)=""/246, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:39:38 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8)

11:39:38 executing program 4:
r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:38 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x518, 0x320, 0x110, 0x438, 0x208, 0x438, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@private0, @local, [], [], 'rose0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x9}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @mcast2, [], [], 'wg2\x00', 'veth0_vlan\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578)

11:39:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_opts(r0, 0x0, 0x29, 0x0, 0x0)

11:39:38 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'team0\x00', @ifru_hwaddr=@dev})

11:39:38 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_opts(r0, 0x0, 0x14, 0x0, 0x0)

[ 1211.945963] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:38 executing program 2:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, 0x0)

11:39:38 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$sock(r0, &(0x7f0000001d00), 0x0, 0x0)

11:39:39 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:39 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10)

11:39:39 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0)
openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x80040, 0x0)

11:39:39 executing program 5:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/154, 0x9a)

11:39:39 executing program 3:
get_mempolicy(0x0, 0x0, 0x8001, &(0x7f0000ffe000/0x2000)=nil, 0x4)

11:39:39 executing program 4:
r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:39 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

11:39:39 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r0 = geteuid()
fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r0, 0xee00, 0x0)

11:39:39 executing program 2:
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x147841, 0x0)
sendmsg(r0, 0x0, 0x0)

11:39:39 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x40000000)

11:39:39 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4)

11:39:39 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0)

[ 1212.895669] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:40 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:40 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bridge0\x00'})

11:39:40 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x10000014)

11:39:40 executing program 2:
open$dir(&(0x7f0000000080)='./file0\x00', 0x81240, 0x2)

11:39:40 executing program 3:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
renameat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00')

11:39:40 executing program 4:
r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:40 executing program 5:
openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x200, 0x0)

11:39:40 executing program 3:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0)

11:39:40 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
inotify_add_watch(r0, 0x0, 0x200)

11:39:40 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/zero\x00', 0x0, 0x0)
read$alg(r0, &(0x7f0000000240)=""/60, 0x3c)

[ 1213.785646] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:40 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x5411, &(0x7f0000000140)={'gre0\x00', 0x0})

11:39:40 executing program 3:
r0 = socket(0x1, 0x2, 0x0)
connect$packet(r0, 0x0, 0x0)

11:39:40 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:40 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @private2}})

11:39:40 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x9)
sendto$inet(r0, &(0x7f0000000500)="b7", 0x1, 0x0, &(0x7f0000000540)={0x2, 0x0, @remote}, 0x10)

11:39:40 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000c80)=""/4096, 0x26, 0x1000, 0x1}, 0x20)

11:39:40 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89a0, &(0x7f0000000140)={'gre0\x00', 0x0})

11:39:40 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:40 executing program 1:
bpf$BPF_MAP_GET_FD_BY_ID(0x7, &(0x7f0000000100)={0x0, 0x0, 0x8}, 0xc)

11:39:40 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8942, &(0x7f0000000140)={'gre0\x00', 0x0})

11:39:40 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x40)

11:39:40 executing program 2:
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:39:40 executing program 3:
r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0x2271, &(0x7f00000000c0))

11:39:40 executing program 1:
add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x31, 0xfffffffffffffffc)

[ 1214.295746] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:41 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x894c, 0x0)

11:39:41 executing program 5:
bpf$PROG_LOAD(0x5, 0xfffffffffffffffe, 0x0)

11:39:41 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)

11:39:41 executing program 1:
request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0)

11:39:41 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:41 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6681)

11:39:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}}, 0x0)

11:39:41 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x5452, &(0x7f0000000200)={'wlan1\x00'})

11:39:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f0000000080))

11:39:41 executing program 5:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0)

11:39:41 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x10, &(0x7f0000000e80)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[ 1214.877148] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:41 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x1)
getsockopt$inet_buf(r0, 0x0, 0x4, 0x0, &(0x7f00000000c0))

11:39:41 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'wlan1\x00'})

11:39:41 executing program 2:
r0 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @local}, {0x2, 0x0, @private}, 0x156})

11:39:41 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x5452, &(0x7f00000005c0))

11:39:41 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:41 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:41 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7, &(0x7f0000000e80)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:39:41 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x89a0)

11:39:42 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)

11:39:42 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0xe)

11:39:42 executing program 5:
socketpair(0x2, 0x3, 0x2, &(0x7f0000000080))

11:39:42 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000240))

11:39:42 executing program 1:
timer_create(0x0, 0x0, &(0x7f00000002c0))
timer_create(0x0, &(0x7f0000000440)={0x0, 0x0, 0x149d76aa012edc65}, 0x0)

11:39:42 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x8946, &(0x7f00000005c0))

[ 1215.602965] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:42 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d80)={0x1, &(0x7f0000000d40)=[{}]})

11:39:42 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454da, 0x0)

11:39:42 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000440)={'vxcan1\x00', @ifru_data=0x0})

11:39:42 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x40000160, 0x0, 0x0)

11:39:42 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x9, 0x4)

11:39:42 executing program 2:
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@random="7375d7af1181", @random='\"~z;%3', @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @dev}, {{0x0, 0x0, 0x1, 0x0, 0x3}}}}}}, 0x0)

11:39:42 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:43 executing program 1:
socket(0x1d, 0x0, 0x9f9)

11:39:43 executing program 2:
socketpair(0x10, 0x0, 0x0, &(0x7f00000011c0))

11:39:43 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000013c0)="a229a67a35fa4c522134405ea4719bf5", 0x10)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

11:39:43 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @in={0x2, 0x0, @local}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, @tipc=@name})

11:39:43 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x44, 0x0, &(0x7f00000006c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000800)="0f"})

11:39:43 executing program 1:
unshare(0x4000400)
r0 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={0x0})

[ 1216.570294] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:43 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:43 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10)

11:39:43 executing program 3:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xc6000, 0x0)

11:39:43 executing program 2:
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(0xfffffffffffffffe, r0)

11:39:43 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:43 executing program 5:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x7, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0)

11:39:43 executing program 3:
openat$vim2m(0xffffffffffffff9c, 0xfffffffffffffffe, 0x2, 0x0)

11:39:43 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'})

11:39:43 executing program 5:
socketpair(0x29, 0x5, 0x400, &(0x7f0000000180))

11:39:43 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000640)='C', 0x1}], 0x1}, 0x8004)
sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}, 0x0)

[ 1217.404729] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:43 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x10123)

11:39:44 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801010000ffff070000000000000000180000002a4f0000000000000600000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xf9, &(0x7f00000002c0)=""/249, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:39:44 executing program 5:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x6102, 0x0)

11:39:44 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000001d80)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:39:44 executing program 3:
socketpair(0x2, 0x2, 0x88, &(0x7f0000000080))

11:39:44 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x6, [@var={0x3, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x5}, {0x1}, {0x7}, {0x4, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5}}, @func={0x2}]}, {0x0, [0x0, 0x2e, 0x2e, 0x61]}}, &(0x7f00000007c0)=""/250, 0x7e, 0xfa, 0x1}, 0x20)

11:39:44 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:44 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:44 executing program 2:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8903, &(0x7f00000011c0)={<r1=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0)

11:39:44 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x10f8, 0x1}, 0x40)

11:39:44 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x83, 0x80, 0xf}, 0x1c)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x6, r0}, 0x38)

11:39:44 executing program 3:
socketpair(0x26, 0x0, 0x0, &(0x7f0000000540))

11:39:44 executing program 5:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0xc0189436, &(0x7f00000011c0))

[ 1218.221239] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:44 executing program 2:
socketpair(0x22, 0x0, 0xc091, &(0x7f0000000000))

11:39:44 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002480)='/dev/net/tun\x00', 0x0, 0x0)
close(r0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0)

11:39:44 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1c, 0x2, &(0x7f0000000000)=@raw=[@map], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xf6, &(0x7f00000000c0)=""/246, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:39:44 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002b00)={<r0=>0xffffffffffffffff})
sendmsg$sock(r0, &(0x7f00000022c0)={&(0x7f0000002040)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002200)=[{&(0x7f00000020c0)='C', 0x1}], 0x1}, 0x0)

11:39:44 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xfb, &(0x7f00000002c0)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:39:45 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000180)=0x9)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)

11:39:45 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000000), &(0x7f0000000100)=0x94)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000140), 0x94)

11:39:45 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r0, r1)
connect$inet(r2, &(0x7f00000001c0)={0x10, 0x2}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x10, 0x2}, 0x10)

11:39:45 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000340)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0)
r1 = dup(r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="10024e20ac1400bb00"/136, @ANYRES32=0x0, @ANYBLOB="05"], 0xa0)

11:39:45 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = dup2(r0, r1)
shutdown(r2, 0x1)

11:39:45 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:45 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
fchmod(r0, 0x0)

11:39:45 executing program 1:
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)

11:39:45 executing program 3:
sendmsg$unix(0xffffffffffffff9c, &(0x7f0000000340)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000001380), 0x3}, 0x0)

11:39:45 executing program 2:
mlock(&(0x7f0000800000/0x800000)=nil, 0x800000)
msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4)

[ 1219.364842] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:45 executing program 3:
recvmsg(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0)

11:39:45 executing program 1:
socket(0x0, 0x0, 0x6)

11:39:46 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:39:46 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003440)=[{0x10}], 0x10}, 0x0)

11:39:46 executing program 3:
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4)

11:39:46 executing program 2:
r0 = getpgrp(0x0)
wait4(r0, 0x0, 0x10, 0x0)

11:39:46 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1004, &(0x7f0000000000), 0x4)

11:39:46 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:46 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[{0x78, 0x0, 0x0, "0c90c5ffde818eb31f431339d91832af5e5f89b35c56d1015394b0a310b04f58dcac8e3980da5365023664a00d45cb6b4ea3cd52bdb8392bcdd74475f1915e801a8776d253ac9d60e8e39fa29d711f77740589b987e754f7870ed2959602b5c0c8"}, {0xf0, 0x0, 0x0, "1b8a8ec88b564a18a379d6821f55566bfe361ce2c1efffae5752d0239295378a63e481b52fb79f4edb34abdde59247cb9182b93547e3b45e316ac12ab3e94e8e96e5120633fcb5e77253bae40ee2baf15c4ad2b674e19ff70ab55df23c04b8c8722689f159966c14a5592ecf21e987a3d6abcc5abb10736f8b996a2f8e167d722f984f7f1bd7250f0dda7022f474c4ecbd88aa490bb326f4b85be85f4692ad0a6677dee388b379d07d6e408956cdf75c4612e18e04625639c4f064774e6c871ae7e9f77380223e7e15fc60b8a6c9d7e334e09112dbeb993095"}, {0xa0, 0x0, 0x0, "08628551ca550e94f125c9be35193e3c34d5fa3fa71278dff6fc397fc160e05129b8baa75696483b1dbd04fc0393d44dc3a2a5203a97478118d927813f956217375830c42fa6d938a248c2e788409026a461353285d830de6dea2ffe0e3137a5d501fdd593fec6c1456cf9677ba358e6f4adf10588810f41d9f916de35f78cb4573812b4d017ba26f8"}, {0x98, 0x0, 0x0, "1900037f32f8dcf5a86563758053bfb096c969b6aa660e9410b2f6438556f102bd71d9c3f123e17465205117e0cd522333130c25822765359aabe4fda71def42212d60f83a056e4cae0c6e87c7f84750f688397f01bf0dc81ca4ccdfa2f016e43ff19c8f47f00197dc9d27063a8c5275955a239de2ec88250ec36c02929696c05d"}, {0x18, 0x0, 0x0, "92"}, {0x20, 0x0, 0x0, "bc40a7778ce4578b5c"}, {0x530, 0x0, 0x0, "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"}], 0x808}, 0x0)

11:39:46 executing program 2:
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0xffffffffffffffff}})

11:39:46 executing program 5:
syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @local, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @broadcast, "", @random="8c60018929aa", "e65303f9848ea9d7d3200739a749d19c"}}}}, 0x0)

11:39:46 executing program 3:
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2)
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0)

11:39:46 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r0, 0x29, 0x38, 0x0, &(0x7f0000000000))

11:39:46 executing program 2:
getrusage(0xff102f59cf729cd0, 0x0)

[ 1220.420911] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:47 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:39:47 executing program 5:
openat$full(0xffffffffffffff9c, &(0x7f0000000700)='/dev/full\x00', 0x2ac02, 0x0)

11:39:47 executing program 2:
syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb3e, 0x2a842)

11:39:47 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f0000000000)="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", 0x108)

11:39:47 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000001c0)={@mcast1}, 0x14)

11:39:47 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x110, 0xffff, 0x2, 0x5, 0x100000001, 0x0, 0x372f}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:47 executing program 2:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

11:39:47 executing program 1:
openat$zero(0xffffffffffffff9c, 0x0, 0x444101, 0x0)

11:39:47 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_buf(r0, 0x29, 0x20, 0x0, 0x0)

11:39:47 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x4, 0x32}, 0xa, @in=@broadcast, 0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffd}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)

11:39:47 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x18, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x18}}, 0x0)

11:39:47 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x0, 0x0)
fanotify_mark(r0, 0x90, 0x0, 0xffffffffffffffff, 0x0)

[ 1221.152347] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:48 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x8001, 0x4)

11:39:48 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x89a1, 0x0)

11:39:48 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000180)=""/35, &(0x7f00000001c0)=0x23)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00', r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4)

11:39:48 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)

11:39:48 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:39:48 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:48 executing program 1:
mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000000)='.\x00', 0x0, 0x1000, 0x0)

11:39:48 executing program 1:
perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[ 1222.334983] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
11:39:48 executing program 5:
socketpair(0x10, 0x0, 0x6, &(0x7f0000000000))

11:39:48 executing program 3:
add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$clear(0x7, 0x0)

11:39:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sync()

11:39:48 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0)

[ 1222.388563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1222.419070] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:48 executing program 2:
r0 = getpgid(0x0)
process_vm_writev(r0, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/187, 0xbb}], 0x1, &(0x7f0000002780)=[{0x0}, {&(0x7f00000014c0)=""/176, 0xb0}], 0x2, 0x0)

11:39:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffc90000000000}, 0x0)

11:39:49 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x5452, &(0x7f00000001c0))

11:39:49 executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
getitimer(0x1, &(0x7f0000000040))

11:39:49 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:39:49 executing program 3:
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, r0)

11:39:49 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000080), 0x4)

11:39:49 executing program 1:
process_vm_writev(0x0, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/187, 0xbb}], 0x1, 0x0, 0x0, 0x0)

11:39:49 executing program 5:
r0 = getpgid(0x0)
r1 = fork()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000))

11:39:49 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:49 executing program 1:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/pfkey\x00', 0x14100, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/pfkey\x00', 0x101940, 0x0)
write$P9_RWRITE(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000001a80)={@empty, @private1, @private1, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x1020080})
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/pfkey\x00', 0x0, 0x0)
write$P9_RWRITE(r3, 0x0, 0x0)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000040)="a00ce8403c73e7506efe00085348203f160e6319dcad331ea05da2b4726ef166d2eb63a9031ecc2d610d80baca2d1049fae2ea2a985bcffac350bb185f14727b7dcb82717bba1e6c3865be95e3ff6782089b11e1ea4998cc16d115d27b1a6257b5301d864352108d5efedc7c52818f128fd51ff32dea27014250", 0x7a)
accept4(r3, &(0x7f0000000180)=@caif=@rfm, &(0x7f0000000280)=0x80, 0x80000)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000), 0x2)
mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x8011, r0, 0x0)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80000)
write$P9_RLOPEN(r4, &(0x7f0000000140)={0x18, 0xd, 0x2, {{0x10, 0x1, 0x6}, 0xfe9}}, 0x18)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/pfkey\x00', 0x0, 0x0)
write$P9_RWRITE(r5, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000080)={'wg0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@remote, 0x34, r7})
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000200)={@private2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x3, 0x5, 0x580, 0x1000, 0x41400340, r7})

11:39:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000ac0)={'ip6_vti0\x00', 0x0})

11:39:49 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname(r0, 0x0, &(0x7f0000001600))

11:39:49 executing program 5:
r0 = fork()
process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/25, 0x19}], 0x1, &(0x7f00000013c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0)

11:39:49 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0)
write$input_event(r0, &(0x7f0000000100)={{0x77359400}}, 0x18)

[ 1223.340947] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:49 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0xc0481273, 0x0)

11:39:50 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)

11:39:50 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
write$vhost_msg_v2(r0, 0x0, 0x9b)

11:39:50 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdr={0x17, 0x15, 0x1}, 0x18}}, 0x0)

11:39:50 executing program 2:
socket(0x2c, 0x3, 0x100)

11:39:50 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000200)=""/190, 0x26, 0xbe, 0x1}, 0x20)

11:39:50 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:50 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {0x2}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0)

11:39:50 executing program 2:
semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000001200)=""/87)

11:39:50 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0)
write$vhost_msg_v2(r0, 0x0, 0xfffffffffffffc68)

11:39:50 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdr={0x17, 0x15, 0x1}, 0x18}}, 0x0)

11:39:50 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdr={0x17, 0x15, 0x1}, 0x18}}, 0x0)

11:39:50 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x34}]})

[ 1224.319584] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:51 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)

11:39:51 executing program 2:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:39:51 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f00000003c0)=""/4096, 0x4a, 0x1000, 0x1}, 0x20)

11:39:51 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdr={0x17, 0x15, 0x1}, 0x18}}, 0x0)

11:39:51 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe}]}]}}, &(0x7f0000000e40)=""/4096, 0x2e, 0x1000, 0x1}, 0x20)

11:39:51 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:51 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x5411, &(0x7f0000000040)={'veth0\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}})

11:39:51 executing program 5:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/dlm-control\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0)='nl80211\x00', r0)

11:39:51 executing program 2:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0)
syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x0)

11:39:51 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdr={0x17, 0x15, 0x1}, 0x18}}, 0x0)

11:39:51 executing program 5:
utimensat(0xffffffffffffffff, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0)

11:39:51 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000a00)='batadv\x00', 0xffffffffffffffff)

[ 1225.406360] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:52 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x5}, 0x40)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(r3, &(0x7f0000000300)={&(0x7f0000000280), 0x10, 0x0}, 0x0)

11:39:52 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdr={0x17, 0x15, 0x1}, 0x18}}, 0x0)

11:39:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x0, 0xfffff743, {}, {0xee00}, 0x7, 0x2})
sched_setscheduler(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

11:39:52 executing program 2:
pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8})

11:39:52 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)

11:39:52 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:52 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdr={0x17, 0x15, 0x1}, 0x18}}, 0x0)

11:39:52 executing program 3:
syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x141282)

11:39:52 executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdr={0x17, 0x15, 0x1}, 0x18}}, 0x0)

11:39:52 executing program 2:
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/dlm-control\x00', 0x200802, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0)='nl80211\x00', r0)

11:39:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x0, 0xfffff743, {}, {0xee00}, 0x7, 0x2})
sched_setscheduler(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

[ 1226.298141] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:52 executing program 3:
symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='\x00')

11:39:52 executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdr={0x17, 0x15, 0x1}, 0x18}}, 0x0)

11:39:52 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x80000001, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0eb5a6d6"}, 0x0, 0x0, @fd})

11:39:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000500)={&(0x7f0000000440), 0xffffffffffffff37, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x28}}, 0x0)

11:39:52 executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdr={0x17, 0x15, 0x1}, 0x18}}, 0x0)

11:39:53 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)

11:39:53 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})
ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0)

11:39:53 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

11:39:53 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

11:39:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x0, 0xfffff743, {}, {0xee00}, 0x7, 0x2})
sched_setscheduler(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

11:39:53 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:53 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

11:39:53 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

11:39:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x0, 0xfffff743, {}, {0xee00}, 0x7, 0x2})
sched_setscheduler(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00')
preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0)

11:39:53 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

11:39:53 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)

[ 1227.220705] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:53 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

11:39:54 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)

11:39:54 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff2000/0xb000)=nil, 0xb000}, &(0x7f00000000c0)=0x10)

11:39:54 executing program 3:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
statx(0xffffffffffffffff, 0x0, 0x2000, 0x0, &(0x7f0000000480))
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
unshare(0x22060400)
r0 = gettid()
clone(0x6cbaa500, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x0, 0x0)

11:39:54 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x0, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140), &(0x7f0000000180), 0x0})

11:39:54 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

11:39:54 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:54 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

11:39:54 executing program 2:
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x200100)

11:39:54 executing program 5:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{}, {0x0, 0x2}})

[ 1228.135888] IPVS: ftp: loaded support on port[0] = 21
11:39:54 executing program 5:
r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0x5460, 0xffffffffffffffff)

11:39:54 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

[ 1228.157467] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:54 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

11:39:55 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)

11:39:55 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0x40087602, 0xffffffffffffffff)

11:39:55 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

11:39:55 executing program 5:
getitimer(0x1, &(0x7f0000003440))

11:39:55 executing program 3:
syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@dyn='dyn'}]})

11:39:55 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:55 executing program 2:
socketpair(0x21, 0x0, 0x2, &(0x7f000000abc0))

11:39:55 executing program 3:
syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='nr_blocks=3'])

11:39:55 executing program 5:
io_setup(0x0, &(0x7f0000000000))
io_setup(0xfff, &(0x7f0000000040))

11:39:55 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdr={0x17}, 0x18}}, 0x0)

11:39:55 executing program 3:
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x0)

11:39:55 executing program 2:
modify_ldt$write(0x1, &(0x7f00000000c0), 0x10)
modify_ldt$write(0x1, &(0x7f0000000040), 0x10)

[ 1229.048058] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:56 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:39:56 executing program 5:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000840))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

11:39:56 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdr={0x17}, 0x18}}, 0x0)

11:39:56 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x24}, 0x14}}, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000580)='NLBL_CIPSOv4\x00', r0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400)='NLBL_CALIPSO\x00', r0)

11:39:56 executing program 2:
socketpair(0x1d, 0xa, 0x0, &(0x7f0000000000))

11:39:56 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:56 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdr={0x17}, 0x18}}, 0x0)

[ 1229.910391] can: request_module (can-proto-0) failed.
11:39:56 executing program 5:
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001e00)="7f", 0x1}], 0x1}, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)='B', 0x1}, {&(0x7f00000002c0)="fa", 0x1}, {0x0}, {&(0x7f0000000400)="ca", 0x1}], 0x4}, 0x0)

11:39:56 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)

[ 1229.940896] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1229.961697] can: request_module (can-proto-0) failed.
11:39:56 executing program 2:
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x16b200, 0x0)

11:39:56 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x22, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, "8284886c85f08e30caaaf926f25fafc158c268444ab63fe3dc30a3d41be673d12a4b2ff2980b58befdad9de4c77f841bfabcb56afa2216b769491dc17ccedebd1c96e50ab199a5c0062fc63c46fef865"}, 0xd8)

11:39:56 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x202)
write$tcp_mem(r0, 0x0, 0x0)

[ 1230.592553] IPVS: ftp: loaded support on port[0] = 21
11:39:59 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:39:59 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_dev$vcsa(&(0x7f00000013c0)='/dev/vcsa#\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0)

11:39:59 executing program 2:
r0 = openat$nvram(0xffffff9c, &(0x7f0000002780)='/dev/nvram\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000002980)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60045, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r0, 0x0)

11:39:59 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2, &(0x7f0000000180)=@raw=[@btf_id], &(0x7f00000001c0)='GPL\x00', 0x9d, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

11:39:59 executing program 5:
r0 = openat$tun(0xffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$SIOCGIFHWADDR(r0, 0x8927, 0x0)

11:39:59 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:39:59 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800)

11:39:59 executing program 3:
r0 = openat$kvm(0xffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

11:39:59 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={0x0, 0xf4}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x18, 0x1, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0)

11:39:59 executing program 5:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
ftruncate(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002780)=[{&(0x7f0000000380)=""/186, 0xba}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00')
preadv(r0, &(0x7f00000017c0), 0x2c2, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)

[ 1232.960519] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:39:59 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x12410, &(0x7f00000004c0))

11:39:59 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000680))

11:40:02 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:02 executing program 1:
r0 = syz_open_dev$vcsa(&(0x7f00000013c0)='/dev/vcsa#\x00', 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0)

11:40:02 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200}, [@RTA_UID={0x8}]}, 0x24}}, 0x0)

11:40:02 executing program 5:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
ftruncate(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002780)=[{&(0x7f0000000380)=""/186, 0xba}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00')
preadv(r0, &(0x7f00000017c0), 0x2c2, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)

11:40:02 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x0, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:02 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0xc02)
ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000100))

11:40:02 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002780)=[{&(0x7f0000000380)=""/186, 0xba}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00')
preadv(r0, &(0x7f00000017c0), 0x2c2, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)

11:40:02 executing program 1:
openat$procfs(0xffffff9c, &(0x7f0000003500)='/proc/vmallocinfo\x00', 0x0, 0x0)

11:40:02 executing program 3:
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
futex(&(0x7f0000000000), 0x8b, 0x2, &(0x7f0000000080)={0x0, r0+60000000}, &(0x7f00000000c0)=0x2, 0x2)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002480)={'ip6tnl0\x00', &(0x7f0000002400)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x7, 0x5, 0x42, @empty, @private0, 0x10, 0x80, 0x9, 0xfffffc01}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000024c0)={'batadv_slave_1\x00'})
nanosleep(&(0x7f00000027c0), &(0x7f0000002800))

[ 1235.999301] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:02 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200}, [@RTA_UID={0x8}]}, 0x24}}, 0x0)

11:40:02 executing program 3:
set_mempolicy(0x2, 0x0, 0x1)

11:40:02 executing program 5:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002780)=[{&(0x7f0000000380)=""/186, 0xba}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00')
preadv(r0, &(0x7f00000017c0), 0x2c2, 0x0, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)

11:40:05 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:05 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000a80)='/dev/vcs#\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x1, &(0x7f0000000280)=@raw=[@generic], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x74)

11:40:05 executing program 2:
pipe2$9p(&(0x7f00000007c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x84000)
write$P9_RSYMLINK(r0, &(0x7f0000000800)={0x14}, 0x14)

11:40:05 executing program 1:
bpf$ITER_CREATE(0x18, 0x0, 0x0)

11:40:05 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0xfe4, 0xc9, &(0x7f00000000c0)=""/201, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

11:40:05 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x0, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:05 executing program 1:
r0 = socket(0x10, 0x2, 0x2)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

11:40:05 executing program 5:
socket(0x2c, 0x3, 0x1)

11:40:05 executing program 3:
openat$nvram(0xffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x40000, 0x0)

11:40:05 executing program 2:
set_mempolicy(0x8000, &(0x7f0000000200), 0x0)

11:40:05 executing program 1:
syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x137440)

11:40:05 executing program 5:
syz_mount_image$romfs(&(0x7f0000000000)='romfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x20050, &(0x7f0000004540))

[ 1239.096964] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:08 executing program 2:
r0 = epoll_create1(0x0)
epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000080)={[0x3]}, 0x8)

11:40:08 executing program 3:
r0 = syz_open_dev$vcsa(&(0x7f00000013c0)='/dev/vcsa#\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0)

11:40:08 executing program 5:
syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040), 0x5c)

11:40:08 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0)

11:40:08 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x0, &(0x7f0000000300))
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:08 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002480)={0x14, 0x6, 0x1, 0x201}, 0x14}}, 0x0)

11:40:08 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40)

11:40:08 executing program 3:
openat$nvram(0xffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x6080, 0x0)

11:40:08 executing program 5:
capget(0x0, &(0x7f0000000040))
socketpair(0xa, 0x1, 0x0, &(0x7f0000000380))

11:40:08 executing program 5:
keyctl$search(0xa, 0x0, &(0x7f0000000080)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x2}, 0xfffffffffffffffa)

11:40:08 executing program 2:
r0 = openat$nvram(0xffffff9c, &(0x7f0000002780)='/dev/nvram\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x80046d03, 0x0)

[ 1242.140438] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:11 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:11 executing program 3:
sysfs$1(0x1, &(0x7f0000000180)='-\\@\x00')

11:40:11 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x0, 0x1ff}, 0x1c)

11:40:11 executing program 2:
openat$vfio(0xffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0)

11:40:11 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000b40)='NET_DM\x00', r0)

11:40:11 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:11 executing program 3:
set_mempolicy(0x3, &(0x7f0000000000)=0x3ff, 0x4)

11:40:11 executing program 2:
bpf$LINK_GET_FD_BY_ID(0x14, 0x0, 0x0)

11:40:11 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800)

11:40:11 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)

11:40:11 executing program 2:
set_mempolicy(0x3, &(0x7f0000000000)=0x3ff, 0x4)
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RLERROR(r0, &(0x7f0000000080)={0xe, 0x7, 0x0, {0x5, '(},-{'}}, 0xe)

[ 1245.176121] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:11 executing program 3:
openat$kvm(0xffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)

11:40:14 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:14 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80}}, 0x1c}}, 0x0)

11:40:14 executing program 2:
bpf$OBJ_GET_PROG(0x1d, 0x0, 0x0)

11:40:14 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x3)

11:40:14 executing program 3:
bpf$ITER_CREATE(0x2, &(0x7f0000000100), 0x8)

11:40:14 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x800000c004500a, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:14 executing program 2:
r0 = openat$md(0xffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000080))

11:40:14 executing program 3:
request_key(&(0x7f0000000000)='.request_key_auth\x00', 0x0, 0x0, 0xfffffffffffffffc)

11:40:14 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x110030, &(0x7f0000001680))

11:40:14 executing program 3:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8aa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7)

11:40:14 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

11:40:14 executing program 5:
r0 = openat$procfs(0xffffff9c, &(0x7f00000051c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r0, 0x4b2f, 0x0)

[ 1248.233920] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000240), 0x4)

11:40:15 executing program 2:
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r0 = openat$random(0xffffff9c, &(0x7f0000000840)='/dev/urandom\x00', 0x0, 0x0)
ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0)

11:40:15 executing program 5:
r0 = openat$procfs(0xffffff9c, &(0x7f00000051c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r0, 0x400c744d, 0x0)

11:40:15 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x6c2, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, "8284886c85f08e30caaaf926f25fafc158c268444ab63fe3dc30a3d41be673d12a4b2ff2980b58befdad9de4c77f841bfabcb56afa2216b769491dc17ccedebd1c96e50ab199a5c0062fc63c46fef865"}, 0xd8)

11:40:15 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x800000c004500a, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:15 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xc9, &(0x7f00000000c0)=""/201, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

11:40:15 executing program 2:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000002140)={0x0, 0x0, 0xf7a3d95c3b910b51}, 0x10)

11:40:15 executing program 3:
r0 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x1, 0x0)
write$P9_RLOPEN(r0, 0x0, 0x0)

11:40:15 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x108a, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x40)

11:40:15 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002940)={0x0, &(0x7f00000028c0)=""/114, 0x0, 0x72}, 0x20)

11:40:15 executing program 3:
futex(&(0x7f0000000000), 0x8b, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0)

[ 1249.147080] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:16 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:16 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000008900)={0xa}, 0x40)

11:40:16 executing program 3:
r0 = syz_open_dev$vcsn(&(0x7f0000000a80)='/dev/vcs#\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)

11:40:16 executing program 1:
r0 = epoll_create1(0x0)
r1 = syz_open_dev$vcsa(&(0x7f00000013c0)='/dev/vcsa#\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000))

11:40:16 executing program 5:
r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)

11:40:16 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x800000c004500a, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:16 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x2005000, &(0x7f0000000080))

11:40:16 executing program 3:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000002140)={0x0}, 0x10)
getresgid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000080))

11:40:16 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000280))

11:40:16 executing program 1:
bpf$OBJ_GET_PROG(0x16, &(0x7f0000002140)={0x0, 0x0, 0xf7a3d95c3b910b51}, 0x10)

[ 1249.990159] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:16 executing program 2:
perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

11:40:16 executing program 3:
r0 = openat$nvram(0xffffff9c, &(0x7f0000002780)='/dev/nvram\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0xc020660b, 0x0)

11:40:17 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:17 executing program 2:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000580)={0x28, 0x0, 0x0, @local}, 0x10)

11:40:17 executing program 1:
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f00000005c0)=[{0x0}], 0x10, &(0x7f0000000600)={[{@auto_da_alloc='auto_da_alloc'}, {@usrjquota='usrjquota='}, {@dax='dax'}], [{@subj_user={'subj_user', 0x3d, 'wlan1\x00'}}]})

11:40:17 executing program 5:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x4, &(0x7f00000016c0)=[{&(0x7f0000000100)="40925770f40b2cfe5241ee772113c8990850344bd3a7eba76ae096c1ecdd36c02fcc39ae56901b2fe9899a93b579d3850cc372a963c23fca16e09a6615ba54642f0db2e23505cdbf54976d595d9224dbf1ea332a2f7b79518c406d7816146d34ab4960a2e094348646824c7cb4b4a5822a8281f72f65bc4b54805a0aab3d", 0x7e, 0xfffffff9}, {&(0x7f0000000180)="a17297e357a0f6e6d069a2ea64434703a58c3653bf93e1512c8766a17271fd2544b47246d26b493e2cc9820ec9339b8eee2b964c2483a6b2d6d9b05cf6fb2c7c599bab2c39e8c77e2cf213cb7fba24c3d884b67caa8e4563548add7ce32c90c269d42a704a84bb375eb55e995a43684c4e957b6f165d31cffd1e83427b1f4322330d91521c186a49b8bb0928c040a028d4ed", 0x92, 0x9}, {&(0x7f0000000240), 0x0, 0x7b7f}, {&(0x7f0000000400)="ac", 0x1}], 0x201010, &(0x7f0000001740)={[{@commit={'commit', 0x3d, 0xf9b}}, {@barrier='barrier'}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@seclabel='seclabel'}, {@dont_appraise='dont_appraise'}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]})

11:40:17 executing program 3:
r0 = openat$nvram(0xffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x0, 0x0)
sendmsg$NFT_MSG_GETTABLE(r0, 0x0, 0x0)

11:40:17 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:17 executing program 2:
set_mempolicy(0x0, &(0x7f00000001c0), 0x1f)

11:40:17 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x2}, 0x40)

11:40:17 executing program 1:
bpf$LINK_GET_FD_BY_ID(0x4, 0x0, 0x0)

11:40:17 executing program 3:
bpf$OBJ_GET_PROG(0x15, 0x0, 0x0)

11:40:17 executing program 3:
pselect6(0x108, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0)

11:40:17 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='uni_xlate=0,check=strict,shortname=lower,shortname=winnt,shortname=winnt,utf8=1,iocharset=cp932,codepage='])

[ 1251.151121] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:18 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:18 executing program 2:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000021c0)=[{&(0x7f0000000140)="c7c5f3a144251643664dc97c264071840655a6f33d33e28eeabb3118ac31814e44c881d8de1873ae7b826dd553542320e2c603df004ef99ef7a8187087e6a59296889c9a59925281b9c8933d2393f4acd9c25f94327fe7f6d8014615c4ef47c96266bb190f968fc6f52cc28bde4b576c3da68a8701c0cc46b4ded524b4ed486f2a1962599e2c23c47660bccdb1b339e4a3f9f30ec092e1e91bee495cc88e1cf1401be2e0de73d281b2b156d7b290a4cb110d63deebe2e1c9282cf533045638b7da5cce00e81eb73af7b28dbbb73dfe0f34ce53c9e05cac6ff89ab8ab39c26b4b4730113845e7a4ce32600292b5fce4efa7d3e3b40d083d1fc10862b74b0d94b7b726710625596bf41ea69b86604bc70bcfaef0be46b9202184b5d7c6e08716cfae220a615cd71e3f86d04e0e9a1bc97b7fb94643c36dc0c031d0b60fd8028b2f67741c1bddb07278779d6f468d49a4f6d2fe58a7f343e7b92102a96227e8560d2934501e63bf76a943bcb54fb52037567fba8c98cb5e7291b36632688be04c2eb8357cd01bc98c19c19638cddceaa95c10d541f5772dca49db585cca51e36304c10792bb067e28e4cbed23dea72909f990a2710c912a66f0f3db6eb30a2b7757b423384f76747294d982e55092956940dadf341eca315e0e3b90c253ce27c89beeec4b5edaab7123b52d4ad5f30a501574c3f691748ad51662d8a481c54a514baeb126e64f4797aab4f1afa33e7c80b8e405a4a4a379d857a8ebabc98b94d935601402ab8e5909ddc80c353bec8dfa9d6af3bdee952e153d253d43c59b41c8314e53ccb08db445ee7ab97317360af111279e8d43318a15a498ca445767a7896cbbc59f9dcc0a864d07ea7fcfa2986c5d63cf288d52464d616475d56180366f7c1f01926ab03f0ded13213b85bcaf002ef5bc147d1f146883c2d907c0b4817c40e4ac6f9a88caaf84126e957f5d46903cc7219bc53bed7401e51203e8ceeff26c5f4cbb80a320f05b1cb5674cff6197b4fe3eaa391042ba2672afa79a3eda04945a3c38d24aedf5d46ff75d7407070b6c95e1fb0bf0bc958d12fe89126310fc913156a4d505460b88c7b9af561269166359128f11c93011c0d6aa25b4f977335a14b2058cc25bb3d00a35a662068aa40e03b3dde3073ac9027880b86ffd58d941cd7b2c02d539fc489e27cff8c2803070043208d9b8cbd406f7dd71bf25cac1a93798a4b39d9d7e334a3350a4a32eb3591aac84e656ec2c0b03dfb05f57b9681a7f6d3185657085d431b2846f7c4ab1ee35654556d871003ebeca30148847de67a311d7f22d918ce0213220940959784e3e3d5363de6f84d087bbd0bc68b454b971173fff85b196b8be9a61b80805467226ece487df15b2a4c14f1ef32d4b904fea7b0fc6039d5c7bbcab7d8384e73714699c32b0001537d12cccc2af576a0ccd73279d018919a0607a36dd313c6d098d34a26335ff6b37fe64366dba8289c1ca86926206863bc5ea42bcfbb84963b80e3949d0cfbe2069ef60cd897589cf2693fb4e11b88f795e7e2fc255ac794e6d4d05c30da08cab505f2042a9944313ccdf212b195720507689f8a680af3ba583a5aedc3d472c75f5271ef5fcdc397d63136e1d57134060caf418391a9ded5156d20d3d5bc7b37aadaa11747820b1457b00420115d30b1d607af832e2671e7a5905053155097c423525ab6689873c93c63314deda1f6d65bd8bba078b7355d411b88999a59245d313fb2e93fce2ef77826573b95795c6ec03c6c6fdd4daa22d7a850cfef82fda6c201e55c46b310501281bc0d936ba7baf994a3fc24c20f5e7a7d3ee0fedd8effe1a86727d1eab202ed969d9ef220655efc753b4cb826d1c1a3ebf0931cb734940623899e95739934df8124a721b1bbdb4f5d9e6bd41907d953bbb74f65a02752406717db8d5b9bc75e09ea4a99812e797341818d099bcfe5a7625f1b13de38831104d341e5a7a276fff9858b46800a3e046005dc5570367de8b67c74c015f4d0a624275d0a817f5c693234e3a3f3101afc24cd2e16d3aa0e2b680334adbce9ee024575869f10731e024919eaae4f2a7fa767f59fc0a2db6efede1e099c5310b9970c06a6a67e22dbdee9126bb1e0a02caa845aeb203782ca165b8cbb80f2f06c72bc190f6115d2181941e97e3f026c0674c42517659758b7d4f6659133c152aff7f2106107eb4d44aa118eb2e0e728a85b7d820d43626b167a0ff55bd77011b089489a2d2bfafb8ac69283b19f7cf10a5bb1fe3166ddc21ca6161af7d221b30f58522a5a86d99fb8a62aee312f7e41b158480a75bea1126c603144007df987e1e96994e858a1c46bf25fdb754b8c31f4d1c530a2fd6a3dddf7d38e1288427210ccfa6cde63be1d28d7186b6d90490d8ac899205cb7c2266621498e75cdbccdd510ee38e7c75b14e6cc1d8ac4da2fc1e156a1cfed8192cacb585d36ddbf111689c22947556d944aa1a035bff37ac0591d68e88fa850854338390fccf8182d284b074b9ba26d3b5bea8a2a8b9e18c1b4c674124f3735d30d87a879a4fecec6d68f68df7a8dafd950851b164453433aa7ae88b39289284d388e6022bb290c053469d81e56c1cb6269d33cd13b8ad533eee1ece5a8677ac62dd333275273348d23b31c411e34e4872dd49e6213be5389dcbca40c5e4f1c86381a25d51bdd0eae6e3369bf7fec5060b3f0030dc04630d358846724a65d1f2a636847f2f2f83c701048185b53d616969f1d6f2c8aafd4342dc16e5b5640f77b8760d48e67d10db79b5de1d074bda8538984601b8417f6fc264126927b32838740bc592b38aea312a2e2f629e3a5953409cac4edd87d6dc94f1ae9c7f5acd5940223681caa70097fa10f4180359a29dfd1bc6a7df360eb3838147fc479b276173977429d5f395b02bfc70be9a8de57a8f10fc0b254434de9368de76e6f3b308b385f63391fd0a653f44eba9f6a49074b291777829e6d19bc31deee22f986f95e2c703eb99ccc8dc59051ae05e5198d5cee37251ca591859093a877315873dc3d3f02cb03f3577fb639d4aeb46d663a69dad23bb4980cc43746c9a0fbccb35ecb872e0ff869a7b65293d1ccf151c2481ab53a0adba482652d8a6bfa068cbab3d8a335238a146cd19733762398b5ed1a97242d9bc2cf875f5f78f3a5fc56235ecabff9b5a41bf2118eee1faabb8ad3e447f3331c3490842ae50784a836cce10fd31201ae42f060bfdfda1c0546a6695ae2bcd93bc37a3ab9170a699871dcfd5c403602f5f8e3b12db91d5902a8bc311d9b0e0594dd6229691ce40668dbd72a711274595cf7901364547308a73eb3ccdf7b2cd895132c9a910f715d274a37cace5a836227447aa69a3207492a89d566c25538b6aaca57a58e429c1473ed4d1afc8ad486b0ca1b64585c200c77f1cf085d2cc25a191f6746822764b298314d85b372e84b04e6eda401f8912ee807bd9815c8aec40f4b833edb954470b76568cc8865ede8616d5ee91f98e096bd184b7131e1bd4197473877e6be43d77271d7d27342a15a02b79fce25cd82d2a315e8b69402cab2f775fa5cc56a03453441089a0e47a03b260f2cdd043b2d2fdffc1ce3779ee0712e38f2d494dda148776b979dd4d253816793a487f25464fc4a0d2f8540e5d4a62e7a10eabd43fa43eb8ddb4fc85e476720cd7c053c0bffea204c717c6e8aed39373564fddcb36f5cd09cdb8950d19e84f54f83360a421eb2dd6cd4519aa006fdd01ab565eed256771d943c4b8e0bcc8b53f9f3b2b83e09a80e1ccb94c3fd9a9549051d595d9eda176ad73cff83958c358328e01daa76662f41f28a44d0dc9a6fdd9353f75043d78f51d19eb6e64248ed8d9c0800f47bf6e2869c8ee62976ad030506fed479b33167c8159c17be70e488459a9eb82e1082e29befe8123c5e24ed0e9ab464057c8733de7fd947721b30cabb511da0af693bc036860350a4b381ab16da81920a8ea727366cb6c0cc1ad403fb4295d46bd853c4d12d48a225090fff44271af3d77b480af890208e5000df8a5a4a7c22699b5394ff6651bf87bb81639bc15196fa4380a820fd2d814f708c8b8c379624ddb6df74a376f6367c0dbada586f8a4c4d14aba734ba5a30a1d0b30cf6c3cbd32f0c2b692fd9d549d68c015158b6235ccfac446273d5473cb74846e79cd92881add09771562e940c6ab07e1148bfb3811d1bd39d6979cd489f643eb1a45849fe29579cf2092748510c2f08e3a7d541964380806acfc3b77b70fdfd5ddd107b5720a9bfa959872de94480cafd97bcd120df82d32b23e9659b9524a939c3ec4ec65c969b7f4b8c07ff0020ef40163e9fe945e3d9e3359f529bb692abe30865b3a12aeb15643f81edf8a2796c7b5b23ba8c82afbfd646b8ffcbf4d65302a6e3f540b16a5dfb20d156c4912ab3d7004497418c7cd097e60800500737f6b762c8ae55d2177360a43de095202fe1bab48f0c3b027eff46d03b04db18df9f227dfcf77ca0b200f5b4544fab168676d17707be7917194016e6fb19ad982df3322ed4cb6f68cf8664aef541a5b794718e2cf1d705351d2d681e31b7f4ee09456360dbe5cdc33bdea10a4ddb57f8a6620ecc59ce38c08fdeba963572c65cd8ba5cddab87f9d45d288e778b588b690b934662fa69c8e60ab12a809686b17ed0b65e2687ca7ba745a2152dae3e46782f8476dd27e39f0a2415ed40da42fe41490e6cec1e4f84553cc6608fb4858c0253a5b0fa074a3d645c52ed79dba99c7996f1b205f9ebd8ad15925bb63ecb2c2a29b361ad5b47fabd489e2c6b0a18d8efd1f57f381de536aab83d172de958b51398d31d81f45aa8d4893ea9dd5afebcb00433dcfd4a5368035643c07428ed39d418cee34988f0cef7e8bcf995e4e2afabf600c11bf32a18147abe3f8d48ba915929819f03707bb5b2f977a761dc769116441ffdb5c326a4bc1481c0ef1468340298e3add2eb1822d27ed3036b647e8d28aba358d2983ced34ebe8fe847b8f49526e2a13030108579618bfac53bec80fc3bff3202f8b7c17a98d7c075924a2e161fce1ff0dda08e7977ad31b9eeaf6ddaaa6d138cf17161cf6a7262f14993b5f1d4a2cb6322db49314e5a796244730067a0fa182c1655e6ad71405bc64a7b4ee2d4484996ee72abb6b7030c6352bca5040c353875dec11a49148b7d9b862f918f9cf120bbdc8073b2a849b72b670851f47bf7beb7345957593e9ed7e2bbb53a1261c7f9f00a7d6d617c33c8a7973f4e210372b65d74ec9a23945e3eddaeca973ca6fdd0105a334b694e50294478d98c1d95fe0e457a1c65dcd265a1be55271a6c0f7fed47cb1fe2923bb5b620bf3ef710391bb519aca67b8d4d3648767bb0f95039f8d2a50811143f674f2cff9ae192777559048e7ce6061272c8d6e91a5648f94453e2021f690b134c6f59a49111980fab75052cae3a7cc13662bed696a32ff740cb5ad928d5fd69cd561cc64875f8827d7970a61ca2798e04d641f217cc2a9021d56047d3b3e4465984e8642eb5933bed392ab112962c2011d955e646362328fd53a20bf418b2bd8b73608b3fb514a62082bfe2a0d5c6c67f0e52b373bfc9762ed6065f2bd72f9d1e6c76749c547cd3827ce7588ec8073ebba1ee2b944901f0bc3a8d8c12f4976ead7624ee7e3b58955bfdf152efae9df6ec20c208da032ac5abc6d72e8b25a9ad70bd02776e40f31ab04d4ec2ed02a018f677bdf8ae92dc399d28504da8b995fa191dd0a6c4a5aab9b1460991d8aa925cea4b48018b44f624108e493b9638", 0x1000}], 0x0, 0x0)

11:40:18 executing program 5:
bpf$ITER_CREATE(0x2, 0x0, 0x0)

11:40:18 executing program 3:
bpf$OBJ_GET_PROG(0x3, 0x0, 0x0)

11:40:18 executing program 1:
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil})
r0 = gettid()
waitid(0x2, r0, &(0x7f0000000000), 0x8, 0x0)

11:40:18 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, &(0x7f0000000440)=0x9)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:18 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000008900)={0xa, 0x0, 0x0, 0x7ff}, 0x40)

11:40:18 executing program 5:
request_key(&(0x7f0000000100)='rxrpc\x00', 0x0, 0x0, 0xffffffffffffffff)

11:40:18 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000008900)={0xa, 0x9, 0x0, 0x7ff}, 0x40)

11:40:18 executing program 1:
r0 = getpgrp(0xffffffffffffffff)
kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0)

11:40:18 executing program 3:
socket$inet6(0xa, 0x0, 0x2000)

11:40:18 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x14, 0x0, 0x2, 0x5}, 0x14}}, 0x0)

[ 1252.062732] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)

11:40:19 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x10, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, "8284886c85f08e30caaaf926f25fafc158c268444ab63fe3dc30a3d41be673d12a4b2ff2980b58befdad9de4c77f841bfabcb56afa2216b769491dc17ccedebd1c96e50ab199a5c0062fc63c46fef865"}, 0xd8)

11:40:19 executing program 1:
setrlimit(0x8, &(0x7f0000000040))

11:40:19 executing program 3:
openat$tun(0xffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000340)={0x8}, 0x0, 0x0, 0x0, 0x0)

11:40:19 executing program 5:
nanosleep(&(0x7f00000027c0), 0x0)

11:40:19 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:19 executing program 3:
perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8084}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

11:40:19 executing program 5:
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0))

11:40:19 executing program 3:
sched_rr_get_interval(0x0, &(0x7f0000000a80))

11:40:19 executing program 1:
openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11:40:19 executing program 2:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

[ 1252.998737] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:19 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480))

11:40:20 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)

11:40:20 executing program 3:
r0 = openat$vsock(0xffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x0, 0x0)
ioctl$KVM_GET_IRQCHIP(r0, 0x801c6d02, 0x0)

11:40:20 executing program 5:
futex(&(0x7f0000000000), 0x8b, 0x2, &(0x7f0000000080), 0x0, 0x0)

11:40:20 executing program 2:
set_mempolicy(0x3, &(0x7f0000000000)=0x3ff, 0x4)
pipe2$9p(&(0x7f0000000040), 0x0)

11:40:20 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f00000001c0))

11:40:20 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:20 executing program 5:
bpf$OBJ_GET_PROG(0x16, 0x0, 0x0)

11:40:20 executing program 3:
openat$md(0xffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x111000, 0x0)

11:40:20 executing program 2:
r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$get_security(0x11, r0, &(0x7f00000002c0)=""/208, 0xd0)

[ 1253.949249] Unknown ioctl -2145620734
11:40:20 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, 0x1, 0x2, 0x401}, 0x14}}, 0x0)

[ 1254.032382] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:20 executing program 3:
openat$md(0xffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x81, 0x0)

11:40:20 executing program 5:
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x200}], 0x0, &(0x7f0000000640))

[ 1254.279915] EXT4-fs (loop5): unable to read superblock
11:40:21 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)

11:40:21 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8}]}, 0x2c}}, 0x0)

11:40:21 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001600)={0x18, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_PAYLOAD={0x4}]}, 0x18}}, 0x0)

11:40:21 executing program 3:
bpf$OBJ_GET_PROG(0x1e, &(0x7f0000002140)={0x0, 0x0, 0xf7a3d95c3b910b51}, 0x10)

11:40:21 executing program 5:
r0 = openat$md(0xffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0401273, 0x0)

11:40:21 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000003080)={0x14, 0x0, 0x1}, 0x14}}, 0x8040)

11:40:21 executing program 3:
waitid(0x1, 0x0, 0x0, 0x80000008, 0x0)

11:40:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080))

11:40:21 executing program 2:
syz_mount_image$romfs(&(0x7f00000004c0)='romfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x1, &(0x7f0000000800)=[{0x0}], 0x0, &(0x7f0000000840)={[{'/dev/fuse\x00'}, {'/dev/fuse\x00'}, {'/dev/fuse\x00'}], [{@measure='measure'}]})

11:40:21 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x6bd, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, "8284886c85f08e30caaaf926f25fafc158c268444ab63fe3dc30a3d41be673d12a4b2ff2980b58befdad9de4c77f841bfabcb56afa2216b769491dc17ccedebd1c96e50ab199a5c0062fc63c46fef865"}, 0xd8)

11:40:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0)

[ 1254.992863] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:22 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:22 executing program 1:
bpf$OBJ_GET_PROG(0x17, &(0x7f0000002140)={0x0, 0x0, 0xf7a3d95c3b910b51}, 0x10)

11:40:22 executing program 2:
openat$vhost_vsock(0xffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0)

11:40:22 executing program 3:
getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0))

11:40:22 executing program 5:
init_module(&(0x7f0000000080)='\xee\xf4Xet\xd1\xf7\xf3\xd2\xd6\xef\x19\"\xd2)\xcdGKL\xd8\xf2\xd7\xff\xcf;q\\.\xa5\xcf\xce\x97\xca\xfc@\xb6\xe9!\x85\xc8\\\xad\xd2\xfd\xa3\x9d\x9e9*D \xcb\x85\xa7\n\xf5\xbb]\x9d9\xd8\xb0\xf8\xd9&\xd8\xab\xe5D\xd4\x19\xd7\xac\xa2`\xbe\xe2d\t&`\xffVaT\xae\xdd\xebi%$\x987\xae\t\x10\x9ccg`\xb9\xb4\xba.-\x0f\xc7\xc30sB2N\x15\xe5a\x9f]^\xa9\"a_b\xa5f\xa9\x83\xce\xfb\x9f]\xf2/\xca\xbcS\x05\xdd\x10\xb7y\xcd\xb8&\xd7\xb7\x99\xe4%\x7f\xbd\xed\x8c\xca\x95\xe5sA\xcfBi\xf4\xe0I\x89}C\xab\xcb\xf3r\x9d\xa6\xed\fzY\xb2\x9a\xa3n', 0xb6, 0x0)

11:40:22 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:22 executing program 3:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

11:40:22 executing program 2:
add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)

11:40:22 executing program 1:
request_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0xfffffffffffffff9)

11:40:22 executing program 5:
pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RLCREATE(r0, 0x0, 0x0)

11:40:22 executing program 3:
r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, 0x0)

11:40:22 executing program 1:
r0 = openat$md(0xffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000040)={[], 0x0, 0x23b108d2, 0xfffffffd})

[ 1255.936413] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:23 executing program 5:
openat$tun(0xffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={0x8}, &(0x7f0000000440), 0x0)

11:40:23 executing program 3:
openat$nvram(0xffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x452d02, 0x0)

11:40:23 executing program 2:
pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_ROPEN(r0, &(0x7f00000005c0)={0x18}, 0x18)

11:40:23 executing program 1:
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001e00)="7f", 0x1}], 0x1}, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)='B', 0x1}, {&(0x7f00000002c0)="fa", 0x1}, {&(0x7f0000000380)="e1", 0x1}], 0x3, &(0x7f0000000a00)=[{0x28, 0x0, 0x0, "ccfbcdac484413833072a230340f8289e4"}], 0x28}, 0x0)

11:40:23 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:23 executing program 3:
keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff)

11:40:23 executing program 5:
perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

11:40:23 executing program 2:
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001480)='/dev/nvme-fabrics\x00', 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

11:40:23 executing program 1:
add_key$keyring(&(0x7f0000000a00)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\\*\x00', 0x0)

11:40:23 executing program 3:
perf_event_open(&(0x7f0000001d00)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x46250}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:40:23 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x124}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[ 1256.772548] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:24 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:24 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:24 executing program 3:
add_key$keyring(&(0x7f0000000300)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9)

11:40:24 executing program 5:
socketpair(0x18, 0x0, 0x2, &(0x7f0000000840))

11:40:24 executing program 1:
r0 = add_key$fscrypt_v1(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000080)={0x0, "1304937b0128b72276a350bc6e6fb78ecd5927a18864608c4b6a6cd25c165920579296564ee7e065d59cad77f12fad20a146b9642a59cca4fa4f85e2969b3f71"}, 0x48, 0xffffffffffffffff)
add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, r0)

11:40:24 executing program 2:
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x80400)

11:40:24 executing program 3:
memfd_create(&(0x7f0000000240)='#--\x94\x04^#\x8e\x18h\x9a\xa1\x03q\xaf\xa4\xc9\x01\xfb\xce\xa4\x19\xaa&?\xe2J\f\\\x94\xbeE\r\x18\x16\xbd\x8c\x97\tQW\x97\xb5\x8b\xe3~\xa4\xaf\x1b\x1b\x12\xf2c\xf0\x01\xb2\xb5\xbb\x8f\xa7.\xf6|\xd3>\xce\xd7\xc9\xd6%\x1e|\xa5\xa5\x16\x12\xe8-\xc2\x18\a\xf0\xaf\xeeo\xde\x1c\x7f\x14\xa4R\x12\xb3&\xe3\x9dM\xa0\x00\x00\x00\x00\x00\x00', 0x5)

11:40:24 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58)

11:40:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x12002, 0x0)

11:40:24 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000001c0)=""/109, &(0x7f0000000240)=0x6d)

[ 1257.713121] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:24 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40012042)

11:40:24 executing program 5:
keyctl$reject(0x13, 0x0, 0x0, 0xfff, 0xfffffffffffffff9)

11:40:25 executing program 1:
socketpair(0xf, 0x0, 0x0, &(0x7f0000000840))

11:40:25 executing program 3:
keyctl$reject(0x13, 0x0, 0x0, 0x4000004db, 0x0)

11:40:25 executing program 2:
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x121242, 0x0)

11:40:25 executing program 5:
keyctl$assume_authority(0x10, 0x0)
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)

11:40:25 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:25 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:25 executing program 1:
keyctl$search(0xa, 0x0, &(0x7f00000007c0)='.request_key_auth\x00', 0x0, 0x0)

11:40:25 executing program 5:
socketpair(0x23, 0x0, 0x8, &(0x7f0000000000))

11:40:25 executing program 1:
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)

11:40:25 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4)

11:40:25 executing program 3:
keyctl$update(0x2, 0x0, &(0x7f0000000000)='X', 0x1)

11:40:25 executing program 2:
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001800)='/dev/nvme-fabrics\x00', 0x10a01, 0x0)
socketpair(0x1d, 0xa, 0x0, &(0x7f0000000000))

11:40:25 executing program 1:
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001480)='/dev/nvme-fabrics\x00', 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)

11:40:25 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f0000000240))

11:40:25 executing program 3:
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x200040, 0x0)

[ 1259.090179] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:25 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

[ 1259.177036] can: request_module (can-proto-0) failed.
[ 1259.270380] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:26 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:26 executing program 1:
add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
request_key(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='{-#-&&-}\\^\x00', 0xfffffffffffffffc)

11:40:26 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @private1}, @in, @in6={0xa, 0x0, 0x0, @empty}], 0x48)

11:40:26 executing program 2:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x3, &(0x7f0000004fc0)='{:]:@:(\x00', 0x8)

11:40:26 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4)

11:40:26 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:26 executing program 1:
socket(0x0, 0x392cae3d8adfafe5, 0x0)

11:40:26 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @private1}, @in], 0x2c)

11:40:26 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0x4)

11:40:26 executing program 5:
socketpair(0x22, 0x0, 0x80000000, &(0x7f0000000840))

11:40:26 executing program 1:
socketpair(0xa, 0x3, 0x5, &(0x7f0000000000))

11:40:26 executing program 3:
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)

[ 1259.871066] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:27 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:27 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:27 executing program 2:
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001e00)="7f", 0x1}], 0x1}, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000002c0)="fa", 0x1}, {0x0}, {&(0x7f0000000400)="ca", 0x1}], 0x4, &(0x7f0000000a00)=[{0x28, 0x0, 0x0, "ccfbcdac484413833072a230340f8289e4"}], 0x28}, 0x0)

11:40:27 executing program 5:
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="ca", 0x1}], 0x4}, 0x0)

11:40:27 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0)

11:40:27 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@ipv6_delroute={0x1c, 0x19, 0x77ec44a88e5b3bb3, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0)

11:40:27 executing program 2:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000000040)={'veth0_to_bond\x00', @ifru_addrs=@xdp})

11:40:27 executing program 5:
socketpair(0x6, 0x0, 0x0, &(0x7f0000000100))

11:40:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

11:40:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000))

11:40:27 executing program 2:
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=ANY=[], 0x12d8}, 0x0)

11:40:27 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

[ 1261.308804] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1261.472967] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:28 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:28 executing program 5:
add_key$keyring(&(0x7f0000000a00)='keyring\x00', &(0x7f0000000a40)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\\*\x00', 0x0)

11:40:28 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in, @in6={0xa, 0x0, 0x0, @empty}], 0x2c)

11:40:28 executing program 2:
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x20c0, 0x0)

11:40:28 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:28 executing program 2:
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001e00)="7f", 0x1}], 0x1, &(0x7f0000001f00)=[{0x10}, {0x18, 0x0, 0x0, "af"}], 0x28}, 0x0)

11:40:28 executing program 1:
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10}, {0x18, 0x10e, 0x2, "af"}], 0x28}, 0x0)

11:40:28 executing program 5:
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x41c881, 0x0)

11:40:28 executing program 3:
syz_open_dev$loop(&(0x7f0000001680)='/dev/loop#\x00', 0x0, 0x0)

11:40:28 executing program 2:
request_key(&(0x7f0000000180)='.dead\x00', 0x0, 0x0, 0x0)

11:40:28 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:28 executing program 5:
socketpair(0xb, 0x0, 0x0, &(0x7f0000000840))

[ 1262.185047] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1262.368765] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:31 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:31 executing program 1:
perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

11:40:31 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={0x0}}, 0x0)

11:40:31 executing program 2:
socketpair(0x1d, 0x0, 0x1, &(0x7f0000000040))

11:40:31 executing program 5:
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)='E', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001b00)=ANY=[], 0x12d8}, 0x0)

11:40:31 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:31 executing program 2:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$setperm(0x5, r0, 0x0)

11:40:31 executing program 1:
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001e00)="7f", 0x1}], 0x1, &(0x7f0000001f00)=[{0x10}], 0x10}, 0x0)

11:40:31 executing program 5:
socketpair(0x2, 0xa, 0x0, &(0x7f00000006c0))

11:40:31 executing program 3:
socket(0x10, 0x3, 0xffff)

11:40:31 executing program 2:
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)='B', 0x1}, {0x0}, {&(0x7f0000000400)="ca", 0x1}], 0x3}, 0x0)

11:40:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private}}}})

[ 1265.463885] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:35 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:35 executing program 1:
add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
request_key(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0xfffffffffffffffc)

11:40:35 executing program 5:
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)='E', 0x1}], 0x1, &(0x7f0000001b00)=ANY=[], 0x12d8}, 0x0)

11:40:35 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x6f, 0x4)

11:40:35 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:35 executing program 2:
socketpair(0x1, 0x0, 0x9, &(0x7f0000000840))

11:40:35 executing program 1:
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001480)='/dev/nvme-fabrics\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0)

11:40:35 executing program 2:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSGL2CALL(r0, 0x89e2, &(0x7f0000000040)=@bcast)

11:40:35 executing program 3:
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000000c0)='.\x15\x00', 0x0)

11:40:35 executing program 5:
socketpair(0x11, 0x2, 0x1, &(0x7f0000000000))

11:40:35 executing program 1:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open$dir(&(0x7f0000000200)='./file1\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x18)

11:40:35 executing program 3:
r0 = add_key$keyring(&(0x7f0000000a00)='keyring\x00', &(0x7f0000000a40)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$unlink(0x9, 0x0, r0)

[ 1268.992387] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:37 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:37 executing program 5:
r0 = socket(0x1d, 0x3, 0x1)
setsockopt(r0, 0x65, 0x2, 0x0, 0x4)

11:40:37 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in], 0x10)

11:40:37 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20}, 0x20}}, 0x0)

11:40:37 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:37 executing program 1:
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x86101, 0x0)

11:40:37 executing program 1:
socketpair(0x28, 0x0, 0x0, &(0x7f0000000840))

11:40:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f000000ecc0)={0x0, 0x0, &(0x7f000000ec80)={&(0x7f000000ec00)={0x14, 0x0, 0x1}, 0x14}}, 0x0)

11:40:37 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x404}, 0x14}}, 0x0)

11:40:37 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000340)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0)
r1 = dup(r0)
getsockname$inet6(r1, 0x0, &(0x7f00000001c0))

11:40:37 executing program 1:
execveat(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x1000)

11:40:37 executing program 5:
r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$link(0x8, 0x0, r0)

[ 1270.686235] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:41 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:41 executing program 1:
recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

11:40:41 executing program 5:
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0)

11:40:41 executing program 3:
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001480)='/dev/nvme-fabrics\x00', 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)

11:40:41 executing program 2:
symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0})
utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{}, {r0}}, 0x100)
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/1, 0x1)

11:40:41 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:41 executing program 3:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
socket(0x18, 0x0, 0x88)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, 0x0, 0x4, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x34}}, 0x0)
socket(0x6, 0x0, 0x0)

11:40:41 executing program 2:
syz_mount_image$nfs(&(0x7f00000000c0)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[])

11:40:41 executing program 5:
syz_mount_image$ntfs(&(0x7f00000001c0)='ntfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000005c0)={[{@nls={'nls', 0x3d, 'cp864'}}, {@nls={'nls', 0x3d, 'cp950'}}], [{@uid_eq={'uid'}}]})

11:40:41 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000048c0)={@loopback, @dev={0xac, 0x14, 0x14, 0xb}}, 0x8)

11:40:41 executing program 2:
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB='dots,sys_immutable,codepage=8'])

11:40:41 executing program 3:
syz_mount_image$nilfs2(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)

[ 1275.098694] ntfs: (device loop5): parse_options(): Unrecognized mount option .
[ 1275.119160] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:46 executing program 5:
socketpair(0x18, 0x0, 0x0, &(0x7f0000002480))

11:40:46 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
fork()

11:40:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})

11:40:46 executing program 2:
r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x5, 0x10000})

11:40:46 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:46 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:46 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan4\x00'})

11:40:46 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
readv(r0, &(0x7f0000000c40)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/5, 0x5}, {0x0}, {0x0}], 0x3}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d)
shutdown(r2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)="d3d6c628dfa73f9e91ebf5f1fcb8ac660100c36a9668246b49acb2e397df20647cb8673bb6b32d6ea3eae3590876971fba7382c70dc616cc74733312b2b234a813cec36e84012f8c6562eef5ac8b84a2f78dea8c894af4c958236eea5501974877150291b5c3d40ca9decd099c946b333e168979b7102950148e75a079cb4107bc847d6b4b79997279e9be76e02edd6e71fe6a30796c96b93c45bd226f84e496c3469be04f4b93c619f72000000000000000a0000000fee70000000000", 0xbd}, {&(0x7f0000002340)="f6b4d690f90c889ffc32474d4811144c90c24846934999644804a19260702907e229120c1f7c5d3bd21511486fc7caed049b9eab907d7443b7c23cdb854bed9af17da88b7965573f506529bf9bce17c9fcab4cb699e6edfde5fd060356fadef29c68b2df0b56f5f90449811583ce462f36b7488b0875a9c9ef7477cee7f6b0f3a67e329d631a224f10e70d8d758c5cb50c0f18f28ce0a62a47ae5d8a9bf06bcbeb435ca3f1dc92cc5223cb5cb13022aea43e82d086dbd104acf4563387c18cb04a848b3147cb049e948d8d9abf7842241f6a5b680e69befd362219a965810c4fef5680", 0xe3}, {&(0x7f0000000100)="83af2abe9b83858383d4677ad2ba174ba3df8f5d730510391536be133c5a9456a39ba2b45df98ed71f8c370bff314611424b264627fc79be5f5307bd17c393fe87930276", 0x44}, {&(0x7f0000003f80)="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", 0xffd}, {&(0x7f0000001340)="1b0a64e3bc6aac003906ccf6e003548d9ee77ad07a5d4de9e0bc67d769b766377eb6", 0x22}, {&(0x7f0000001380)="295b63087aef99e4b734e91e4150b22f63e754f4ad961c82903a14a7e8e1028e78b3346ce2e00a304540bd3af2d028b04df323108e11f72929889466f634b85666b239e843a1617d9b1e51d675387b41eb2df506f0460c91f8d96937f584f2637bb0c48499d3460ff53027cbd7acaa2fb04861b71a7b65366ba32def1d6ba329c6136e2969172745d25c36d780d02413a49c95f1ad259b8d918c70ad8ac35b028728e194e47c9956595ffcce6ca81a", 0xaf}, {&(0x7f0000001540)="26d92a83d528c3d4f1f27c9af046aa6f5573186d53a0d6a57e8398098644f755d5b2e3b8d6d521507760bbd1e487c25e0000c8f349cf21010400000000000019a4f087da5c040000000000000005b7b3d2e8d8", 0x53}, {&(0x7f0000003240)="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", 0xcfc}, {0x0}, {0x0}, {0x0}, {0x0}], 0xc}, 0x0)
shutdown(r3, 0x0)
execve(0x0, 0x0, 0x0)

11:40:46 executing program 3:
io_setup(0x1, &(0x7f0000000000))

11:40:46 executing program 2:
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x2003, 0x0)
r0 = msgget(0x0, 0x6c1)
msgctl$IPC_INFO(r0, 0x3, &(0x7f00000001c0)=""/96)
r1 = msgget(0x2, 0x44)
msgrcv(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000062ebb6ba0000000000000000000000000000000000000000000000000000570900"/137], 0x89, 0x1, 0x0)
r2 = msgget$private(0x0, 0x1a2)
msgctl$MSG_STAT(r2, 0xb, &(0x7f00000000c0)=""/210)
msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000040)=""/195)

11:40:46 executing program 5:
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x204080)

11:40:46 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0)

[ 1280.016780] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:46 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:46 executing program 3:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a9, 0x0)

11:40:46 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2(&(0x7f0000000a80)={<r1=>0xffffffffffffffff}, 0x0)
dup2(r1, r0)

11:40:46 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x100, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040), &(0x7f0000000080), 0x0})

11:40:48 executing program 0:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:48 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
pipe2(&(0x7f0000000a80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
dup2(r0, r2)
pipe2(0x0, 0x0)
ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0)
read$FUSE(r1, &(0x7f0000006fc0)={0x2020}, 0x2020)

11:40:48 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:48 executing program 5:
pipe2(&(0x7f0000000a80)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
read$FUSE(r0, &(0x7f0000000ac0)={0x2020}, 0x2020)
write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18}, 0x18)

11:40:48 executing program 1:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
dup2(r1, r0)

11:40:48 executing program 2:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0})

11:40:48 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:48 executing program 1:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000)

11:40:48 executing program 3:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8917, &(0x7f0000000080)={'vcan0\x00'})

11:40:48 executing program 2:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'})

11:40:48 executing program 5:
r0 = socket$l2tp(0x2, 0x2, 0x73)
connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)

11:40:48 executing program 3:
semop(0x0, &(0x7f0000000100)=[{}, {0x0, 0x890}, {}], 0x3)

11:40:50 executing program 0:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:50 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:50 executing program 2:
r0 = syz_usbip_server_init(0x0)
write$usbip_server(r0, 0x0, 0x0)

11:40:50 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000003c0)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4})

11:40:50 executing program 1:
semop(0x0, &(0x7f0000000100)=[{0x0, 0x7}, {0x0, 0x890}], 0x2)

11:40:50 executing program 3:
r0 = socket$l2tp(0x2, 0x2, 0x73)
pipe2(&(0x7f0000000a80)={<r1=>0xffffffffffffffff}, 0x0)
dup2(r1, r0)

11:40:50 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:50 executing program 1:
semop(0x0, &(0x7f0000000080)=[{}, {}, {}], 0x2aaaac07)

11:40:50 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0)

11:40:50 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:50 executing program 1:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7b3, 0x0)

11:40:50 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, 0x0, 0x0)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

[ 1283.614789] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1283.625267] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1283.665506] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1283.716346] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1283.783009] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1284.127994] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
11:40:52 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, 0x0, 0x0)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:52 executing program 1:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8953, 0x0)

11:40:52 executing program 3:
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = dup(r0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0)

11:40:52 executing program 5:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8914, &(0x7f0000000000)={'vcan0\x00'})

11:40:52 executing program 2:
r0 = semget$private(0x0, 0x4, 0x0)
semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1)
semop(r0, &(0x7f0000000100)=[{0x0, 0x7}, {0x0, 0x0, 0x1800}], 0x2)

11:40:52 executing program 0:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:52 executing program 1:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8922, &(0x7f0000000080)={'vcan0\x00'})

11:40:52 executing program 3:
fanotify_mark(0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x0)

11:40:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

11:40:52 executing program 2:
socketpair(0x29, 0x0, 0x0, &(0x7f0000000500))

11:40:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x24}}, 0x0)

11:40:52 executing program 1:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000021c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002180)={0x0}}, 0x0)

[ 1285.735094] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:52 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, 0x0, 0x0)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:52 executing program 1:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ef, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000007c0)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000800)={0x0, r0+10000000}, &(0x7f0000000880)={&(0x7f0000000840)={[0x7]}, 0x8})

11:40:52 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000002c0)="fa", 0x1}], 0x2}, 0x0)

11:40:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x24}}, 0x0)

[ 1285.925567] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:53 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:53 executing program 2:
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)

11:40:53 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000100)={'ip6gre0\x00', 0x0})

11:40:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00', 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0)

11:40:53 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000007c0)={&(0x7f0000000200), 0xc, &(0x7f0000000780)={&(0x7f0000000440)={0xffffffffffffffd3, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0xffffffffffffff04}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x310}}, 0x0)

11:40:53 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002c40)={0xf08, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xeec, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xee5, 0x3, "eadbb73b336c8f50c3bc1d2c16502651fccff6277286747b93a8e185c0f7e5e3c474bd9e14401ffbbae45004f896e546f6a7947b4c1df7f94f000e1c96762c4233f1b931c686d599386eefd4f0c5931b46ed0d963802b1840d8922718bc487cc04aedd0e412d2f345cfd77003eb6c48681214dcc86a46a6ee4c1d17e8166b444f02ab293637d5bc174050e3e56eefd287456ea2e005d6bd5bd94b84bd2a4882d41b03a5245def843553ff29a159269e527706f3dd553a82dd616d3ecc23e66d88f393be59d86138979f8d6a84dd46254a15f633110077c0af6a730427e1a53720324bb403d084b0d08b9ff4f41c155fb86de053fd2fc7c012b96d2b84312c6576d46116871079c664450cd6fbb66fcde971d1be4f56e78125b2efe1569619c023a9623bb1fd1aba57fa0e8f37aa015a86f40f4ae55b5a0becd839f5902b4aadafed2b2572ee1822fdb35a21fb5017eee49a2ba7055d9c2458191bc5e426b5c97e94cd5c7a7ce81ef586c6858d6f3d46edc26334fc40724a573a242b43d3dfae566070be992d3984e1d011178e93ceb7389cb9f6333ae061213485b3c1fe40b78afd0aedb898399b29c2c33a749afa1dad34ffa8bf8ccc8d7a01ef1b9b5504cb019869e4ab5f6dd5d7fe2c1b9e4d1bf841b1e9fa0189cf31072a6516d9e5d07ed501f8627a08bfbd8d7f5e6c31191f8f08a94a03f145a72499ceb886c752653c4fbe40e1187ec45db31a2d77fc7cc68559d4ebd7552867eab72ede62541cd04bce2e7f47ca3cf98b645fd79fb2c77abdd9a532468a6e1528127fa0f03587e74461d86e9ec98365b5ff39eb44feb80394ac9aa480ca289ee3ee19eb999aa85df68ca01deeedce52a86019fbdd2ae69bd5967df74484e1b49149839f12950bbd798e399c5488fe302df89c4a63b4a2284f08cfa83570689cde84f2c1da8ee167e1f6542fd65ea08483f80021c4c02b2ff5166bd66e6de3a08a73cbf9ebe6cd17ca588b05e3cb9270125d5181f2f7079d6ced1675224ef2065c21e516043209815b0afcdb2031e735e681580e5a85c9b857b443b4d86850c61b96d8f40b96899bf39a1c4e7e61e0d9ec8888f869dfede0b7b346a22e464301a1bf2058f99be2ea4f78fd8335afb650ff7a3499633faa322a61b461804841fd98f5e7540f81680eaae0156936271f2ee5a3b274a50c5ad79fb2423c5bce8143887f5c557f761b2d8a690db13ba143fef328faf0d74ffa6647786e6e6d35c55f885b4ffb427334b6cf7ef8a9b941af9c1c9b4812d6cca656447d9d8481afd30a1cf62291da9eff5fc83c23f52b23989b9a91df14bd3a96c04c7c21fb3533fad4ec9d03d605fb85e4ae99e3c850eb55f2a6013a51874b2413f58ccbcff2243decc75c817cc5c6c6a5e3cd6dc50e4f8886e82c330ca497f0b0b9f7c4e31e5b1248672b071bd048c6713354bf216d60a1ebffee5a0378a68097393899c50dfb3e6e43fe67a483cee4b8e2401d2b5d7da428d9afdb4bf736a7eb3c0162f784cf7ef76819df4b73491029172c6a16db8907ff8b084453951890e707443a295a7bde33b8b46c394c076187175df33344da92ef0692acc451fc4c90875f54e50654192ea621f75d44f420463465e7a6289a3f50b3d832efbe19ede29064a14f241756c7be9c4c38485ea3eac81cdc2c4e1515990956e1778092a293fc62d0b4cf53b27c79a48d68af65889d5cfc9a00d90386a334f698d0f0fc875b7b1c81384d32aff73c29a05ce68308ad922f292048f0646bd56396f52177ff15aeb375933566ec570bdaee1d8b860fd2b70e279b41ceef9630675cdbebfb78cb97af2b2d9f41112c5fbbd835fa35be4affc43e7d80a07b40cb95706a9b8b5c51a608c53f7a5f73f04acec5ef7df0b802e628ec93296bf56578c02839c13cf167dd5ad1428f2c4f1386540c4fea1ea494812392a89b3b45cacc41acc61939e8193a6df0117997ec349e26eb966044e68c1974e28a94ccb50898dacb5a9cff364ab7e8c777fe7a87c846ab2c3261261888d2b5dde77643464c6b7110e134a336439d0a4937fadf589e0855bc60fd9bc03d0d0a140c660342a595749564b8a9dbd005bb5af746ae530f0e84f1db4435b356da73b63a79fcdebc82844c77199ce94d1b2fb3aad02c0a8161f7f5718420c7b741d2b8a0b6de0276f8eaffab4822564c5ee8f95ccf4c93cc33344d52d761e017558b677c18f533b72d9a0d5f812e49b3c7bb843091be8d329d4d1246216231302f03cdc38ef2d66c1c8dcb6a876eb1620aab1bfaee3ba45c808fdc087297be34cc9c8c3eb321183ef1e06774e67aa5edcd1ae890a3c9a999b933e63084fdf2da6957995d9f1dc0c5e47972d2dd1820228d8c7c774a13b41d2278263e93ad284d77120fa2f0f67a12d09afec15af21d2fdd0cef28634476fef0c7aa5ce8a62a5d91904d9e128dbe6f30b52a1e6d3a3c479c51ff2a607f21e8d79cc1ea58e8f01035ed618381760f16d73164afe5322843cb8bc2ea51c0b48d48cebc94d5cd77a159f75bf1cfe5c503e8437f761436c4c42a129777f4694a8c2b7643af10d0bfa348e8e9d25055ffd8c2cc053e5f6ecd6b33e6b3b4beb8ec7fe0cde6f3d289cbebd2f0ebdd30f61a5296343243be1077eff39497033a7b59d2470a9b46e08741686032466db9ddd1e4c3dd6bb803fb6355d3e7ca2b8fc44d77fada2651baa4b595a20b8869411f0a652f399e81cbe15f98d32e8703ad130e0b84aa68e0d3952b164b7a1f95e34f792cdd5aa1f77b9504f5a848649edf4019f066dcdae8d00f969e436fa57a63b90f43409d9dc386d0bf64bb91a1b725fec25c861c4b9a5343b655cc7eec83e71587cac392f75ee98f23a7f90d555ffe194e55b20373c5d60dcafb099963392d981d2ffe59bff1380c0114bba33f56c11883cd6994b46d11d463c1de4e2efd8b471eeff0b0db0c48fca0c55e93e03070b364fe5db497596402b597deea212da18d656ef42d34f080cbc6e71b969bbc093b877c5a9ba5c66485d7b9b2ac455dd13ce242bd36a5e36946c39041698f15ba5d9a051901303329e412b8d13b63d310b37b6b01f839a77004588d51364c2a27ce51a7b2417fcfe3fd217e9ca0f215f6737f2a994004e05f84f725c167650dd197ac09bcb963248f29c9c192248717bff78f1be0ce51c15385ed63a93c0059340d42c88726de22b179bb28bc54ff40d4e6c4a6c5f8ff28a2836643d248f636979b32aa32e9d19afc01dc9aca08b05656682c1ee0b0c4cec7e32d97f7e8b1d67da4970df7a8b6a897625992a4f93151d48f77b48293b311974e2c0013cd688f7cad3ff67cb2ab23e5390ce6b2c01771a67fca4c2fb2648c8b8c567123a1d472fe660abe3db0c20acdf86d20de77885ba1ce4f6fcfca01c9fd2949f1dc5a1449c72bb90dc900d5b6b428ea0c893b3bef6baa365cc12e4f9f91e75f46af84e0228bfd336c38f8ec1c314be03b7e4d037d104210f7dbe4853dd06bdd151333b42c815055c6252496f56790ed676817c52edba37c7fd71871671ff27fadb95c5016dbfd6f79e607100c76192b9f6f31a541783e72720215a89a0401129e5743589c53e2f249512ee9c2bddda9b1bdf1ded97610c81004e4e14d20010774e32e979fa6606892fbcb99a4de5e7170f7ad53258f8cf7e7ab956c4d7956c7153456b0674096dc0dc0de2e16655da3f88f00515fa4f4680389741184b318e105f41810158ae4c57c4fa3783a9a4687500a96db021b0b860917fdb1fa16cf1d18d41dce5974259bb9048427239e60fb283ffb479f80d60ba9ce940d2ea364ee48a0696bbca2c09884116877b392478f3e30c0b291aff16c27997df97cd808230bc219f90ca8a7ce7b8381baf9b3b8159fb1589195597393130cdb18003c3b313ed0e72d7f8c65b88581174b9b5b22ab40d92d3f60ca576871721fbe9010ce968cc5ab5bcd0fc9d634b381d59c87258fbf3f49595f1fd30d8b99661f3947b5037b1922ffb061221a84c968097066f9d299a97a465787358c59514d9ced2abbb22abd07f69722c2557f1e79b82db7248f836a2397854e154da206cff6d099dba186317536f8fad7aeaaed6b0f1d968fb3bb0ea47e667db703b62d1472301dc7de7f38cc6d58a6b2198db1ce96596c7061c212056fa2e8fbda1e4cb795ce71ba611ef5a88ab44cc0dc886c79c7f267b04b9108b7eb123c6d0cc84675f4f34ff8c8a2d00543a0f7babfa9e85b88b7753528f1835a759adaf8078e35954ba8230da9f1e9d59258b112815c13d291cc292647ba7a1cd69919b2c289b3c0a6ed72aa794ad5c94fbb6e0dc3a16a6e2befdc010a14c9c9287c0f20c1b21948bfb5f8544a92e2f375eaaf759932b0305b76ca351c6b82de51cb63ed91f19d3adf2962e6979bf5f9812254f6af6250715a02f6564b216c52497ec5a5445794c703cc3ed9c2d6c6c2cffb78405eaed0e092a4be439d6f78104ead09b2f7b39fdea83f2e9df4a6d9a63414d6e659ff71c6b9409e9f48d61c9be1ece5aea9b5232e0c1fa02385a618d26cb049b509aaec7ace0b1c15b2e01f47083fb8b4c465fc8e0e7b0b58b63fb928cd760701e95c6bcea08f49c758d339ab076ebc8db3c7979a559f76825e0d1f41b3f9c066a10c026cc8ea191e35e9fd2175233eccbc5ff021014521177ee823e5d98969a246d3e22b844924f1d8aa1b985aefbcca355d1f53db03f7ff0ccc3ec2d5d113cd9c5533d432736e1df40beb7488cf5e4288960dc83097a20b73fd52a05dde311c732308e8d62a5c0e3770c9255a5b89bd7821821f116ad19cd310ccb81f5938abda07e97a539af1be8902201011dfce75cbf804e029da59b1bea68277c0bfdf2437b11ba94f1f3901279e11200dcb4a533fab3d0ea3e40c40b9f5de132314bf3b1db83eeb4bc3343fa6ffc9b057bac59757007ad35b67e6bd9be465463ff317576fb1c10b9b950abf03c4d4279f4b2d0ab81670ee0ece472846819fa703be20c60b75963de3b20fe84470027ef49ce59a74fdc3a82b3a948a2d2b9277e5c1e40b4528c9b81378f57cb887901ef805e6766a8d59e72ec441fda4b8af5f49429a7c741da8980b403920f08026b45da0c92b5bd1fa8f8c6581181fddd18ddd49e1df9e9c789f9469cde9c5fe0a29496781039626f3bfc648d4c5591d3a18e0c8594d6ee28fbe0eed6bdbb19ce9e5342e7a0a6df340a9205bff3c416bf595fac15557b88c385056f41f761d3184e443249d6115d4fbfac2a1f5c09d1d97a24252b1f9c5902c97119a3a576216482781f8ca0392a27f42a78a9d07166db289abdffb243627f10d8809bb742d13f4b3f349b60f0aff80694aca22ff55ed6b183c762186fa39dd2a2e9d5d9ffe632d818"}]}]}, 0xf08}, 0x1, 0x0, 0x0, 0xc015}, 0x200000c0)

11:40:53 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40)

11:40:53 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={0x750, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast2}, 0x45, 0x0, 0x2, 0x46a, 0x4})

11:40:53 executing program 3:
r0 = inotify_init1(0x0)
inotify_add_watch(r0, 0x0, 0x4000000)

[ 1286.837236] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:53 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:53 executing program 5:
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f00000007c0)={0x0, <r0=>0x0})
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x0, r0+10000000}, &(0x7f0000000880)={&(0x7f0000000840)={[0x7]}, 0x8})

[ 1286.990622] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:55 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='F'], 0x38}}, 0x0)

11:40:55 executing program 2:
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x4)

11:40:55 executing program 3:
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockname(r0, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000003c0)=0x80)

11:40:55 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:55 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00', 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x24}}, 0x0)

11:40:55 executing program 3:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0)

11:40:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)

11:40:55 executing program 1:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

11:40:55 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

[ 1288.585554] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:55 executing program 5:
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x84572edea6651ebc)

11:40:55 executing program 2:
socket(0x1d, 0x0, 0x7)

[ 1288.650259] dlm: non-version read from control device 0
[ 1288.667339] dlm: non-version read from control device 0
[ 1288.678155] dlm: non-version read from control device 0
[ 1288.725647] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0xfffffffffffffffe}}, 0x0)

11:40:58 executing program 1:
socket(0x3, 0x0, 0x27d)

11:40:58 executing program 5:
r0 = socket(0xa, 0x3, 0x4)
sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={0x0}}, 0x0)

11:40:58 executing program 2:
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x6000, 0x0)

11:40:58 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:58 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:40:58 executing program 1:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

11:40:58 executing program 5:
pselect6(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100), 0x8})

11:40:58 executing program 3:
socket(0x1d, 0x0, 0x3f)

11:40:58 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:40:58 executing program 2:
syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0xfffffffffffffff8, 0x141282)

[ 1291.647682] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:40:58 executing program 1:
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='-\x00')

11:40:58 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003c000505d25a80648c63940d0324fc60100002400a000000053582c137153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

11:40:58 executing program 1:
syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x808, &(0x7f00000000c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee00}})

11:40:58 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000040)={'veth0\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}})

11:40:58 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0)

11:40:58 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000200)={0x0, 0x0})

[ 1291.807045] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:01 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:01 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:01 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xd, &(0x7f0000000300)=@framed={{}, [@func, @map, @btf_id, @map_val, @initr0, @func]}, &(0x7f0000000380)='syzkaller\x00', 0x7, 0x1000, &(0x7f00000003c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:01 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@jmp, @call]}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc9, &(0x7f00000000c0)=""/201, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:01 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000140)=""/235, 0x2a, 0xeb, 0x8}, 0x20)

11:41:01 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/235, 0x1a, 0xeb, 0x1}, 0x20)

11:41:01 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x18)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x2, 0xe, 0x0, &(0x7f0000000040)="725cf8fdb649533fb531adc3054d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

11:41:01 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x2}]}}, &(0x7f0000000140)=""/235, 0x2a, 0xeb, 0x1}, 0x20)

11:41:01 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
ppoll(0x0, 0x0, 0x0, 0x0, 0x1c000017)
openat$cuse(0xffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
socket$inet6(0xa, 0x0, 0x0)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000400)='./bus\x00')
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e23}, {0x2, 0x0, @broadcast}, {0x2, 0x4e20, @local}, 0x20, 0x0, 0x0, 0x0, 0xb, 0x0, 0x5, 0x10000, 0x1})
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x4004000)
bind$alg(r2, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
listen(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))

11:41:01 executing program 1:
fanotify_init(0x13, 0x0)

11:41:01 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

[ 1294.741199] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:01 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x15}, {}]})

[ 1294.896007] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:02 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:02 executing program 2:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')

11:41:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getpeername(r0, 0x0, &(0x7f0000008240))

11:41:02 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x5421, &(0x7f0000000040)={'veth0\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}})

11:41:02 executing program 5:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)='logon\x00')

11:41:02 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x401, @loopback, 0x7}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:02 executing program 5:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc0045878, 0x0)

11:41:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00', 0xffffffffffffffff)
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0xc}, {0x4}}]}, 0x20}}, 0x0)

11:41:02 executing program 3:
readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000080)=""/223, 0xdf)

11:41:02 executing program 2:
perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:41:02 executing program 5:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)

[ 1295.875529] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:02 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

[ 1296.128966] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:03 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000000b580)="c233618bae9de73024cf6ab6670d46d3ec4de44c4d1c226c5bb408394a913a46cffef8f886237bde82cf1f60efd6cdbcdd5fbaa678e1fd3dc1bccac8803bc0ba37", 0x41)

11:41:03 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x8}]}]}}, &(0x7f0000000040)=""/225, 0x32, 0xe1, 0xfffffffd}, 0x20)

11:41:03 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{}, {}]})

11:41:03 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc9, &(0x7f00000000c0)=""/201, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:03 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:03 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:03 executing program 1:
perf_event_open(&(0x7f0000000040)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:41:03 executing program 5:
r0 = epoll_create1(0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))

11:41:03 executing program 1:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x2, &(0x7f0000000140)={'batadv_slave_0\x00'})

11:41:03 executing program 2:
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x288482, 0x0)

11:41:03 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000000140)=""/235, 0x2a, 0xeb, 0xfffffffe}, 0x20)

[ 1296.735170] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:03 executing program 5:
mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)

11:41:03 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockname(r0, 0x0, 0x0)

11:41:03 executing program 3:
getresgid(&(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300))

11:41:03 executing program 1:
syz_mount_image$fuse(&(0x7f0000000500)='fuse\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}})

11:41:03 executing program 5:
migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000080)=0x5)

11:41:03 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:03 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0)

11:41:03 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)

11:41:03 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xc, 0x0, 0x4}, 0x40)

11:41:03 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @local}, 0x10)

11:41:03 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:03 executing program 2:
r0 = socket$inet6(0xa, 0x401000000001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r0)
eventfd(0x0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x10600c2, 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r2, 0x208200)
sendfile(r0, r1, 0x0, 0x8000fffffffe)

11:41:03 executing program 1:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80002003, 0x0)

11:41:03 executing program 3:
syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize'}}]}})

11:41:03 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0xc0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

11:41:03 executing program 1:
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000280)="0a6b6c1bcdf139f4aea43e89e5a8", 0xe, 0x0, &(0x7f0000000100)={0x11, 0xf7, r2, 0x1, 0x0, 0x6, @random="6df3c36daa8e"}, 0x14)

[ 1297.417808] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:04 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x1, &(0x7f0000000040)=@raw=[@ldst={0x0, 0x0, 0x2}], &(0x7f0000000080)='GPL\x00', 0x4, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:04 executing program 1:
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)

11:41:04 executing program 5:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x814a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:41:04 executing program 3:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140e, 0x1}, 0x10}}, 0x0)

11:41:04 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0)

11:41:04 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:04 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:04 executing program 1:
mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0)

11:41:04 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x3, 0x0, &(0x7f0000000200)={0x0, 0x0})

11:41:04 executing program 2:
migrate_pages(0xffffffffffffffff, 0x3fe, 0x0, &(0x7f0000000000))

11:41:04 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdr={0x40, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @remote}, @IFA_ADDRESS={0x14, 0x1, @private1}]}, 0x40}}, 0x0)

11:41:04 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000200)={'erspan0\x00', @ifru_hwaddr=@link_local})

11:41:04 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x23, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00')

11:41:04 executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x300)

11:41:04 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}}, 0x0)

11:41:04 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x9}, 0x40)

11:41:04 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000001880)='keyring\x00', &(0x7f00000018c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
request_key(0x0, 0x0, &(0x7f00000001c0)='+\'-\'\x00', 0x0)
r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$unlink(0x9, 0x0, r1)
keyctl$update(0x2, 0x0, 0x0, 0x0)

11:41:05 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:05 executing program 1:
socketpair(0x2, 0x2, 0x0, &(0x7f00000000c0))

11:41:05 executing program 2:
utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{0x77359400}}, 0x0)

11:41:05 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000040)={'veth0_to_batadv\x00', @ifru_settings={0x0, 0x0, @fr_pvc_info=0x0}})

11:41:05 executing program 5:
sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x0)

11:41:05 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:05 executing program 2:
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1f8, 0x14, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x69, 0x1, "cfe1b44917e5995ac0a2f7703fef21c8088da8295289c80385194253e37e1c1d7d585767e93d48c8db591a04d93a02cb991d2e6285ac236f1fda0b4176c9ffafd69cb6213f4c0fa0b9a018e743beb86593e021660470a36f3bd9fffb794a970f230df866d6"}, @INET_DIAG_REQ_BYTECODE={0x69, 0x1, "d92dc286d2341a2a0e18614c709d17acdcbeac06cd7d01abfd586acd360bc05563a4477cc6c4c5aa041f63bdcc6f6581cb8d4e897fa63bd1fde045c208771e057795af697a097a0f8e597d55ae92bf6d25516c34120225f0d5645d07aa99db1c8814ae19d8"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "b281a9f677f2b5f355ef18ddd40e9a4826212bdbe74318d7739de24866de92beffd28d61e1eea3ecd000cfa63d3271f7083d998a0c40ff0f9139988a7ffe124f1f379c7dbf548a0958d0439cb7022cb29648b85f82b331d378872a906f72be6d6ea9f847e1f78b9f79d3d2b9309e034124cebd80d4b40c5f5defba1b2610a1a27001e02dc8505d99d0df553f4f026a00b0192fda7a835e0e6ec189377be69cdb11b83dc7eca9caf690e7047b9722ffd52d741963f9bf008f187bf1f7dad682708d9e35710c5731a52f80189c3dadf59ff2bdfe76f1549bf21ea6388d8002b63805464c46b2e7f07c0501beda0c94fe5cf4cbb5cd410cf31e94"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "63009094c75768"}]}, 0x1f8}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:05 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000300)=""/4096, 0x1a, 0x1000, 0x1}, 0x20)

11:41:05 executing program 3:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc020660b, 0x0)

11:41:05 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x70, 0x0, 0x52, 0x2}]}}, &(0x7f0000000280)=""/130, 0x2a, 0x82, 0x1}, 0x20)

11:41:05 executing program 2:
fchownat(0xffffffffffffffff, 0x0, 0xee01, 0x0, 0x1000)

11:41:05 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

11:41:06 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:06 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0x10}}, 0x0)

11:41:06 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1080092, &(0x7f0000001300))

11:41:06 executing program 5:
epoll_create(0x3f)

11:41:06 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$fscrypt_v1(&(0x7f00000011c0)='logon\x00', &(0x7f0000001200)={'fscrypt:'}, &(0x7f0000001240)={0x0, "e9413a87d23d5d2869b8e1b22157a9bf6a45dfb1319107bcab5883fb5d10affc59889ab17b571aa08618ece6e72772fc3d0dab650684cbe84817b1d59e35c3e9"}, 0x48, 0xfffffffffffffffd)
keyctl$update(0x2, r0, &(0x7f0000001740)='e', 0x1)

11:41:06 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:06 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a40)={0x0, 0x0})

11:41:06 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x402, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

11:41:06 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000340)={0x1, &(0x7f00000002c0)=[{0x6}]})

11:41:06 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:07 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x1277, 0x0)

[ 1300.536820] audit: type=1326 audit(1613907666.987:101): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25586 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466019 code=0x0
11:41:07 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000340)={0x1, &(0x7f00000002c0)=[{0x6}]})

[ 1300.702954] audit: type=1326 audit(1613907667.137:102): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25603 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466019 code=0x0
11:41:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:07 executing program 2:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)

11:41:07 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x402, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

11:41:07 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockname(r0, 0x0, &(0x7f0000000100))

11:41:07 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)

11:41:07 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:07 executing program 2:
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0xc00d6c928208735e)

11:41:07 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x402, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

11:41:07 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001a80)={@empty, @private1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1020080})

11:41:07 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040), 0x4)

11:41:07 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x402, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)

11:41:07 executing program 3:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f0000000140))

11:41:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:08 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x80081270, &(0x7f00000001c0))

11:41:08 executing program 1:
r0 = fork()
r1 = fork()
rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x3})

11:41:08 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x5452, 0x0)

11:41:08 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000100), 0x4)

11:41:08 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:08 executing program 5:
r0 = getpgid(0x0)
process_vm_writev(r0, &(0x7f00000024c0)=[{0x0}, {&(0x7f00000000c0)=""/241, 0xf1}, {&(0x7f00000001c0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000003780)=[{&(0x7f00000026c0)=""/4096, 0x1000}], 0x1, 0x0)

11:41:08 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000002100))

11:41:08 executing program 3:
r0 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, 0x0, 0x0)

11:41:09 executing program 5:
setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x8000000000000000})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x403, 0x2000000000032, 0xffffffffffffffff, 0x0)

11:41:09 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', @private0, 0x0, 0x0, 0x4})

11:41:09 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000080)=0x4, 0x4)

11:41:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:09 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
clock_gettime(0x1, &(0x7f0000000000))

11:41:09 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
inotify_rm_watch(r0, 0x0)

11:41:09 executing program 5:
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
clock_getres(0x6, &(0x7f0000000000))

11:41:09 executing program 2:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000080))

11:41:09 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:09 executing program 1:
socketpair(0x1e, 0x0, 0x0, &(0x7f0000001300))

11:41:09 executing program 5:
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x125d, &(0x7f00000001c0))
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4080)
syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)

11:41:09 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0x4018920a, 0x0)

11:41:09 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x40101288, 0x0)

11:41:09 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x200200)
write$UHID_CREATE(r0, 0x0, 0x0)

11:41:09 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

11:41:10 executing program 1:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001100)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_RD_TIME(r0, 0x80247009, 0x0)

11:41:10 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000002100))

11:41:10 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x40081271, r0)

11:41:10 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x40, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)

11:41:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:10 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:10 executing program 1:
pselect6(0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x6]}, 0x8})

11:41:10 executing program 5:
r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
unshare(0x400)
fadvise64(r0, 0x0, 0x0, 0x3)

11:41:10 executing program 3:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = fork()
process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/226, 0xe2}], 0x1, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/168, 0x7ffff000}], 0x1, 0x0)

11:41:10 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100)

11:41:11 executing program 5:
openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0)

11:41:11 executing program 2:
request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xffffffffffffffff)

11:41:11 executing program 3:
r0 = timerfd_create(0x8, 0x0)
syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0)
timerfd_gettime(r0, &(0x7f0000000280))

11:41:11 executing program 5:
openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ashmem\x00', 0x4e783c98ca8f37d5, 0x0)

11:41:11 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)

11:41:11 executing program 3:
r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$link(0x8, r0, r0)

11:41:11 executing program 3:
syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x280)

11:41:11 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:11 executing program 1:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

11:41:11 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0)

11:41:11 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev})

11:41:11 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:11 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000080)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00'}}, 0x118)

11:41:11 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080), 0x4)

11:41:11 executing program 1:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4)

11:41:11 executing program 2:
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x125d, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x200, 0x4080)
r1 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x9, 0x40, 0x18, 0x1c, 0xef, 0x100, 0xfffffffffffffffc, 0x4}}, 0x43)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/pfkey\x00', 0x0, 0x0)

11:41:11 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0)

11:41:11 executing program 1:
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x40c01)
write$input_event(r0, &(0x7f0000000080), 0x18)

11:41:12 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self\x00', 0x210080, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

11:41:12 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:12 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x27, 0x14, "f440584deec17bb10f1dfa234fc9cef1e8abe84d8f362741f0187a4ba4db167257c8c9d2d69a4c98e941baa6a2067c6d62b78d9acac9ddfd21dba8b039f4c73f", "8cac639859a9a5affe9c4a14c3613975ad32e0eb6527211cd85cdd8eeecfa7aa"})

11:41:12 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', @private0, 0xcfd})

11:41:12 executing program 2:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)

11:41:12 executing program 5:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4800)
write$P9_RGETATTR(r0, &(0x7f0000000240)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0xee00}}, 0xa0)
write$P9_RGETATTR(r0, &(0x7f0000000100)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0xee00}}, 0xa0)

11:41:12 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:12 executing program 2:
clock_getres(0x0, &(0x7f0000000200))

11:41:12 executing program 5:
r0 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf={0x0, &(0x7f0000000380)})

11:41:12 executing program 3:
socketpair(0x0, 0xdb1975c6b6c575fb, 0x0, 0x0)

11:41:12 executing program 1:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000040))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0)='nl80211\x00', 0xffffffffffffffff)

11:41:12 executing program 2:
add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)

11:41:12 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x4, 0x4)

11:41:13 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:13 executing program 3:
request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0xfffffffffffffffe)

11:41:13 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast1=0xe0000002, @dev={0xac, 0x14, 0x14, 0x37}}, 0xc)

11:41:13 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
getitimer(0x1, &(0x7f0000000040))

11:41:13 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x81}, 0x40)

11:41:13 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x40, &(0x7f0000000040)={0x20, 0xe8b, 0x0, 0x1, 0x0, 0x1, 0x8000, 0x8}, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:13 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000080), 0x4)

11:41:13 executing program 2:
r0 = fork()
process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/226, 0xe2}], 0x1, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/168, 0x7ffff000}], 0x1, 0x0)

11:41:13 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@dev, @local, @mcast2})

11:41:13 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000080), 0x4)

11:41:13 executing program 5:
socketpair(0xa, 0x3, 0x2, &(0x7f0000000200))

11:41:13 executing program 1:
process_vm_writev(0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/226, 0xe2}], 0x1, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/168, 0x7ffff000}], 0x1, 0x0)

[ 1307.150913] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:14 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:14 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x2, 0x0, 0x0, 0x0)

11:41:14 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x4, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "b023dde1bbf53097519255a931568f2c373c55748925928cf9784c818a69a907ea4fa2365b8e4e495510f9b5ac8a238770743d2cb87479d4df3cb5cf5e6d9f97", "86ee9b556313c405d0f25b7d37126a79a44dd7a763de864d6c1c98cc4217be04"})

11:41:14 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x1267, &(0x7f00000001c0))

11:41:14 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0x9208, 0x0)

11:41:14 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:14 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$rfkill(r0, 0x0, 0x0)

11:41:14 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:14 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xbd061)

11:41:14 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0)
rmdir(&(0x7f00000000c0)='./file0/file0\x00')
socket$netlink(0x10, 0x3, 0x0)

11:41:14 executing program 1:
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3}}, 0x10)

11:41:14 executing program 2:
r0 = add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='E', 0x1, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r0)

[ 1307.721495] new mount options do not match the existing superblock, will be ignored
[ 1307.750871] new mount options do not match the existing superblock, will be ignored
[ 1307.781736] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
time(&(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800))

11:41:15 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_INPUT(r0, &(0x7f0000002440)={0x8, {"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", 0x1000}}, 0x1006)

11:41:15 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0xe282)

11:41:15 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0xc0189436, 0x0)

11:41:15 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x1, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)

11:41:15 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_128={{}, "8763338d387d27a5", "195c7f93223e0a32791787adfa74ffea", "63e41601", "8e8105483dbd89f8"}, 0x28)

11:41:15 executing program 3:
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)

[ 1308.662243] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:15 executing program 1:
fork()
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0)

11:41:15 executing program 2:
syslog(0x2, &(0x7f0000000040)=""/243, 0xf3)

11:41:15 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0202200306"], 0x30}}, 0x0)

[ 1308.822492] EXT4-fs (loop5): Unsupported blocksize for fs encryption
11:41:16 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:16 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='totmaps\x00')
syz_fuse_handle_req(r0, &(0x7f00000042c0)="116b48c24feec8ea53b43f1d340e02bf36ee10687174dc1e701f5592a7200298b14064f7e72de72a457e73d46e48fd8a188f11a0dc70a89d406ec67f3facb21dd1881899591c7d16eee2412acedbb92f2daa0fd97200261cddba01125343e582f39d9731845e830a97487346e2f4a2bec9607651474fc39df0695e339b0a89913e670070593ba62f79872995c916f627ac2eb95785e6f60783b6b458d67c5e22cfff3235d6e41239daf68fa9951cb07a200963ada941f40c0d826515b0d41d0c5c45921b36c37d020e0b1dfe4489d8e5981e4b6d34ec432107ad1355fed8531513d612d93548e8e6d635a52724ef9dc3b63b447f82912d437b5ad4f66b8f070a7ebf5089bf5af2a7292dc67d30444b4dfb00de3f483dbb85321f78eb1a6b4b1c9c53fdaaa37143a545259a293153783e01db99d59a06725022290ee53de8db34578a4bc62f563e1b8f98f3e3cd2835e820c4f0e5442caf55a34da9138c04213e6bd1d4c4cc15ca6b2f4d2452c99e52004ad460e33f7b78779a2a7fc863511db6d059f33bb04c9fa1aa281dc4acaf7b5dc801eeb65cf41d10382646608637018a775626f7a6f007b97f9cbf640af0978ac9723ce8beaaa8524d77782147683b43ded78caa1ac7bb48e54ed153f6a142130e34b0f9f5575234da8c458bad2957b7698f4c57d7908d94497e4ece6adcd89dd3f2cb6284154cf8d95dbe561b93fafbd1d3db7010b78bccee99ab3a07fe3c330303f79f6b9ce63db9a84bbec4cd1a2f8c624ddb10ae2312613f0f9dff1fc38cea4a4d8a4609eec8dc08d3cabf8648b12adbe367a09f0c7ffe20e2c1e4cd330a57121a1aaacf48d65b70ed8db14d41475469863fd30c17020ae36bde218fc3582d7c394539a9343a8a85dfcb72cc370440afcc481127a5bdf50dffee1061db3546e1facfab59eae00f71a75d705fcc4de5e19a47d2d90b0cf37951153c40672e35873098f7cd0de47481ae12a7f0738a2761a3c14742b5409bc1bd5b15ea2705a35529d4fadd65abb243816c5e8032817b0ea40a359b87ccbb04210fa2a35003e622e6d13ece97104afdd7244bc9fea89c0527a146964f26ef68065372cc0d1a05358085b204c3984f53ae5c0f240b9879951e2d63e89ef548d7a790479db2b24ed7d082c854cf2abf74950e755235d663fd2383d22fefc4fe822ff7ba5d49feed6f5a66f8cee388d9d2164d50ebd7b2caa79bda749c77710422ee1ed1fc9b3d4732a8cf7d8f92492282ce86496dab60ab2b26dcb77d4f796024ae101feb0a39dfda85674f8477c7e703f23cd6ec9632bf91a82925e9747a7803547585a648ed11d6c7df73822fae599c8dde1a5d7fd300094cfcaec1383c3298d478b1faf0be5f8845e23dc0ba4f6b1b8a21ad32a1f75e9690d9219a7e0fd3d0082e1bd9ddfb826ac400ff52acbff30265a847a42ec85a0c1a8dc2468717ad0962e215e253c71ad9eee64befe99d9d688a4ebbae0febf292e09a4d6d4da9e720a6a5fd523819cc2a8f1485b61c79818d6354ba9f551b419a2fa81355e818a90d43ffea4def08c82e5fa7981f27c921bcd84a8ab4581bd2c8df6a1e839bd122850d1d4c8c1fdab5c14706775ada311950e0b2eceb2c27a0950eb97da0a1f4883120cda50cfa96aaf9b56de6a5452b8133ef6e97679d3514c34126065b0376e7c9c5d70a0af6ed45daab52f86dc0cfeb669006c3c7ed9c5698169aec8a853992c57aaf6eddb6ac4f3a4f86a6e2fcc3c112644744e8fe316d2bd05609e27db05c6a0a9b838968e7d858663b330b7a8e807b2d798de827c3dc1db197da0a5e9f394418a1e9aed263508aa4125ad02bfb995b1c09d2886d7b29bd9b36290130845e5bc3a038e2b3b3411b66db78b219ffed688c052530d3b4287134c4b00c82d87ea39c06f80ba23b3e286c6e76aa66331680328fc8e9f58c0defcfa53ee8451732270f4b1698cf5e50534e916fe11cea24d1e11c4258259970d4efaaee164f2208c0e0284f9f9e7bff7117d60d4dcb61691d409520dbe35d93cd7c889cd66944adb12baacbe1668aa46f2a3af4e9e3dc48fe1715c3e1bcc195e0b41fef70dfc5f2d98462035e0435ceff67932a7ed4a7bc614bc41d1a3e61d776170603f65c5de8702383324e22dd0bf2921fdb81aa65b34fa7e18719bb287881818c25a886f392d5f1b21fd5d63899a3fc251909b8b83cc72332ff6882d36c9c8753d3930d5d946dd3cd03c346cc036ea0d8f6e3509ba0e87d71d2d9d9124ad1f58875f6c1edcff597a8de022b561eed7133175ccc75dae34ce3aa26d3fd4858b52fb4fec2133d796347711cb11066fcd61b952785e37fbc76cbf92684c2f131ee9bffbc8b040acb76df6e7a71f1c3ffe975600b8fd1b06b149ac7a5bbe0152f192a2bf566746eac1d2ae210e3ab8cf37515a7c49f8a0086fcb65f24fc395384da48be8fbb0662551c64a2e2bc7182dce62b7ac9a1f815d38b714d2f86a4caddb8e533cb725dd9dc2ff1d117b0e85a8de4fdab4821de91d7dfbaebd08336a04d18997bdef7922f7927b1eb7e07010224d37afae678715923dbb5790d712cd1af3ee9b09f434b7db7769110b514d20dbb222e35d056cf6ff9b417b601f4b4f8d4c5a9bb7493ad05aa8301fa3bc0b26bb00c2994f0854269fc6e249106c50873d0844c3d75fb06b9f28435927d8a2388ec6a10ffdffa5b6e598235d0df97dacd0232ff1cc5ace43f435caeadadd9c5de580c664d18bb786c97d09c0f422f9a62f7c39981e2e30d754d710da56ae0f908829d90d591297df5a13be614d89cf19b5b99b3fdeddcd1b210d1134e2e824d8ca216492adb79e0d743725ebcc77c2c467287d541caeca9b8f5fbdb10ecaa8615e2b3c532ff2cdc7b19724fccb47544b5d61681d3158dcf90bd82aa9b525a28a6ca870d835fbb4090468eea92a73f9de1b644c3ebd9ab6a4ade85de147e42402b39426867854600acc87b94ab4e16ec4924c22524922e3e3f927de766d8df00a78bf4a02b65d947fdad8b0b1ab6633933ec3d32d11ae318175aaf8efa673e5fac70f59e55f62e38cddd24839d1550f6c00f403ea30d3d8ec9422786f816ac9b486eda28e36d614cccbcb42f8787bf2496d3e0815d0f058b6d043faf9e3b984d87d42bdaf54e58bef1c1311b3379682852beb2528e98a466f658e9ad03c5e803ed71772edb82d05b8d28dbca39d3f1737f7b3d1505b5df84ab4d23e1d92eb93f2b2fe7e7e1d09b9c15cd90c381cbccc0b62e0ddfbb98739b8899445460af5f01382aecbd4673a08d558c73e1cf988baeac8013459c3e651d96acaa31cd4f19c27ac8e1be8d8cd1c03dd64fd30e9b220d1de31e7634dae220dddbb94cab5c36717a2d226e6e4570c0161e4d68b7e90f7f4dc0246f7e23f808c0245e768922b7665d07673719498b3d3bf310299c6c93100eeb59a63d9941abef446e3438b2e75db2e23e750ffadcad887e59dd87edcba46f0e17969c771b66f650beae6a48392ad5a3fc7472e3516e87dc29d1b564430c1e0c206950f15412b175f6c398be9df015bdcfb13289f413bf788eb98c9a9fb605207194f48766109eead789771398cfcb8be28b2dc12d4c1b7ce9322308c81c37efc969cac4de10ea86da362e61c5d54354bfe271e415693dc480582dfca0fb5dd1dee9aa2244529e269fc21052e61850c2c93d20161e3c61080b67f8497b5f34019d228879368ab639b260bfb92238efd1a9517660b65e3a4f2a850120a0ec4890aef683fb15007d99c9e9ba1212b54ad5cda7cf3a63884f4f0ef11dc9c0981ca1cb5310c4b3d51bc0d225a7deacbf495154c12b8499ed746ad819834f9f3182750762083e391b400565c0b667ee723064ae43fc76bf1813815cd864ce816d1712d6ce8e56fb69c9366a2338f4c4f07d14aa765f7e2922efd6f894d9e9b55d0055fc73be6f18bd55e6ff87d03935e824e048540255d433cd53195f1137382fa3ac0d3f9a334c9a505b2c886dbc5550f063c9bfb72283cfd21ba20eaf968a1894f5a64e7b164a0bc22672831e16008e6cd400b96c7b7dd27b7af1d99501c565938ed7cff2ff9bca8a84eae495b189a78f1ce97ff323164b5746fc332c8c7ad867fcb064eaeafc3ff77ea48a356122d817344ef46923896b8df07a998146c1be365d1b6ae63457f935fa80db40368b3a60fe5f58dfe285f1ac6b93e0c0caebcaa367c8889c0ea577c92eb78475b9c0195ea4e376a878fe503a8d6e1da9c6e63c3254d42d66f47e7f3c72f8e5fb1b34de747f4aef171993365cd95f0690cc04d3dbd7bae80fa12a19665d0a3146c14668403ecb0b6d9b1da03bafc487749bdda5f63c76e5cc1dbcca848b0184a74a610dd3a0207f22eca1d477792ce2edb1c8735c11cc1ab10c343445c9de3bcd4d86a0d564a7d8d76f290a8450e0ff1dbecc05aede69f441d38c1cbc530469ed2ed091f075190590204bb64773b70dec5ecdc1965885b343d23400d2327d2b95f262bd2d26df22490053390477d7d287d65c7faaf51df816ae7627912cb28beb685e1181ff9b3b810571b90240617825bc96c03cfe21e8d2156c3b2a5ecb539ae302da9c4db93ee8536cdfc7f4b3b9a516a508aa0d9b6671bd797be904772930bc7c311100fca367ca7dcdcf4a6315afbbb4517f40d25ab4cbefaff72ffe07e53d8b4d242f98e56da98f9e843e778e80e6f2c9dd47a0d349a7b65da5a16f7aee630e0d0aa580725b8b35d04ce064665229b8781fa96eaed51e566b0ae19d64d6b1a1458807882c99da2e230a3e5db82582ab86f5d1d76648ef2c7ff084d8b13853a7f1e5f7326b491506596fd6b315a0255d743efdb5b438ddbb9c1273fc24c942aebe2460183dd6c7a2071c74412dc11f0af7b2d3755a38940c165f76fbf6e88864c954aaaf89749481f2a28306478cb1cef2a059cf8e3b1ccffb3dec24f72aaf6325dc267d150ce960c4822791f8e014bc69d74db2a329e492645e6c7ee91ac7efbc3cf8020589fa28066c649df96ff17ab28f2d6ae2d8bfc4b2c75026a44c3af61550df98b23c39bc9b1a8b0fbfd1d1082fb5edb735f4122158cd3cc2ed4740ff516ec0be484c48f7f1eb13be1941d59f4062ded3e666da0b724244c65f8287082df8699986c86954b3446ae82d31db847d1c42f098cdc3f494811570a4796beaebc4c1dd45016590682fb50b4d4d16f99e2d5bddff8905e08be4705a5a60023231145e7dd8a0dab132153f55e9d692b60bd0f17ac94a0bfbe8d0fbb00e7a48bfe05b59ac4cc9619e9067407518b4b48d13a7be9ef05c00b03e45a6ecf3765d43be68b95e60ae87d3176ef4fa1055f870fa7e62dac1e840e932f6005226ea43d1e990b66ffba37c1d96dc353e06bf764799b259f119b40022ba331eef8861ce03fbb22a69ebe84978c6f329c94c60e2fb331371c76ac7a975e7fae6dfa9a2d3aca47c6e2ca08860f2e84c80f56803ed48a95e09272f06c6c4e1f5633ceed5bd06b1415e813ab1e3a8dabca55a751b36d9876dcac44d51b8184ce24371ce6bbc29a9acb5285e425d6278d3f8a3f08a6b35c733659527ecb7c335099e30f9b05b230343adce398abed52c6b48d7ad84187b52db820d53f6f745bc14b3a42c9b77d83e12581d13a4782e05262db3d59026cfb5b233bff43cf5e18f143ff2ad6c5ba5730bda29e80563591f14f8bb8d18d4d181bc1d6e963d6923e58a6b19c45204b7955b97a0b0888a4706a7382d1446f43b84bc0510a78faf937d0dd72c268e243f9b4461e365ad35f2c53d39667c3a2fc1a35481b8a408b744b6b31720f3fbc408d8599086d354286df80f8cdebfbe5e3d83f12f1255851bc55054cb6a0f2ff2aa84a1610fb12a2ecc3045935cace0507095deab4159fa7596702ae349a6b0124b2967057c01870e5333d7f103429f73ecde9764eb1c7163b52fb496e5eb3189bca388f1ade16fe3a8af49c8b871ce509c86e2169434139530187132a859358c4573bc7408d5bc4baa8926fde0d5081ff4f58003f1ebd7980db01b96d12c417b1194778f78c159cc5e1044208c3fc365f9d3cfe8d9b3eee6ef3e906f531c8f4b05e6df3af60f70ef9c3925e054ef5608108786d660eabb837318015847a85c06d597dd6852d9092e40fabe82f0e0db1c37e65ae35240665e73386b2a2ddcda7dee295db3e2672cdbcfb3abad2876ec6bbe873b33516e143e5b64f861b3c8038f47cd39602ab5d2a3b2a18593d22986778c5dde927bc3b14de9004e351bbd7ae34c22c0479729a3733c8999f32faa89ab455f9a2f7044aafcf54d1ab69ba6164b17694dc304737d634c02b0aafee9d879331badaf21b4a733c49e1286b78e2fd401dde563514518bc6fedbecca7c4900e14b23e80c25a8ed5978ccd98cb4b9231c9a1aba86133483a10e1a8be875c97774245f90cb764781d0267af74193c9be7693d809d216371c4125b87671dd8340a9de068ed8dec06b5abb0ecc90df0672e4722e0a3e90463ea899945b42ed7ce2cbb87ca9d5c8ecfeabd5539b0305c3c818f42c184cb57a4c07d883127b746b0abfeab47cb4a20d150c15a1ec4717b7ba300191edbe4daf95c44039c2676f9bd3e1304d24a08ba656521bf79b2b9614ec613d0bec1f829f8a412273ab5b155ed3b86a1a479ec9fe1e729f0a1bae72a6e91849ff02102c46c17f504daf876590453cf09985f198a8e42b3a1ce1ab92edc83fed57dbc604be274640a316e3397df9f6ae08927bd4cbbae2c9ad1087358d6dc387bb8bb814968e1086f7ed1db6bbf7f0f600696c5d297fe69c5778eaab8e5541acb36a7ed274821cc4c3068e6e78c376e4b5415d235f8a2dc848d2fc052647a7d595570c34938b03fd2aecd9f150f5c24c726d28ec19c719ba43017e06f53dfc03217425eb65b2efb0275c5eff4c236545f2b9a37b93d93fe0df884434791b691dee53ddaba0f6d89e63a73b4c8848b2b87ef7ec6a05e6c74455be4ced3ff92d5f16d242411e9a660df426992957d85ac6db410025f876cdc7d5167918bd3db65e45486e0197ab09ad59dca30d3962d18bfd342901702c87bee668dc179e94c200969c315ec2d40e43934a04440a568e0dd68f87f1298cc74b23f4d2bad7b2bc12a28215160bff838c58d01b2fc041b3bd3aa28ff2b465e2f22261a77f1b7d6e85d240a094235e3001a6f767782321970c87a575b955b0dc0ded3e8f615bc8e1553afa55aeaf168909a5135f35161782cbcda17ca511fd03c0d6b7a193246d9fdcf708705d7fbad524363b87378e69524b93ecea6d7d35e96aa778f028adb2c74d5fc4dfda97d50ee8674155c78512f96facb722ae070bb1e76b048631bf7cbad0b2bd9822a8be706baf989bc9cffbb1aa08fcab3f4fca6fb999072c6cf160dc86ef17f68a61f05f50da509ae4237d186acaf9ea6b16a3c0ab9990f45ab769747369bb71c8a7446cb1814dc867fb8fd51f253727e7a524e005eebed029306b8399f9e612178b6aaf3af68f1a319e902cd66a315c13248e9e8d980752b218d88bb2bf4aded6c433b63091b9c747b4486df81bc3e959885e884ce3529a4530630efed85dba33e09bf17f14d0680d5b5276f9f7b6df216991e0261a3c48eca2d99f4e4775b613333273fbbde46e5d8b156390465355a9cd56572c9d20d7059cc01605b602cf5eff9a0aac6125d768fc24a77c8ebcf82f64b5ad57cb63567c1f2cf88ec6b8ebc6291b08dcc444f5d73781b93d4deba9b1f9b268c37d2d9f90f7bbfee31e2ed800e22f7a8715f7f6689056b6cf4082839a6391e12ed92e9503ff8c9b06ce98a59b61ff422452c4ed8ca36a11e37b462577af6e88b27fce2b086128eefbe1777846720b22d42c87e837f18b325edafa0c0a9e592284517fa7d76f44fe622ed842f3be3e3be85a3b048c24ea5488e6d84c5ef34bf2aca96dd165dc8648f4944d22ac2d96921b96f7a694abce60d57e505ed3b0a7e72573f79b4fb01775197c0ccceb10ed1e4906255c092e6696c9f0d7687a791624a65d555379caf9ab35e0f6f788f80d580e23f4990a2733dcadbb2bcc150fcb97f7dae0973331dd79e276e46ba745edcf527b2a986c93a1f8b630436e0db33cebef8465d82a44c76eb035be39197cded69f0ef4652e0a4a0792dff89c5546cb8a21f00610a42b57a41694106d1b7f728a48703ef62a26e8fc47bdf146bca713d6ad28d906acf95e4ad4910378ce262fda385b1b87eaf412c2e7e88ca6b800d1c4bbdb58e4d998de121166d1847dfaedba0ce4fc53cb4487bfb95c193359977ee9c5895e95cbf5a95dce4458a0e393600d83ea71d5dcf5b1957e3bbc34d7c10dac70da6710d6f02f685acb9077da3e6fd2dda49e2929efdceddf5ad81ff169af6ab64058e764e1ba194614dfae2cbe3f56c660249d17b238e1b709ca407fd7804a4b50be49c96d3622a4fb656facb1013abcc842fde285a8d771994605c5392603e98ec4074b4622e0302be6569130373899d3f2c3633fb867a5038b68066fd40b73bfe5f9f1ee205fbda59f578bef5177eb47d76f1cd8d2d422c39c3fc1d12cda55abd6ab05472f77b2f0a9c77fc7bff0aae22eb03e2eb28b98b04ac572708ef34755eabc8fa6f305d106c09d98e78b68dab3d1c185305fad5293fa7bf80fec0c932b89f05357ef8e8e5201a49558d9a33c9a66db3936078cc91469d040522c227d52157a3705d4ad86f5a402a6e2f3e1c908b2af1262328e4354d79b063350f4345d4c65987ede3f0ca79dcbde2fa587c4f154d51c4f4642f02e512ea178b0dbf034418a79ae0b2d86043c766e1679abd1430752e597de1ba1054a3910449826beb45382ae09fac2437e563116a2576f0a1edadd35a1dcfcd1179460dfb754ed95ef376c8e5cdafe489bfb145003c7d22f6858f02135bace1ae961b46747874952dbdf1aa0fa52b54b172f3385afa07f457044433ea73fd5a7f65ea78aaca39f7510ca4905058d62c146f9543241572df24bbb08b6d9be95d5d9a315e46461ad68d0d485fcdcd4664172f115eb6a9a248cc221a4273c54274c7f98be5bb92f76dc15a103d49780ec2ddc9d2806703c547d88e9f07e59c8bc8613ac6c1388a7bfcd11ed8c37f08443f514e94595e3ed5dd920a107aa102e979b25eaf7535d197b11238710dab5ad048758cf44c2018634c6620a2e802b438959323904477bb2fa764863de5304f038e7318d2467802775cb4cdd8d628af7da1d2b8e47aac61d0dbf62f64fbeffbb2301b0b5c12f0f0e2b5dba8c4f2eb73e81f802dc7aebe05e1332edb2225d67586fc970490e756882440195c9c19049c1c44e911ce47cbbb389fe09878f89619770019e5cffd7c1d54d6377d42d88bd6d22765caeffb4165ccaede845bcf6e7297c4b75212f0535dc5cf5404fe15ecfa10739dda2b2e71834efd0537d26eb46b40717e63708760ba9da690ad5df22872319ac68920fa8956383ba684569a7615fa9c356b135539ef182639ee372bc97add6e7ef90d15571f080895320f46f99aeace9acda80403cf0460577fec056d2426618e1391fa6ee33f386dbdc412454d8ca7f0d44efe73b5d8bf328e776308593338dcecc8367c8745bd307a275fc30ca0471bae75c77405de1ff0448129ef532ab5162ef5739dfeb0e5faf44f5fd29e4b49634793a91658c3f563a3097ba3b82f96503a969531d8f40f8651877db9b1c153294c23396c42acd98d8d6bd21665e7887960f2cb73cbf7b3c9ad4627a53aba5be71610f038bf87c3336d876e2b1b53455ad3988769c7f2f38d45af0dbb174fc1e5901386287877a602496bbde2b2c6c0d769dc1b529ab2eeb2353dae4bff9f46095ccd4510fb365cf6570fc3356073573767ca599b54c5a533824d04f90fdef49d8f58c3bff968d42aaf74830b3b0eb2c825b26397fb3dc6bb68bd367d7ce7042a6193f8fd332a18c70cc4a9aed116eee1b7958789eeb1aade0a52f76c4c988586704627755165d7c741f5c961ad8652a6ca24ab980bb6f05862512c83c09ba0420b7a168b004a16069cdc52130b34df6df38b0a6445ff277ba1883acba646a3af23810f97a935a8dd5e28af2c3652930c0ec6d09b3c1da209f1885acec8950294d572e3bc5580d25b8e9f329b8e5a3b88aec5cef519f2b69e56935de4b217eb4aebbaef108d080c50295fb4aad75b39d2b4d7de416117583f7a4201d75ab3e0a6a7675839a771e96cf50dc9841d260411f9570faaddaa14e052267e36cc242aaa4a571db760231aaa329839ff09827ccfc9bec9460df76d0bfc1e29ef4cad8d1639ad131e34a1cd73195be6a9af16ad8e4b5c1d4e366ed19c1da73bbfa96e4b59f50ccf76a114eb9815361c7149ba167e93869d467d59fa09d788ef634c7c201f4ecf277a9d6c0e704467bf50aa222ab3d305e8f9cb39b7d4caae229f9fb325b3bbf2ffc03c0432b6f3059193fede22907759fd96dc66662304beecbbcc7e6e4182d53bd5795c0de78a1b78adf97dac30894910e16c3b7bc7abed72d1e6d8bd821c57db27b80e565aa8d1361513486726e180ebc7049c8f5ed7a619656b2b8585f6ee4420ed3aa5e5aa4d5867bee32c409872db23305a3b96b21cb2033f780d1a21e98fce32a0de8167c052998a127ffd43d1c0e5a953b05f593f53504fca680de350e741beb4f9b776ba01dcb50d85f7f25500add0235402b1c7a6e548f520095c906d1984926528ace1dd9c3201a5b2234ea7233c47486ee519302b503e58a6d6574597ae5183aa7e5a932a72ff4445d1b26622b86327762d7be53b37ae4d8c47cc031c24e400c498745df3b58d94dc49427bed71e6e23d09eb71dd2c836593d69fce4ffcb42da819cd1f99411e2438662d6e468b69b47038b79f394999bfb7aaa0d5112c824117a4fd017e05c645b10e27bc2027e08af8e2e29cdc5cb6f88ba8f01894fdad79ee8686d34fb7fe37934cc689813d9044966e051b20fdc17701b37b2e31a403b6ca36e5b7415e7a01bcdff0dfa9c1e83f3414c5a504b0755d6ab832e24eeeb6a3dabf0de92bac889d1de5c191485917f373fa78915c8f95b32c5e4a8ea71fb990490f7a4bc40c4c061a616b3a4ac39973b84f2a17aac05dacf00a4105084656f17a061e1939aecc0e22649f9e538e1c5c80c9a84adfd8ff157ef2e5d09bc485d740d213249452e53c98e8641a398bf5811e6bd433076201e789e918b91c025d7ef874255cbb984202f91973e64ba9f6be053008316c15613e72078da80bb39adaf9d7f707495b744d93bc939aa04be3560bc6c69da0312a7a01a30de7f82559977efd74769bbb7f476fe4a587f5fa63d17eac7242a0cd2540ba69889b03dd4b77ceb2e7b3159ea9f1014bc45d9a6c1fca62b8a9b69e191cfd1e14bb1897b71742e8064bdbb84d189c3feba3fae6eb7e147b81d8725556310e930b29e17f83fefd9ec152df503fbbd64c9e396ebe015a504266c27e8b3c19672803f1396deba11adb79a1c4a1bc3f5befc1cb27af5cf7b64bba596f680417d9f1724be15d0787d4d33bca84ffec5df708d3f293a0be1987880778f96c8973ef9829557d9fccf11e2eff4970660808b30b", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11:41:16 executing program 3:
r0 = socket(0x11, 0x3, 0x0)
write$FUSE_CREATE_OPEN(r0, 0x0, 0x0)

11:41:16 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x891b, &(0x7f0000000080)={'netdevsim0\x00', @ifru_map})

11:41:16 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:16 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00')
syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11:41:16 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00')
read$FUSE(r0, 0x0, 0x0)

11:41:16 executing program 1:
r0 = socket(0x26, 0x5, 0x0)
bind$packet(r0, 0x0, 0x0)

11:41:16 executing program 5:
socket$key(0xf, 0x3, 0x2)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="0213fe001300000028bd7000fbdbdf25050005006c8000000a004e20000004bafe880000000000000000000000000001020000000000000002000b00bbac00000800000000000000020013000200000027bd700004350000080012"], 0x98}}, 0x0)

11:41:16 executing program 1:
clock_adjtime(0x0, &(0x7f00000003c0)={0x9})

11:41:16 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00')
read$FUSE(r0, 0x0, 0x0)

11:41:16 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [], r1}, 0x40)

[ 1309.665170] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:16 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:16 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00')
read$FUSE(r0, 0x0, 0xffffffc7)

11:41:16 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6}, 0x10)

11:41:16 executing program 5:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0xe7, 0x0)
r1 = msgget(0x0, 0x72e)
msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000080)=""/4096)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/40}, 0x30, 0x3, 0x3000)

11:41:16 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00')
read$FUSE(r0, 0x0, 0x0)

11:41:16 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:17 executing program 1:
select(0x40, &(0x7f0000000140)={0x1}, &(0x7f0000000180)={0x3}, 0x0, &(0x7f0000000200)={0x0, 0x2710})

11:41:17 executing program 5:
r0 = socket(0xa, 0x3, 0x7f)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x12000)

11:41:17 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000240), 0x4)

[ 1310.517488] device batadv_slave_1 entered promiscuous mode
[ 1310.531535] device batadv_slave_1 left promiscuous mode
[ 1310.557348] device batadv_slave_1 entered promiscuous mode
11:41:17 executing program 1:
socket$key(0xf, 0x3, 0x2)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="0213fe0013"], 0x98}}, 0x0)

[ 1310.596430] device batadv_slave_1 left promiscuous mode
11:41:17 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
getpeername$packet(r0, 0x0, &(0x7f0000001880))

11:41:17 executing program 5:
mount$fuseblk(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x100a000, 0x0)

[ 1310.627176] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:17 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x3b, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:17 executing program 3:
r0 = socket(0x2, 0x3, 0x7f)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10040)

11:41:17 executing program 2:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/40}, 0x30, 0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff})
msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x8, 0x0)

11:41:17 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x12, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2}]}, 0x47}}, 0x0)

11:41:17 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$packet(r0, &(0x7f0000006dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)

11:41:17 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:18 executing program 1:
r0 = socket(0x10, 0x3, 0x0)
connect$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)

11:41:18 executing program 5:
r0 = socket(0xa, 0x3, 0x7f)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)

11:41:18 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x0)

11:41:18 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000000)={0x11, 0x8, r2, 0x1, 0x0, 0x6, @local}, 0x14)

11:41:18 executing program 3:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000700)='/dev/ppp\x00', 0x2c0000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002180)='fdinfo/3\x00')
read$FUSE(r0, 0x0, 0x0)

11:41:18 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00')
mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000009, 0x10, r0, 0x0)

[ 1311.641701] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:19 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00')
read$FUSE(r0, 0x0, 0x0)

11:41:19 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000002400)='net/ip_mr_vif\x00')
read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020)
read$FUSE(r0, 0x0, 0x0)

11:41:19 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00')
syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11:41:19 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f00000013c0), &(0x7f0000001400)=0x4)

11:41:19 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000000003, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:19 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x1ff, 0x0, 0x1}, 0x40)

11:41:19 executing program 3:
mount$fuseblk(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x100000, 0x0)

11:41:19 executing program 2:
r0 = socket(0x26, 0x5, 0x0)
recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)

11:41:19 executing program 5:
r0 = socket(0x26, 0x5, 0x0)
write$FUSE_CREATE_OPEN(r0, 0x0, 0x0)

11:41:19 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00')
read$FUSE(r0, 0x0, 0xffffffc7)

[ 1312.696390] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:19 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000100)

11:41:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:19 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000040)={'veth1_to_bridge\x00', @ifru_map})

11:41:19 executing program 3:
syslog(0x4, &(0x7f0000000100)=""/218, 0xda)

11:41:19 executing program 5:
r0 = socket(0xa, 0x3, 0x7f)
getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0)

11:41:19 executing program 1:
ustat(0x6, &(0x7f0000000180))

11:41:19 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:19 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00')
read$FUSE(r0, 0x0, 0x0)

11:41:19 executing program 2:
mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd='])

11:41:19 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x8, &(0x7f0000000040)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_submit(r1, 0x2, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}])

11:41:19 executing program 1:
r0 = socket(0xa, 0x3, 0x7f)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})

11:41:19 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2040)

11:41:20 executing program 3:
syz_open_procfs(0x0, &(0x7f00000040c0)='net/ip6_flowlabel\x00')
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

[ 1313.614227] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:20 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:20 executing program 1:
r0 = socket(0xa, 0x80002, 0x0)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, 0x0)

11:41:20 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000080)={'veth0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}})

11:41:20 executing program 3:
mount$fuseblk(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000580)=ANY=[])

11:41:20 executing program 5:
syslog(0x2, &(0x7f0000000440)=""/4096, 0x1000)

11:41:20 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x89a1, &(0x7f0000000040)={'team0\x00', @ifru_map})

11:41:20 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
recvmsg(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x42)

11:41:20 executing program 1:
socket$packet(0x11, 0x3, 0x300)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r0, 0x0, 0x0)

11:41:20 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:20 executing program 3:
r0 = socket(0xa, 0x3, 0x7f)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @mcast2}})

11:41:20 executing program 2:
r0 = socket(0xa, 0x3, 0x7f)
connect$packet(r0, 0x0, 0x0)

11:41:20 executing program 3:
r0 = socket(0xa, 0x3, 0x7f)
connect$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)

[ 1314.477290] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:21 executing program 2:
mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000020000000000'])

11:41:21 executing program 1:
perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:41:21 executing program 3:
r0 = socket(0x1, 0x5, 0x0)
accept$packet(r0, 0x0, 0x0)

11:41:21 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000580)={0x14}, 0x40)

11:41:21 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:21 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/icmp\x00')
read$FUSE(r0, 0x0, 0x0)

11:41:21 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00')
read$FUSE(r0, 0x0, 0xffffffc7)

11:41:21 executing program 5:
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x30, 0xffffffffffffffff, 0x0)

11:41:21 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2022)

11:41:21 executing program 1:
r0 = socket(0x1, 0x5, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0)

11:41:21 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00')
read$FUSE(r0, 0x0, 0x0)

11:41:21 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:21 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00')
write$FUSE_ENTRY(r0, 0x0, 0x0)

11:41:21 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00')
read$FUSE(r0, 0x0, 0x0)

11:41:21 executing program 2:
syslog(0x3, &(0x7f0000000000)=""/209, 0xd1)

11:41:21 executing program 3:
r0 = socket(0xa, 0x3, 0x7f)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)

[ 1315.407047] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:21 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:21 executing program 1:
socket$key(0xf, 0x3, 0x2)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="0213fe001300000028bd7000fbdbdf25050005006c8000000a"], 0x98}}, 0x0)

11:41:21 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0)

11:41:21 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0)

11:41:21 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00')
read$FUSE(r0, 0x0, 0xffffffc7)

11:41:22 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000002080)='mountstats\x00')
read$FUSE(r0, 0x0, 0x0)

11:41:22 executing program 2:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000000080)={0x0, ""/40}, 0x30, 0x0, 0x3000)
msgsnd(r0, &(0x7f0000000100)={0x2}, 0x8, 0x0)

11:41:22 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000000003, 0x0, 0x0, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:22 executing program 5:
perf_event_open(&(0x7f0000000100)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:41:22 executing program 1:
r0 = socket$inet(0x2, 0x3, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x40f, &(0x7f0000001040), 0xc)

11:41:22 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="641336738ef5f54abb6dacbb6bc4195172fc8e5c31269eef39989f51b650b30065b40d3e474d7804f4a8f70e249928ac48e04ab701ebcdbb8be75eddbe2d4d8b3d5297fd8bbf8303017c40d08954e9381e30e7456491bab16770de7e6526f67219f10709ba26aacbeb3abdd85d2891d2325827464ec0142ae01c1f6d86c759bbd308fbbe1a95951971fac9", 0x8b}, {&(0x7f0000000140)="da98bd17ed28", 0x6}], 0x2, &(0x7f0000000280)=[@rights], 0x10}, 0x0)

11:41:22 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040), 0x0)

[ 1316.315584] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:23 executing program 2:
r0 = socket$inet6(0x18, 0x3, 0x0)
setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0)

11:41:23 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000240)=""/67)

11:41:23 executing program 5:
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0xffffffffffffffff}})
clock_getres(0x2, &(0x7f0000000040))

11:41:23 executing program 1:
r0 = getpid()
waitid(0x1, r0, 0x0, 0x8, 0x0)

11:41:23 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000009800)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000002240)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x1, 0x0)

11:41:23 executing program 1:
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000140)={0x5}, 0x0, 0x0, &(0x7f0000000240)={0x0})

11:41:23 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000000003, 0x0, 0x0, 0x6, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:23 executing program 3:
getresuid(&(0x7f0000002040), &(0x7f0000002080), &(0x7f00000020c0))

11:41:23 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_ident={0x2, 0xb7b522c05bc2f53e}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_x_nat_t_port={0x1, 0xb}]}, 0x40}}, 0x0)

11:41:23 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x408, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @mcast2, [], [], 'hsr0\x00', 'ip6gre0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "8c22"}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x140, 0x170, 0x0, {}, [@common=@unspec=@physdev={{0x68, 'physdev\x00'}, {'syzkaller1\x00', {}, 'batadv0\x00'}}, @common=@inet=@esp={{0x30, 'esp\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ipv6={@loopback, @mcast2, [], [], 'batadv0\x00', 'veth0_vlan\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468)

11:41:23 executing program 5:
syz_genetlink_get_family_id$ethtool(0xfffffffffffffffe, 0xffffffffffffffff)

[ 1317.124462] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[ 1317.206656] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:24 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:24 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000080)="7e1d4ddaa3ec99a8d9239136b54246960d0a9b0b", 0x14)

11:41:24 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [], @multicast1}, @remote, @loopback, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8003})

11:41:24 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0)

11:41:24 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000001340)={0x1060, 0x1, 0x5, 0x201, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "1f4a5df33dbbb52cda821ad3ee2141bbec0552910641100596647664b3907318", "c753be75ac2212f7b3d64940a3c54d027d377e8687a3e2d0f39c9b023bc3ad95"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "fc7c027fb8fcbea46a50b88d8b1cc7799e7f657cba83a835d4d447ef1e091cb3", "1fd67ffed54fb5cda57d8d83915da1dd3ab110d0a21c5c1f86af428e082910d8"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "0027a41d6772a011024c2e48dcaf38fda466b37049b9812b3dd24e6497dc22ec", "10bac96479b34af7681bd578b06dc698f4c3220e3ce4a8911ab87a2e96ad8686"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "a49853e580631825ba04bd806c1354d81091f903e621961174a62294b257e850", "9fa362bfca4480a38e66944cd37a34d5a958dc11778a4c9db28aa13fad37ac68"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "2d78b6b2e9623e56d40a007c6152fc4f27ea5a9b86309ecf881b7f3d8f8d1354", "ff88c032576deda1842e3f94ccc0f94b0d89989b740aef994790e186c9d223eb"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "a9670e066d7ab714ca0a6a7af50af4181d13ea2c15ea62bc067257b4e4d27859", "364331f6077a7f4034692bfd51efc81b7ce9b9cd94581b2209a080cd014453fe"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "73eabc04ef7e119ca8b3e4419e1fd727e840f5b42f2d994a80aca11adeed2b79", "6bfd172698fb55d69219705e089e3ca1c017ef6ee779d96e763ac0e3ed488267"}}}]}, 0x1060}}, 0x0)

11:41:24 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x3)
r1 = dup2(r0, r0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0)

11:41:24 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {}, [""]}, 0x14}}, 0x0)

11:41:24 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:24 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)

11:41:24 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {0x0, @multicast}, 0x18, {0x2, 0x0, @loopback}, 'team_slave_0\x00'})

11:41:24 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002100)='/dev/full\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0)

11:41:24 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000000)={'veth1\x00', @ifru_flags})

[ 1318.094525] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:25 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:25 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'vlan1\x00', @ifru_flags})

11:41:25 executing program 5:
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0})

11:41:25 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x49}, 0x10)

11:41:25 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x3)
sendmmsg$inet6(r0, &(0x7f00000045c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0)

11:41:25 executing program 3:
pselect6(0x40, &(0x7f0000000100)={0x8}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000240)={&(0x7f0000000200)={[0x7f]}, 0x8})

11:41:25 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x8919, &(0x7f0000000000)={'netdevsim0\x00', @ifru_flags})

11:41:25 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:25 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000064c0)='pids.current\x00', 0x0, 0x0)

11:41:25 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x8910, 0x0)

11:41:25 executing program 1:
pselect6(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0x989680}, 0x0)

11:41:25 executing program 2:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000042c0)='/dev/fuse\x00', 0x2, 0x0)
write$FUSE_ATTR(r0, 0x0, 0x0)

[ 1319.030382] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:26 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:26 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @link_local}, 0x0, {0x2, 0x0, @empty}, 'macvlan1\x00'})

11:41:26 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f0000000040))

11:41:26 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000140)='\f', 0x1)

11:41:26 executing program 5:
pselect6(0x40, &(0x7f0000000100)={0x8}, 0x0, 0x0, 0x0, 0x0)

11:41:26 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x938, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:26 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000009800)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote}, 0x1c, &(0x7f0000002200)=[{&(0x7f0000001100)="523044c6256024bf1b9e2ab22762ed76acfbae279a99783d83fc2a7d363fd149cd5421a7b7ac7817a58e8c652611a3478cc95ebda1c8608fddef3c620b33f31b32ff0d71f1e1d305bb7311b5f6412ed55d14c5c30e93c18365b35ef91ee957fc98cf20ee5065b8c157677cfd127d2cc14000047ee0759a79a384179f29083a447c6d2491ef5e1924c2751367de2551d22b871656748f98c9e8607c3f0d752a96d48295c8960351b613cbc1ad385b847045da85d4f8e196266091277ba28ad21dba646c2ca40173c67ce9f07e", 0xcc}, {&(0x7f0000001200)="33bd92b0fe3518b9c39ce9af8a8065fc3d3144906868336cd0c57035fc441fd059fb7b747b96fcdd504a321566977da6a6bb39a246c4ff017f7dede9f1f769bf00d4364bd9d7274c245f13e9ce601f63a7cbb6008ad8a41a6c69a38578b9bed74e067172ecb63304a5cfcc5cfb9841382a1992a32333dea0d92fa0b624368e994a890ee90f5110a120c449d16b9f4ec7976c46a9eb35b14687ecec2adc48fa47e16f5e11d37725d171e4d6abd9dc36d58a6db052aa27343dd6c475186cb5e61dac8dca08fbf0584458e30e82d5c1450ad9429a5baef6819cf30680f76812b04af80b70b9451ba3701d244e5beea7565523a361f911e052b2ce9778717ccd21a720f75e5005d57d2405fc312b3714fb3d2d3e7726938dd14058b79141cd5bc9f52faa19220a7715931fb9315a4ec1764842b1e86699d8cfab73c2e0b17e9ae4c3b0b288657d97af9530255142013545bc15276bcb96afcc85a200d82b6605eef50bc285069e8987253bcb5947ba8084964c82f74ac5ba8593f016e49685aa33172f1f4108ca23200c9dfa6c0ecf8e705aec7bced40e6f76cfbdbeeefcf8ce8cc574931b6d4384adeec984176a611c194315369106c87ff03d77ff713cd2ea7f7d6153cc6df37288c31bc600d7239fa8014fac9b3cf9dcc35effccf5c37817ef1a68ed085d6a41b80401a6647a16516aade2c82c5f09abd465c784a14b6e6cd3189624a8dfda867acb5553af179a840866248e1cef4064eea2e77a0f990a5c65cd69b555ce9a23269a28b933d14e438560c9b23fe1b80ec8cba6eb7adf93aa46e78d1d36bc5f7b6ef50b05ea5b54086c027e151fb5097e0a76121916cf3034c8797aa8d86a00ae698f218bb062abcc012c264f53ed6fd2f658eaac01568bda51dd92c8f772e1c297d6dd222c4b2d0351dad368c187ccc9259f898ae35e05384e702f22c6a8ac36bc9a2fd1a8bd5c183134912a93a546e89e19576c098f241ff3684a86a87dbcfb83950c445b6dd51322aa97f4f7f0a1d21362f3bb7c240eb138f38b5e95aa8e097ee422499d6062c7df8687ae97f3921c8740f1eed141c210994b1d41d9ffd72f7c45499e307b28a4415e85467652070ec3518fcb6b1bcd81a2b4f3ef9618e098a84786f6fde55a50673f10031104c41bc019a0a9b19be3ff8d7d6c3a6c85fd5c7ee6f0f5476986e900698aee17489db22d3d8d8476662976b08cfadc66258a87a30f7244454de32b71f5b7f2ce6cf7d1eec246b3cc7dbd75c131d63f725d64846516111b074f180222948e7a2f904bb06d0a98bdd4aae512c7028d5cce3f1f7c5f55c5dacce5934bf564989aed5c5778bb5e9b08fc0fc24b0d3cf61630312fce0ddae4b1b4c410a8b540eb42d16e38428f73acf0dae117082b52c9d9fcc113c1deb05c5fca4bb37e0c256e5932a31a04d93ca31145962eef8d5319a21cdb783f0a51c40859325ddc54ae81ae47a17fc76cf444bbdb0265a722a3b151b469c58fd2df1790a28fba7682f2608f2b8ff5a4f6a8137bba76fc496ad02d19607c457d20c2c00423c7ed4eac704598997630d2c1466a9240b5d55902968e32cef1ce187d83903c9b11eb31dcd41a16cba68979298b8a82de50aa49f8daab0dc069901d6b177b7a851bc043d58be416212b6b2d500c028bfb9af95ee9afb1c5378f0cb9a5790f821928b351144517ad11d8bd29f2716fdba9fc1a5bc46f0c7104ed0ac107ddea4b6ba8dbc477338c4a049f032526f887e6083f9e61864709e2b4b331cf186d96d93c08e469e3ffbb8b61c98b3961683b40becf8401ef3b473401ded9d79f090d4bcea2af5f231e7ead4862c3175962bdce987d5151449f352a2b049d025d7838a028b0168852b998a841553cd8f2c69a93b5b040f3690e50f53aba99748819f1b1dc1d3edbd0f27ec40df298cdbd12b19145e6d88799cab21e9870a5ad170be59a0d685a17b887dd0484d50092690d4efb5768928de5d0c4b02fac3f31c0b081876738a0128809debc11858450370cc12c16691b4ec042c6509b1f87e913400149f58184f9c8739ec80dd54139f732fd86e9439f63de0f217dd29c5f613865b6b5298d288b517c61dbddfbbef9834e91b7c9281d9cf54d73fea76923693c37138e352041c0f514c23873ff639fdab02b6b83211aab6b715b89ca8046ea8f26430825511b796588d63491595695353a110a5a90edbc9c1a35aede7830d0f13e147292a82606922fe1079963462d760969138140b941db1c93946a55171a894e2564df682f4d18d768839854be72b02b2a37480b0ccb2fea959a9f8532a21e821a0ac3a3c32c361a78f9c0173812a15cc6c09d72107cbb69d8916e4a65d371809df18a11de157f455ff040245036d9d42c3bfd63820be2b5233e385702a512f711e4f404b7c8be06db5fc7ccf248307ed241ffcadb869056a66cbadcedbebc876f9998d4747b38f926ed235b1589ecc2e89405d4d72166fc8a21446d192a11ffc917d3896cf328d964952a129673753ec30f292f7e2a70a7daf9c77fb90919ea33449337732ff1821e6d6188a9395cfe02ed053fade0e972f9db229b1a5e7220867cb2355464ef29653a4ee29d57c979241cb13009ac4e9b1295baca335e9a0de2a61b65a99c4196a8f45ef58e7983c58ee434646a1e895f0c6961722b5e7cbe77f8d9f76b30eaad97defd629c8c05dc50b28815f507cb6b44a4fe5d1a958bd9fcee71b3fb633653121ae7aa2257990c1452a2cb054824cf3b99aad998d84fcb8608583c3f53fe617a3031d024bfb7c38957cbcc8b5092712573d06c7909541519dfaa59e2930d6d5a2b42bb6e56cc0b83c6012b625a4bfcaa559a638dd6396e4a4fcda5e65f2a44b99ba6c8be5037d22ce080eed72d35ee2a00b5b1fcaab47687b990ad29479e0e70e8ce09b8b13c16711d87329a523e13fff00ac1e9e29e12b42b7a2dcbff5c4a4dd6d7e1959ead04d74fa5d0d24ab263280ca3724cda8edd075a3cf3f1ffc010d485951e6a0e0ec57866c73511140d9c207274a4df1e9fc6ceb43550ded0a65f949dc3b80761998ec9d189c7b3074b205c76562e338eca194ee25bae1b8837ac73de08448b909ef4ed7d2e2af5d67fc9e87c6ffec5aba6bf70f4bbd1181d208c52d4ee694c49047a02ce1365086f3d93fc19b564734341d1ce4cfb8ef9c16b0b6be68a097f1b651ad6b652bbd69dfde6ffc975a78edfd769fc0dd8e041e2a0abedea7aea9967ab66aa48b34fb0c9154d83f1f2a96ed14748b720e437b79633114ef1cca7fa2c2887b887836b34b99d457b2ac4bcc77538abaf09f2fcaed34b6400234c204ad6a586a6b9ff524e32fbe76c9144f00ca79d771baad912c3fa2416f9521f3ae6c11852ec3189bb1e62a69b0a9c044f2783f9420a0c9d3b6402972b0a82fb1edd3c1da1b3d3f4e330c7429f3ab739de177a811f0a7c07dd2ca331b05aab59f485fc07ef360013645a6a2349422da83ba2259e819b08e3d8c7366d27be4672fe77487135a3a55826f0a27d2cf6b44619c7c8077b73dcc57e96f21cd472f97c52f0792092845661f096c52db0af6944a49e0af5620947694d1e0cf00f01e67398ff28ebecbc9ed9dd2865b1db4497c412c2e932316e0384f3a3ae2a907eb4c217682594d0a083ed7088490859851e5e46b14e42416663e066ff4127f870bee633139381bb72b1355456f9d0f5b99a86d9f78444efd6745ee5b27976b582135a02404379c9579b99b03ff9e94e16ae031be49b38a00b7cdeb202bd711684d9a5bd00649a6a5f913f388d", 0xa7d}], 0x2}}], 0x1, 0x0)

11:41:26 executing program 3:
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00')

11:41:26 executing program 2:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x0)

11:41:26 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_buf(r0, 0x29, 0x12, 0x0, 0x0)

11:41:26 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x8917, &(0x7f00000001c0)={'bridge_slave_0\x00', @ifru_settings={0x0, 0x0, @sync=0x0}})

11:41:26 executing program 3:
r0 = socket$inet6(0x18, 0x8003, 0x0)
setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000100), 0x10)

[ 1319.941564] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:27 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:27 executing program 5:
socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:41:27 executing program 1:
r0 = socket$unix(0x1, 0x5, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0)

11:41:27 executing program 3:
r0 = socket$inet6(0x18, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000040), 0x10)

11:41:27 executing program 2:
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f00000000c0))

11:41:27 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000000003, 0x0, 0x0, 0x6, 0x0, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:27 executing program 3:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
fcntl$setown(r0, 0x6, 0x0)

11:41:27 executing program 5:
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff)

11:41:27 executing program 1:
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

[ 1320.866959] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:27 executing program 2:
r0 = socket$inet6(0x18, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000040), 0x10)

11:41:27 executing program 1:
r0 = socket$unix(0x1, 0x5, 0x0)
shutdown(r0, 0x3)

11:41:27 executing program 3:
socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
getpeername$inet6(r0, 0x0, &(0x7f0000000040))

11:41:28 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:28 executing program 1:
mlock(&(0x7f0000ff9000/0x2000)=nil, 0x2000)
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1)
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)

11:41:28 executing program 5:
r0 = socket$inet6(0x18, 0x8003, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, 0x0, 0x0)

11:41:28 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$sock_timeval(r0, 0xffff, 0x1006, 0x0, 0x0)

11:41:28 executing program 2:
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001400)="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", 0x212}, {&(0x7f0000000080)="96e5c0f268fc0f6eb36b54da9bcfb3964a4ec69b33a223bb238bb2c52019f6fbbc86411a276518f6efb257cf8560d7", 0x2f}, {&(0x7f0000001040)="b510e626e0e6965fea1e75b0d05937b7d8ff9dad297a566011ebf9d36badecf4690da3b310ab4144e955b7f35d4313e9a697bad8ec0332a5a2abf946b0d193f5cf34238ebf865db2c44e38e57ba4c7083e56bb36631b62bc0404c00e4e5eff93b664a9bdfdaa10dae4169b9c5d8895df6003a9cb9b5e4f473ee941ade2959dd06658439d6aef54c64108acd0e2f9dd49bfcb4d850691102e849cf294d1", 0x9d}, {&(0x7f0000000180)="2d3a8a4decac403f965e501dbf194256665681f4121e6488a1bcd09ab7c0cc753d5a3b7f8517d16c48c3c5dec5872acf40e6626dbc46c214711ce0300271aaf3b42bf5f11d86c1d037d64c450a3d13208e63366b18bf9488fe496fd66f743df392b9a737dac9f6ee53442539fd2e2f9e7bcf6f6db0f65e978cb6caabda037e51707bfe0baf2fbb9e5e22a71dfa3aa22d773226e3826d4df5e71d52fb01d4d4553d7b4b9746e633c4bd68a37772a9b33cbe0469ec59bc854bcc04872fb3b4c1465dec737a1ad3ec0a7a1f15eac267b95f44bd6c7ad66cfd27941f538d03047c147c9c813c478ed4bc56a5", 0xea}, {&(0x7f0000000280)="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", 0xd96}, {&(0x7f00000000c0)="64bec70a22bb0b339c459c4b1e661c7376f8249efd845633566741ffddef382b27bf73ae9db83e6d19cb4293108db0f54323b020476cfaa9b6c2c16806c78aa2b988ec34538fd7209ba8e4a15045d08fee5bac650fd7b1273403d705b09c514fd55857b1952be2407c92cc1b7dba3088f1a8f43282f0545bcf7852ea8f9ba9a18d22083e5ca5a803a11bc698aa947dd9206a322499cf1a4a6bfa83a0cedb5038787258a090dc40aacc2587bba00d5ec989d24859973259a3942c"}, {&(0x7f0000001100)="91f15d39ee370244b156ca6315e8b3069af940e12b7a5202dcec54b4ea56178d86adce63998b549bc1f323eb65f7929c1ae36c6ea9b3b4db340e55d4981852fa7c6e73415f66b817441ab16ef1fcf2f7b6d5f2bcae1d6e5013fc1d2e102d002027432a0a816b858320cdddaf3c7ba65db34c10873e37d15f9e9305ff833a86616b9151a207cc42a5a4f7456b1369d3731cab4d83485f3ada01e8004b77676e29d506e5803388d3ee570730b5b5dc163a8ba5f6504d1d6e00ae7e6c7b64d377a1d6860c54db27f07ef60cbfb1fbaaa6337065da1a28c3d8198360f01489dcc0bb02d3c53dd8bac3225a65aa0120535b43142b"}], 0x1000000000000152}, 0x0)

11:41:28 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000000003, 0x0, 0x0, 0x6, 0x0, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:28 executing program 2:
socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0/file0\x00'}, 0x10)

11:41:28 executing program 1:
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
rename(&(0x7f0000000100)='./file0\x00', 0x0)

11:41:28 executing program 3:
setrlimit(0x0, &(0x7f0000000000))
setrlimit(0x0, &(0x7f00000000c0)={0x0, 0x3ff})

11:41:28 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)

11:41:28 executing program 2:
chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

11:41:28 executing program 3:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0)
ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000080))

[ 1322.055990] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:29 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:29 executing program 5:
open$dir(&(0x7f0000000040)='\x00', 0x0, 0x0)

11:41:29 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
fcntl$setown(r1, 0x6, 0xffffffffffffffff)

11:41:29 executing program 3:
select(0x40, &(0x7f0000000000)={0xfffffffffffffff7}, 0x0, 0x0, 0x0)

11:41:29 executing program 2:
pwritev(0xffffffffffffffff, &(0x7f0000000000), 0x1e, 0x0, 0x0)

11:41:29 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000000003, 0x0, 0x0, 0x6, 0x0, 0xefc}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:29 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x41, 0x0, 0x0)

11:41:29 executing program 5:
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)

11:41:29 executing program 1:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40})

11:41:29 executing program 2:
semctl$SETVAL(0x0, 0x0, 0x8, 0x0)

11:41:29 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0)
fcntl$lock(r0, 0x8, &(0x7f0000000100))

11:41:29 executing program 3:
semctl$SETVAL(0x0, 0x0, 0x8, &(0x7f0000000040))
clock_getres(0x3, &(0x7f0000000000))

[ 1322.942852] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:30 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:30 executing program 1:
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

11:41:30 executing program 5:
msync(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3)

11:41:30 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

11:41:30 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pwritev(r0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0)

11:41:30 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000000003, 0x0, 0x0, 0x6, 0x938}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:30 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0)
accept$inet(r0, 0x0, 0x0)

11:41:30 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername(r0, 0x0, 0x0)

11:41:30 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001280)={<r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000001500)={&(0x7f00000012c0)=@un=@file={0x0, './file0\x00'}, 0xa, 0x0}, 0x0)

11:41:30 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
fcntl$lock(r0, 0x7, 0x0)

11:41:30 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000000), 0x10)

11:41:30 executing program 1:
socketpair(0x1, 0x3, 0x99, 0x0)

[ 1323.821472] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:31 executing program 5:
semctl$SETVAL(0x0, 0x0, 0x8, &(0x7f0000000000))

11:41:31 executing program 3:
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xffffffffffffffff}})
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)

11:41:31 executing program 2:
open(&(0x7f0000000000)='.\x00', 0x200, 0x0)

11:41:31 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0)
fsync(r0)

11:41:31 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000000003, 0x0, 0x0, 0x6, 0x938}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:31 executing program 3:
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5658})

11:41:31 executing program 1:
symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00')

11:41:31 executing program 2:
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
msgsnd(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)

11:41:31 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0)

11:41:31 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40)

11:41:31 executing program 3:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002b00)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001680)=""/227, 0xe3}], 0x1}, 0x0)

[ 1324.735141] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:31 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x4, 0x8, 0x0, 0x1}, 0x40)

11:41:31 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000010740)={0x18, 0x2000000000000059, &(0x7f0000010600), &(0x7f0000010640)='GPL\x00', 0x0, 0x25, &(0x7f0000010680)=""/37, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000106c0), 0x8, 0x10, &(0x7f0000010700), 0x10}, 0x78)

11:41:31 executing program 5:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

11:41:31 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "1b"}]}}, &(0x7f0000000300)=""/167, 0x2a, 0xa7, 0x1}, 0x20)

11:41:31 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000000003, 0x0, 0x0, 0x6, 0x938}, &(0x7f0000000180)={0x200, 0x1, 0x4810, 0x0, 0x0, 0x33, 0x21d, 0x3}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:31 executing program 2:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8910, &(0x7f00000011c0))

11:41:31 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFINDEX(r0, 0xc0189436, 0x0)

11:41:31 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

11:41:32 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40)

11:41:32 executing program 1:
socketpair(0x1d, 0x0, 0xfffffbff, &(0x7f0000000040))

[ 1325.586216] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:32 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000002300)={0x0, 0x0, 0x0}, 0x0)

11:41:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:32 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x2, &(0x7f0000000000)=@raw=[@map], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:32 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

11:41:32 executing program 5:
perf_event_open(&(0x7f0000001b80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfcee2619ebc73f0f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:41:32 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x5421, &(0x7f0000005d40))

11:41:32 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000000003, 0x0, 0x0, 0x6, 0x938, 0xefc}, 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:32 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

11:41:32 executing program 2:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8923, &(0x7f00000011c0))

11:41:32 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}], 0x30}, 0x0)

11:41:32 executing program 5:
perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

11:41:32 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)={<r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000001340)="e6", 0x1}, {&(0x7f0000001440)="e6", 0x1}], 0x3}, 0x8040)

[ 1326.464943] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:33 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89a0, &(0x7f00000011c0))

11:41:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:33 executing program 1:
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)

11:41:33 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004e40)=ANY=[], 0x2360}, 0x0)

11:41:33 executing program 2:
socketpair(0x4c, 0x0, 0x0, &(0x7f0000000000))

11:41:33 executing program 3:
socketpair(0x11, 0x0, 0x0, &(0x7f00000002c0))

11:41:33 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000000003, 0x0, 0x0, 0x6, 0x938, 0xefc}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:33 executing program 3:
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x52bbf2bad02bae38)

11:41:33 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "1acc0d3b54ebab80300b28d5fc1cf21bcaeccfaeb166af57d403f38ce950bf39be0bf35edb6058da418185521cfaf0d6a2fb3d34b5ef883e508fc12105395c"}, 0x80, 0x0}, 0x0)

11:41:33 executing program 2:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8940, &(0x7f00000011c0))

11:41:33 executing program 1:
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000040)='.\x00', 0x0, 0x2006000, 0x0)

11:41:33 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000000)=@raw=[@map], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x78)

11:41:33 executing program 2:
r0 = getpid()
perf_event_open(&(0x7f0000000740)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0)

[ 1327.350527] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:34 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:34 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xf}, 0x40)

11:41:34 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1e, 0x0, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ffffff9e000000000000000000", 0x23}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)=@generic={0x0, "9fab3a73ef1728e172d4993809eaaef7767a8eb78304d706cc5ee4eb5315f5659d73515cde38449f698173d4f73e5b86b97c60e4eee01f17670bdfa4a48e5ca1965099543a1d4138c6665c99fdef21a4a357c46cf7309a3bc5d9f3bd50d3eea3787fca0e5aa5de7a7038a085e8fb853df9b40aab645800e953bb08de2826"}, 0x80, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000002ec0)=ANY=[@ANYBLOB], 0x2570}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000280)=@can, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="e16dae4a4a669d3c1e38f84ea46ee965afce915c22aa64c47b291aa8d0fb49a799a6058cc9f7cad005a0f494e6c49d961db861f8112570611b96a92ee023507b76d8db75cb0f23b6aebef12f0d0457ac7c5e584f1f556af799be31a2841bf440704a7258a02f1178676ee08809bb0cd2275fd75b02c3890ca7ec4c503fa560ff1095b3fc7cec49fb83dc08066a495cbaa4af35a54e85fdb7b66b80bba6b0a8eed1d4ec836ed0fb836d48077866347bd1b637ff0d7990481e2a7e2d63b99cee0f31d66893ef47f27fefd6ba3599ec8e42d0865eef3516ccf06a0fc1af1d6ba63074bd", 0xe2}, {&(0x7f0000000400)="cb695492b49cd4f835a1d80280b7a061fc47a5976d373bca7bb8ab5061d8786fa33f2cb4a96e8ad7384af9a1e274961e4beb85e5cc824ff862a3545558e6e245b579e5a339de10be1d7a516309ecb57f4cf5a1", 0x53}, {&(0x7f0000000680)="e2cc80ce271f2ef7866382b4ad72a97f2883fc4d9d22e6fc8d7aaba108696e419e84d476751ae8a815384d9c7058d21477530d113f943dcc0cd0c60d77bce6f4a872897b9ab3331e59b4d8ae7ab456d86d837966511f748d2c6018f5e6a17e28151743a5f815635f43adc2faf6b778d1a3ce16caae20fc18eb6a747a9861c57d18daa58b4b7b7016fb18b18fcd72", 0x8e}], 0x3, &(0x7f0000000940)=[{0xa0, 0x84, 0x80, "7a6a72ba5267420431bebfd47ac3ad0483ba5aa2cf4003087136ab49f942d72f7db660dcc633e6ae6c2c68ed8487d55b2cc3dcaec3fd49bfe388f6b01616162e8af66ae131d3423c81dcd93b95b7253e941c54090498a2396030503c94cf8583593dd82342c09b45123145d095cbe8fe59c191df5e4258aa9deb3e1b3d1240a5dd7fadd7d5005ba5ed"}, {0x10, 0x6, 0x101}, {0x108, 0x108, 0x1000, "628e204a7b6ce99a9600551878b35ac8fb8b54a7831f2f973020685538b5b7811f9f352727289bf76ef98ae3178476a1482fd103e817917b83335bc61b0b026e1eac4c74844dc9bb9a8d600995f3a8fb1b616c270c7bf3de6ab7087b08874a020b1e9802f618906780dd68cae53e663898d518ebc724ba9dd78929280c774ad97beffb7bd2c1bba8d232f2ef90b00e6a473218871794bf26dbd0a819383143e604fb27a865dfbd5501d4e235fbe2997e83580e36872b291ec791532139f0034f5339cf5b67a18eeee07c46dd403e694686d6971b5dd606365f26033cc3700c3493a3acba6eda973bb0c535f9734e92a1d64bd04b7f2515d4"}, {0x48, 0x109, 0x0, "12c985423f7fe29e1d6514907e0d31032e958c08facbb0a86da394c856de58d476ab3f5d8eb683ea09e628600148233175"}, {0xf8, 0x10b, 0x8000, "e6b3a5795d327924996ca8628b63d48395005986c3e20787a75e26170db08eefc4d4f5a3a62f27fdc46ce12a823ca0da79a21169483704f5ad3e81bfcce0e560adec5b90c03a1efd1a37ec23022fc2aa1ebd114580e2b7c1be9d67692912d4e8600cbe1262102f3dd7e859a906a375f0c521b9d9dd2a84f2db4f10da845d03f03dab76788b5ce7de9b0b16cf3e73bda9f5090f5e7013c499297589b570bb20a6639dca020c42329f4dab8b111e9dd0114167a9032ebe203160dc4b10a2d9880cb77da38ebca6f1ad01a82e88e894d381754d22d34c29b5927b13b124a1be5169a250f2"}, {0x68, 0x110, 0x80000000, "5a363c9a2d21482a9caaf4952bafc3a70dd81d248c1bb28cbd5a8087a058cbda6e19c5a8c4632bed91de280c65df84c562a3df7cc66f5e7908ddc0d6da72d5ab1a446c5814d23d5f476519a597e1045b4010a1c93a05"}], 0x360}, 0x8000)
recvmsg$kcm(r0, &(0x7f000000af40)={&(0x7f0000009740)=@can, 0x80, &(0x7f0000000600)=[{&(0x7f00000097c0)=""/253, 0xfd}, {0x0}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000009b40)=""/141, 0x7fffee77}, {0x0}, {0x0}, {0x0}], 0x7, 0x0, 0x0, 0xa000000}, 0x40000062)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10)

11:41:34 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)

11:41:34 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8903, &(0x7f00000011c0))

11:41:34 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000000003, 0x0, 0x0, 0x6, 0x938, 0xefc}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:34 executing program 1:
openat$tun(0xffffffffffffff9c, 0x0, 0x531c80, 0x0)

11:41:34 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}]}}, &(0x7f00000007c0)=""/250, 0x3e, 0xfa, 0x1}, 0x20)

11:41:34 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:34 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f00000000c0)=@framed={{}, [@map_val]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x102, &(0x7f0000000240)=""/258, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:34 executing program 2:
r0 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20040)

11:41:34 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000011c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000001180)='syz0\x00', 0x200002, 0x0)

[ 1328.255146] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:35 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:35 executing program 1:
socketpair(0x3, 0x0, 0x0, &(0x7f0000000080))

11:41:35 executing program 2:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x260}, 0x40)

11:41:35 executing program 3:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000002c00)={0x0, 0x0, 0x0}, 0x0)

11:41:35 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x5452, &(0x7f0000005d40))

11:41:35 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000000003, 0x0, 0x0, 0x6, 0x938, 0xefc}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={[0x8000]}, 0x8})

11:41:35 executing program 2:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)

11:41:35 executing program 3:
perf_event_open(&(0x7f0000001240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x824, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:41:35 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFINDEX(r0, 0xc020660b, 0x0)

11:41:35 executing program 5:
perf_event_open(&(0x7f0000001240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:41:35 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000000)=@raw=[@map], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x4], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:35 executing program 1:
socketpair(0x2, 0x2, 0x73, &(0x7f0000000080))

[ 1329.115229] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:35 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:35 executing program 3:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000027c0))

11:41:35 executing program 5:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)

11:41:35 executing program 1:
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

11:41:35 executing program 2:
perf_event_open(&(0x7f0000001b80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:41:36 executing program 4:
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x800000c004500a, 0x0)
ioctl$int_in(r0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x290, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [], [], 'virt_wifi0\x00', 'batadv0\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@mcast2, @mcast1, [], [], 'veth1_macvtap\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
pipe(0x0)
pselect6(0x0, 0x0, &(0x7f0000000100)={0x0, 0x10000000003, 0x0, 0x0, 0x6, 0x938, 0xefc}, 0x0, 0x0, 0x0)

11:41:36 executing program 5:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000009ec0)={<r0=>0xffffffffffffffff})
sendmsg$sock(r0, &(0x7f00000023c0)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002300)=[{&(0x7f0000000040)="ab4d200418f8b2c59b2ea19f53eff0472977f84080371812854f", 0x1a}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="5550e70d00459a17e0a795f38dc1728b1de90bc54858", 0x16}, {&(0x7f0000001180)="6e8f7acd847f327cbc0ca136a664120bf0ff", 0x12}, {&(0x7f00000011c0)="4386c5252c7c9419646a458ea304c48ab19b02bfda379b3034ceefde1a1ba2e5960f66625112fda1254478f9622dbb249d90cd3a72d45288a9adc2a71bccb0e5628e53c04392f0f7a986685a71709aaa9eb6764ec7087ea5c29cf5c0a277b66084a348545ccb16ab119bdc7e469431179461d00095324ee46a87270af03a253f8b146ad1379f9e6be50d8f9e6111dbd4a1af232a6dfb717a46ce51820ab239b0f27a9af226c63d96b9f9f31daf4ea784ab53d16dcd5fe8267942ad655ffc00d4fda6611cba8e43", 0xc7}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="90a5d0661ef3c4f80eb6f8ec10240f08ca6ca4deafacbef21f8c364db91b88b33a", 0x21}], 0x7, &(0x7f0000002380)=[@txtime={{0x18}}], 0xfffffc95}, 0x0)

11:41:36 executing program 3:
perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:41:36 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xd4)

11:41:36 executing program 1:
perf_event_open(&(0x7f0000000a80)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:41:36 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000000)=@raw=[@map], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:36 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000140)="91", 0x1}], 0x2}, 0x0)

[ 1330.022171] ip6_tables: ip6tables: counters copy to user failed while replacing table
11:41:36 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:36 executing program 5:
r0 = socket$kcm(0x29, 0x2, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)

11:41:36 executing program 1:
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4041, 0x0)

11:41:36 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8911, &(0x7f00000011c0))

11:41:36 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002480)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6erspan0\x00'})

11:41:37 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f00000007c0)=""/250, 0x36, 0xfa, 0x1}, 0x20)

11:41:37 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:41:37 executing program 3:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89a1, &(0x7f00000011c0))

11:41:37 executing program 2:
perf_event_open(&(0x7f0000001240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x824, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:41:37 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x12, 0x2, &(0x7f0000000000)=@raw=[@map], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:37 executing program 5:
bpf$OBJ_PIN_PROG(0x4, 0x0, 0x0)

11:41:37 executing program 4:
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
stat(&(0x7f0000000b00)='./file\x00', 0x0)

11:41:37 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0)

11:41:37 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0xffff, 0x20, 0x0, 0x0)

11:41:37 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x62020000, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00', 0x0}, {0x0, 0x0, 'kmp\x00', "5cc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8"}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)

11:41:37 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0)

11:41:37 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:37 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000007d40)='gtp\x00', r0)
sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000180)=')', 0x1}, {&(0x7f00000001c0)="98d222251841ffb581c3b5ebb7f8437f821296c8d89829aac2dab099cd46b034b1d05baf4c9a7b1955dff9f2e096687b4576d15eb19ab2a6aa2524807ac81aa1fcf517bf2699cc46f823021f68356b4defe2dd997a22e52f757af04cd89f96ec60eb0440", 0x64}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="4725dd0ac1a6622f8da22b9f2dcd44eb9378fa6fc36a807e101b91ac13d9418d368f811fc5a8c9f8cf626997e571663a452ffbe5f3e97b0fd74439b16e4b2e09549f829ff166f59021bace90c8f43bbc35ec7e3eadc8a56858459c49497dc157e1ae27c32b6b880f0e2b8db7ad6222b8eafc695ab206f6e765513cd2f20d02e7406f918e0f18504e35dbb6935fdd0fefa4b4d992311660cca0f3c0ce0c119181fac8b9b1889816c8dc62b045", 0xac}, {0x0}], 0x5}}, {{&(0x7f0000001440)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000001500), 0x0, &(0x7f0000001540)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x2, 0x0)

11:41:37 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0)

11:41:37 executing program 1:
mmap$snddsp_control(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x83000000)

11:41:37 executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0)

11:41:37 executing program 4:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000013c0)="a229a67a35fa4c522134405ea4719bf5", 0x10)

11:41:37 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000002840))

11:41:37 executing program 5:
syz_emit_ethernet(0x2e, &(0x7f0000000040)={@link_local, @broadcast, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @private, @dev, @rand_addr=0x64010100}}}}, 0x0)

11:41:37 executing program 2:
r0 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x4b49, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @remote}, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x1f})

11:41:37 executing program 5:
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x80, 0x0)

11:41:37 executing program 1:
select(0xe, 0x0, 0x0, 0x0, 0x0)

11:41:37 executing program 2:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x1d8, 0x98, 0x98, 0x98, 0x4, 0x98, 0x140, 0x140, 0x140, 0x140, 0x140, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48], 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3ff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x238)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000600)={@broadcast, @remote, @broadcast}, 0xc)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[ 1331.484144] Cannot find del_set index 0 as target
11:41:38 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xfffffee1}}, 0x0)

11:41:38 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:38 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/seq\x00', 0x84a01)

11:41:38 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2, 0x0)
write$binfmt_elf32(r0, 0x0, 0x0)

11:41:38 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x8, &(0x7f0000000080)=@req3, 0x1c)

11:41:38 executing program 4:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0)
read$char_usb(r0, &(0x7f00000004c0)=""/4096, 0x1000)

11:41:38 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/seq\x00', 0x84a01)

11:41:39 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, 0x0, 0x0)

11:41:39 executing program 2:
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
write$binfmt_aout(r1, &(0x7f0000000640)={{0xcc, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, "", [[], []]}, 0x220)
mount(&(0x7f0000000380)=@sg0='/dev/sg0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x20, 0x0)

11:41:39 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/seq\x00', 0x84a01)

11:41:39 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x7fff, 0x4)

11:41:40 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:40 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x8, &(0x7f0000000e80)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:40 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2, 0x0)
write$char_usb(r0, &(0x7f0000000880)="99", 0x1)

11:41:40 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x8940, &(0x7f00000005c0))

11:41:40 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0xc020660b)

11:41:40 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/seq\x00', 0x84a01)

11:41:40 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
sendmmsg$sock(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

11:41:40 executing program 2:
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x135100)

11:41:40 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x2, 0x0, 0xf00)

11:41:40 executing program 5:
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={[0x7]}, 0x8)

11:41:40 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0)

11:41:40 executing program 2:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
chroot(&(0x7f0000000380)='./file0/../file0\x00')
mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000500)='./file0\x00')
symlink(&(0x7f0000000140)='..', &(0x7f0000000040)='./file0\x00')
umount2(&(0x7f0000000180)='./file0\x00', 0x2)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)

11:41:41 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:41 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc1205531, &(0x7f0000000080))

11:41:41 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={[], [], @multicast1}}})

11:41:41 executing program 5:
epoll_pwait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f0000000180)={[0x7]}, 0x8)

11:41:41 executing program 3:
r0 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @local}, {0x2, 0x0, @private}, 0x156})

11:41:41 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000040)=""/52, 0x34)

11:41:41 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x2, 0x0, 0x0, 0xe0000000}, 0x40)

11:41:41 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@exit]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0xd7, &(0x7f0000000200)=""/215, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:41 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x78)

11:41:41 executing program 4:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid'}}], [], 0x6b}})

11:41:41 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @local}, {0x2, 0x0, @private}, 0x156, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x200})

11:41:42 executing program 2:
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x8800, 0x0)

11:41:42 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:42 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xc, 0x0, 0x0)

11:41:42 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x7}, 0x40)

11:41:42 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2, 0x0)
write$evdev(r0, &(0x7f00000000c0)=[{{0x0, 0x2710}}], 0x18)
write$char_usb(r0, &(0x7f0000000880)="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", 0x1f0)

11:41:42 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000b00)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}})

11:41:42 executing program 4:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))

11:41:42 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000140)=@framed={{}, [@exit, @map_val, @map]}, &(0x7f00000001c0)='GPL\x00', 0x5, 0xd7, &(0x7f0000000200)=""/215, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x2, 0x1, 0x6}, 0x10}, 0x78)

11:41:42 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f00000001c0)={0x2, 0x4e22}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x10}}], 0x28}, 0x0)

11:41:42 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40)

11:41:42 executing program 1:
timer_create(0xb1beee6cfd00ef32, 0x0, &(0x7f00000005c0))

11:41:42 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0xc0189436, 0x0)

11:41:42 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000280)={{0x2}})

11:41:43 executing program 1:
r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0xb7, 0x0)
fdatasync(r0)

11:41:43 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@mcast2})

11:41:43 executing program 3:
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000500))

11:41:43 executing program 4:
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x915523a1e870f1af)

11:41:43 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:43 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fork()
fork()
sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}, {&(0x7f0000000380)="0e", 0x1}], 0x3}, 0x0)

11:41:43 executing program 3:
mknod(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000500)='virtiofs\x00', 0x0, 0x0)

11:41:43 executing program 1:
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, 0x0, 0x0, 0x70bd25, 0x8, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x31}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x44}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x890b, &(0x7f0000000140))

11:41:43 executing program 4:
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@random="7375d7af1181", @random='\"~z;%3', @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x60}}}}}}, 0x0)

11:41:43 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:43 executing program 4:
syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r0=>0x0})
select(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x5}, 0x0, &(0x7f00000001c0)={r0})

11:41:43 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000a40)={&(0x7f0000000780)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x20004050)

11:41:43 executing program 3:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

11:41:43 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000c00)={&(0x7f0000000700)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000780)="19", 0x1}, {&(0x7f0000000840)="f8", 0x1}], 0x3, &(0x7f0000000b40)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0x27, 0x1, [{0x0, 0x3, '6'}, {0x0, 0xd, "62f8ebf6d7e18912c8240a"}, {0x0, 0x11, "d2a9a03cf53ff9aba093f51ddc1e1c"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x68}, 0x0)

11:41:43 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x2f8, 0x0, 0xffffffff, 0x1d0, 0x0, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev, @rand_addr, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @broadcast}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @empty}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0)

11:41:43 executing program 1:
r0 = add_key$fscrypt_v1(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000300)={0x0, "1d91e94f0f6e211c63104de68d2d2ac174ed17f9b4725a93c6f7c7bf3aaa68fe98ba67d29285c08c80a67620a64e02646bfae8e747806cf0a566454d8df638c8"}, 0x48, 0xffffffffffffffff)
keyctl$read(0xb, r0, 0x0, 0x0)

11:41:44 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:44 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x4, 0xbb, &(0x7f0000000440)=""/187, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:44 executing program 3:
bpf$BPF_MAP_GET_FD_BY_ID(0x9, &(0x7f0000000100)={0x0, 0x0, 0x11}, 0xc)

11:41:44 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x1275, 0x0)

11:41:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4}]}}}], 0x18}, 0x0)

11:41:44 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000c00)={&(0x7f0000000700)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000780)="19", 0x1}, {&(0x7f0000000840)="f8", 0x1}], 0x3, &(0x7f0000000b40)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0x27, 0x1, [{0x0, 0x3, '6'}, {0x0, 0xd, "62f8ebf6d7e18912c8240a"}, {0x0, 0x11, "d2a9a03cf53ff9aba093f51ddc1e1c"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x68}, 0x0)

11:41:44 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, @phonet, @rc={0x1f, @none}, @rc={0x1f, @fixed, 0xf2}})

11:41:44 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000c00)={&(0x7f0000000700)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000780)="19", 0x1}, {&(0x7f0000000840)="f8", 0x1}], 0x3, &(0x7f0000000b40)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0x27, 0x1, [{0x0, 0x3, '6'}, {0x0, 0xd, "62f8ebf6d7e18912c8240a"}, {0x0, 0x11, "d2a9a03cf53ff9aba093f51ddc1e1c"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x68}, 0x0)

11:41:44 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0xa852)

11:41:44 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8932, &(0x7f0000000140)={'gre0\x00', 0x0})

11:41:44 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1000, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0)

11:41:44 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000140))

11:41:45 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:45 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000c00)={&(0x7f0000000700)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000780)="19", 0x1}, {&(0x7f0000000840)="f8", 0x1}], 0x3, &(0x7f0000000b40)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0x27, 0x1, [{0x0, 0x3, '6'}, {0x0, 0xd, "62f8ebf6d7e18912c8240a"}, {0x0, 0x11, "d2a9a03cf53ff9aba093f51ddc1e1c"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x68}, 0x0)

11:41:45 executing program 1:
modify_ldt$write(0x1, &(0x7f00000000c0)={0x401}, 0x10)

11:41:45 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{&(0x7f0000000140)={0xa, 0x4e23, 0x0, @private0, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, [], 0x0, 0x0}}}}], 0x28}}], 0x2, 0x0)

11:41:45 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000440))

11:41:45 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)

11:41:45 executing program 3:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x50, 0x13, 0xa01, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0)

11:41:45 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000040)="c9", 0x1)

11:41:45 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40)

11:41:45 executing program 4:
futex(&(0x7f0000000380), 0x8c, 0x1, 0x0, 0x0, 0x1)

11:41:45 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, &(0x7f0000000800))

11:41:45 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000500)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, 0x0)

11:41:47 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:47 executing program 5:
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080))

11:41:47 executing program 2:
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
select(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x9}, &(0x7f00000001c0)={0x0, 0xea60})

11:41:47 executing program 4:
r0 = add_key$fscrypt_v1(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000300)={0x0, "1d91e94f0f6e211c63104de68d2d2ac174ed17f9b4725a93c6f7c7bf3aaa68fe98ba67d29285c08c80a67620a64e02646bfae8e747806cf0a566454d8df638c8"}, 0x48, 0xffffffffffffffff)
keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff)

11:41:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f000000da40)={0x0, @in={0x2, 0x0, @private}, @xdp, @isdn, 0x7, 0x0, 0x0, 0x0, 0x2800, &(0x7f000000da00)='syzkaller0\x00'})

11:41:47 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x5382, 0x0)

11:41:47 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000005200)='/dev/null\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

11:41:47 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000340)={@rand_addr, @loopback}, 0x8)

11:41:47 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)=0x1)
select(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x9}, &(0x7f00000001c0))

11:41:47 executing program 3:
r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0x227f, &(0x7f00000000c0))

11:41:47 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0x2203, &(0x7f00000000c0))

11:41:47 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x541b, &(0x7f0000000080))

11:41:47 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:47 executing program 2:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)

11:41:47 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x18)

11:41:47 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)

11:41:47 executing program 4:
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x2085c0, 0x0)

11:41:47 executing program 3:
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)

11:41:48 executing program 4:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
bind$packet(r0, 0x0, 0x0)

11:41:48 executing program 1:
openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x143841, 0x58)

11:41:48 executing program 2:
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000005)

11:41:48 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=@dstopts, 0x8)

11:41:48 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0xd2, &(0x7f00000001c0), 0x0)

11:41:48 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)

11:41:49 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:49 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0)

11:41:49 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x44, 0x0, 0x0)

11:41:49 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000000)='\r', 0x1)

11:41:49 executing program 1:
syz_mount_image$fuse(0x0, &(0x7f0000002140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x80)

11:41:49 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x40001, 0x0)

11:41:49 executing program 5:
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4)

11:41:49 executing program 3:
pipe(&(0x7f00000014c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)="fc", 0x1}], 0x1, 0x0)
vmsplice(r0, &(0x7f0000000340)=[{&(0x7f0000000200)="bc", 0x1}], 0x1, 0x0)

11:41:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000001440)='team\x00', 0xffffffffffffffff)

11:41:49 executing program 2:
bpf$MAP_CREATE(0x13, &(0x7f0000000100), 0x40)

11:41:49 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000001340)=[{0x0}, {&(0x7f0000000100)="d9", 0x1}], 0x2}}], 0x300, 0x0)

11:41:49 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0xef, 0x4)

11:41:50 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:50 executing program 1:
pipe(&(0x7f00000014c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)="fc", 0x1}], 0x1, 0x0)
vmsplice(r0, &(0x7f0000000340)=[{&(0x7f0000000200)="bc9f", 0x2}], 0x1, 0x0)

11:41:50 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
bind(r0, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "be06cf1695fe3aaa0431786643cdd2f5a1b522e0f6d7399ffb3f42fc23de8e5abc24823009a566e7a3123d18a0bab9090772f1db0abeaf51129b89a05f3625"}, 0x80)

11:41:50 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x8)

11:41:50 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_opts(r0, 0x88, 0x0, 0x0, 0x0)

11:41:50 executing program 5:
epoll_create(0x5a41)

11:41:50 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
recvmsg(r0, 0x0, 0x0)

11:41:50 executing program 4:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0x1ff, 0x8)

11:41:50 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$sock_timeval(r0, 0x1, 0xf, 0x0, &(0x7f0000000180))

11:41:50 executing program 1:
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000))
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80)='nl80211\x00', 0xffffffffffffffff)

11:41:50 executing program 5:
r0 = socket$unix(0x1, 0x1, 0x0)
pipe(&(0x7f0000001bc0)={<r1=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}], 0x18}], 0x1, 0x0)

11:41:50 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}, 0x0)

11:41:52 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:52 executing program 3:
bpf$MAP_CREATE(0x15, &(0x7f0000000100), 0x40)

11:41:52 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000001200)={0xf, 0x0, 0x0, 0x9}, 0x40)

11:41:52 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001440)={0x28, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0)

11:41:52 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0)

11:41:52 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$sock_timeval(r0, 0x1, 0x30, 0x0, &(0x7f0000000180))

11:41:52 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x560, 0xffffffff, 0x0, 0x130, 0x378, 0xffffffff, 0xffffffff, 0x490, 0x490, 0x490, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}, @common=@frag={{0x30, 'frag\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@uncond, 0x0, 0x208, 0x248, 0x0, {}, [@common=@eui64={{0x28, 'eui64\x00'}}, @common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@private0, @private2, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @remote, @mcast1, @private0={0xfc, 0x0, [], 0x1}, @mcast1, @mcast1, @loopback, @mcast1, @private2, @mcast1, @loopback]}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "5c1d424a07f4adb000a41423053d0517b028066a7be3c6dd42f63d55ee09"}}, {{@ipv6={@private1, @loopback, [], [], 'ip6tnl0\x00', 'bond_slave_1\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0)

11:41:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8912, &(0x7f0000000340)={'macvlan1\x00', 0x0})

11:41:52 executing program 2:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000c80), 0x4)

11:41:52 executing program 1:
pipe(&(0x7f0000001bc0)={<r0=>0xffffffffffffffff})
sendmsg$TEAM_CMD_NOOP(r0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'vlan0\x00', {0x40003}})
pipe(&(0x7f0000001bc0)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x0, @isdn={0x22, 0x7, 0x20, 0x1f, 0x6}, @in={0x2, 0x4e24, @loopback}, @hci={0x1f, 0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='batadv_slave_0\x00', 0xb6f, 0x8, 0xcb})
sendmsg$TEAM_CMD_NOOP(r2, 0x0, 0x0)
recvmsg(r2, 0x0, 0x8020)

11:41:52 executing program 3:
pipe(&(0x7f00000014c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, 0x0, 0x0, 0x8000000)

11:41:52 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)='_', 0x1)

[ 1345.902865] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1345.986921] 
[ 1345.988674] ======================================================
[ 1345.994992] WARNING: possible circular locking dependency detected
[ 1346.001321] 4.14.221-syzkaller #0 Not tainted
[ 1346.005813] ------------------------------------------------------
[ 1346.012396] syz-executor.4/31893 is trying to acquire lock:
[ 1346.018461]  (&table[i].mutex){+.+.}, at: [<ffffffff85f3cfda>] ip_set_nfnl_put+0x11a/0x310
[ 1346.026894] 
[ 1346.026894] but task is already holding lock:
[ 1346.033698]  (&xt[i].mutex){+.+.}, at: [<ffffffff85ef2aa8>] xt_find_table_lock+0x38/0x3d0
[ 1346.042493] 
[ 1346.042493] which lock already depends on the new lock.
[ 1346.042493] 
[ 1346.050939] 
[ 1346.050939] the existing dependency chain (in reverse order) is:
[ 1346.058732] 
[ 1346.058732] -> #1 (&xt[i].mutex){+.+.}:
[ 1346.065258]        __mutex_lock+0xc4/0x1310
[ 1346.069697]        xt_find_revision+0x88/0x200
[ 1346.074297]        nfnl_compat_get+0x1f7/0x870
[ 1346.078981]        nfnetlink_rcv_msg+0x9bb/0xc00
[ 1346.083933]        netlink_rcv_skb+0x125/0x390
[ 1346.088715]        nfnetlink_rcv+0x1ab/0x1da0
[ 1346.093225]        netlink_unicast+0x437/0x610
[ 1346.097823]        netlink_sendmsg+0x62e/0xb80
[ 1346.102422]        sock_sendmsg+0xb5/0x100
[ 1346.106858]        ___sys_sendmsg+0x6c8/0x800
[ 1346.111435]        __sys_sendmsg+0xa3/0x120
[ 1346.116719]        SyS_sendmsg+0x27/0x40
[ 1346.145571]        do_syscall_64+0x1d5/0x640
[ 1346.149986]        entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1346.156032] 
[ 1346.156032] -> #0 (&table[i].mutex){+.+.}:
[ 1346.193435]        lock_acquire+0x170/0x3f0
[ 1346.197758]        __mutex_lock+0xc4/0x1310
[ 1346.202593]        ip_set_nfnl_put+0x11a/0x310
[ 1346.207530]        set_target_v1_destroy+0xd7/0x150
[ 1346.212613]        cleanup_entry+0x232/0x310
[ 1346.217024]        __do_replace+0x38d/0x580
[ 1346.221591]        do_ip6t_set_ctl+0x256/0x3b0
[ 1346.226567]        nf_setsockopt+0x5f/0xb0
[ 1346.231529]        ipv6_setsockopt+0xc0/0x120
[ 1346.236026]        tcp_setsockopt+0x7b/0xc0
[ 1346.240437]        SyS_setsockopt+0x110/0x1e0
[ 1346.245109]        do_syscall_64+0x1d5/0x640
[ 1346.249540]        entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1346.256747] 
[ 1346.256747] other info that might help us debug this:
[ 1346.256747] 
[ 1346.265138]  Possible unsafe locking scenario:
[ 1346.265138] 
[ 1346.271912]        CPU0                    CPU1
[ 1346.276582]        ----                    ----
[ 1346.281514]   lock(&xt[i].mutex);
[ 1346.285094]                                lock(&table[i].mutex);
[ 1346.291498]                                lock(&xt[i].mutex);
[ 1346.297585]   lock(&table[i].mutex);
[ 1346.301291] 
[ 1346.301291]  *** DEADLOCK ***
[ 1346.301291] 
[ 1346.307360] 1 lock held by syz-executor.4/31893:
[ 1346.312215]  #0:  (&xt[i].mutex){+.+.}, at: [<ffffffff85ef2aa8>] xt_find_table_lock+0x38/0x3d0
[ 1346.321162] 
[ 1346.321162] stack backtrace:
[ 1346.325871] CPU: 1 PID: 31893 Comm: syz-executor.4 Not tainted 4.14.221-syzkaller #0
[ 1346.334586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1346.344779] Call Trace:
[ 1346.347654]  dump_stack+0x1b2/0x281
[ 1346.351677]  print_circular_bug.constprop.0.cold+0x2d7/0x41e
[ 1346.357745]  __lock_acquire+0x2e0e/0x3f20
[ 1346.361925]  ? is_bpf_text_address+0xb8/0x150
[ 1346.366460]  ? kernel_text_address+0xbd/0xf0
[ 1346.370901]  ? trace_hardirqs_on+0x10/0x10
[ 1346.375162]  ? entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1346.380668]  ? __save_stack_trace+0xa0/0x160
[ 1346.385090]  ? depot_save_stack+0x10d/0x3f0
[ 1346.390058]  ? __lock_acquire+0x5fc/0x3f20
[ 1346.395335]  lock_acquire+0x170/0x3f0
[ 1346.399135]  ? ip_set_nfnl_put+0x11a/0x310
[ 1346.403391]  ? ip_set_nfnl_put+0x11a/0x310
[ 1346.407721]  __mutex_lock+0xc4/0x1310
[ 1346.411660]  ? ip_set_nfnl_put+0x11a/0x310
[ 1346.415988]  ? lock_acquire+0x170/0x3f0
[ 1346.420684]  ? ip_set_nfnl_put+0x11a/0x310
[ 1346.426459]  ? trace_hardirqs_on+0x10/0x10
[ 1346.431243]  ? __ww_mutex_wakeup_for_backoff+0x210/0x210
[ 1346.437017]  ? ip_set_nfnl_put+0xe9/0x310
[ 1346.441178]  ? lock_acquire+0x170/0x3f0
[ 1346.445272]  ? lock_downgrade+0x740/0x740
[ 1346.449519]  ip_set_nfnl_put+0x11a/0x310
[ 1346.453640]  set_target_v1_destroy+0xd7/0x150
[ 1346.458297]  ? _find_next_bit+0xdb/0x100
[ 1346.462594]  ? set_target_v3_destroy+0x200/0x200
[ 1346.467355]  cleanup_entry+0x232/0x310
[ 1346.471680]  ? compat_do_ip6t_get_ctl+0x820/0x820
[ 1346.476530]  __do_replace+0x38d/0x580
[ 1346.480337]  ? ip6t_unregister_table+0x60/0x60
[ 1346.484913]  do_ip6t_set_ctl+0x256/0x3b0
[ 1346.489171]  ? compat_do_ip6t_set_ctl+0x140/0x140
[ 1346.494157]  ? nf_sockopt_find.constprop.0+0x1ad/0x220
[ 1346.499499]  nf_setsockopt+0x5f/0xb0
[ 1346.503213]  ipv6_setsockopt+0xc0/0x120
[ 1346.507277]  tcp_setsockopt+0x7b/0xc0
[ 1346.511197]  SyS_setsockopt+0x110/0x1e0
[ 1346.515182]  ? SyS_recv+0x40/0x40
[ 1346.518644]  ? up_read+0x17/0x30
[ 1346.522009]  ? __do_page_fault+0x159/0xad0
[ 1346.526254]  ? do_syscall_64+0x4c/0x640
[ 1346.530496]  ? SyS_recv+0x40/0x40
[ 1346.534674]  do_syscall_64+0x1d5/0x640
[ 1346.539118]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1346.544314] RIP: 0033:0x46765a
[ 1346.547497] RSP: 002b:00007ffc8eb98d48 EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1346.555245] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 000000000046765a
[ 1346.562873] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[ 1346.570135] RBP: 00007ffc8eb98d70 R08: 00000000000003b8 R09: 0079746972756365
[ 1346.577413] R10: 000000000053e6a0 R11: 0000000000000206 R12: 00007ffc8eb98dd0
[ 1346.584693] R13: 0000000000000003 R14: 00007ffc8eb98d6c R15: 000000000053e640
11:41:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001500)={'batadv0\x00'})

11:41:53 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000b00)={0x14, 0x1, 0x5, 0x3}, 0x14}}, 0x0)

11:41:53 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

11:41:53 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open$dir(&(0x7f0000000200)='./file1\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000240)=""/241, 0xf1)

11:41:53 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:53 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = fork()
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000700)=r1)

11:41:53 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x8, 0x2}, 0x10}}, 0x0)

11:41:53 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000001340)=[{0x0}, {&(0x7f0000000100)="d9", 0x20000101}], 0x2}}], 0x1, 0x0)

11:41:53 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000000c0)='w', 0x1}, {&(0x7f0000000340)="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", 0x1000}], 0x2}}], 0x1, 0x0)

11:41:53 executing program 5:
socketpair(0xa, 0x3, 0x5b, &(0x7f0000001840))

11:41:53 executing program 1:
bpf$BPF_PROG_DETACH(0x4, 0x0, 0x0)

11:41:54 executing program 4:
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x700)

11:41:54 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x49, 0x49, 0x2, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "da"}]}}, &(0x7f0000000680)=""/226, 0x66, 0xe2, 0x1}, 0x20)

11:41:54 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0xc84, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x5}, 0x40)

11:41:54 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x16, 0x0, 0x401, 0x81}, 0x40)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)

11:41:54 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x5, &(0x7f0000000940)=@framed={{}, [@generic={0x20}, @jmp]}, &(0x7f00000009c0)='syzkaller\x00', 0x1, 0xfc, &(0x7f0000000a00)=""/252, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:55 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:55 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[{0x18, 0x1, 0x1, "65b622f2"}], 0x18}, 0x0)

11:41:55 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x0)

11:41:55 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000000700)={0x3, 0x0, 0x0, 0x0, 0xb4fdaf715bea7448}, 0x40)

11:41:55 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x9a, &(0x7f0000000240)=""/154, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

11:41:55 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000002180)={0x7, 0x0, 0x0, 0x0, 0x1111, 0x1}, 0x40)

11:41:55 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000980)={0x9, 0x40, 0x79df, 0xfffffeff, 0x104, 0x1}, 0x40)

11:41:55 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000180)={0x0, 0x5600}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:41:55 executing program 4:
r0 = openat$ptmx(0xffffff9c, &(0x7f0000000700)='/dev/ptmx\x00', 0x0, 0x0)
fstat(r0, &(0x7f0000000040))

11:41:55 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000200), 0xc)

11:41:55 executing program 2:
getsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, &(0x7f0000000080), 0x0)

11:41:55 executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x3, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x4a, &(0x7f0000000280), 0xa8)
recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4)

11:41:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:57 executing program 4:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78)

11:41:57 executing program 2:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c)

11:41:57 executing program 5:
r0 = socket$inet6_udplite(0x1c, 0x2, 0x88)
setsockopt$inet6_int(r0, 0x29, 0x25, &(0x7f0000000000), 0x4)

11:41:57 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, 0x0, 0x0)

11:41:57 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10)
r1 = dup(r0)
connect$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10)
sendto$inet(r1, &(0x7f0000001980)="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", 0xb54, 0x103, 0x0, 0x0)

11:41:57 executing program 1:
nanosleep(&(0x7f0000000000)={0x0, 0xfffffffb}, 0x0)

11:41:57 executing program 4:
accept4$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)

11:41:57 executing program 5:
syz_emit_ethernet(0x2e, &(0x7f0000000100)={@empty, @broadcast, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @random="ab5197a66247", @loopback, @empty, @loopback}}}}, 0x0)

11:41:57 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a012e2f66696c6530"], 0xa)
chown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0)

11:41:57 executing program 4:
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0xfffffffe}}, 0x0)

11:41:57 executing program 2:
readlink(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

11:41:59 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:41:59 executing program 3:
r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
getsockname(r0, 0x0, &(0x7f0000000400))

11:41:59 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x80000007}, 0x10)

11:41:59 executing program 1:
openat$ptmx(0xffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x400000, 0x0)

11:41:59 executing program 4:
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x1c, 0x1c}, 0x1c)

11:41:59 executing program 2:
symlinkat(&(0x7f0000001740)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001780)='./file0\x00')

11:41:59 executing program 1:
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000240))

11:41:59 executing program 2:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000100)={@ipv4={[], [], @local={0xac, 0x14, 0x0}}}, 0x14)

11:41:59 executing program 5:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, 0x0, 0x0, 0x84, &(0x7f0000000280)={0x10, 0x2}, 0x10)

11:41:59 executing program 4:
msgsnd(0xffffffffffffffff, &(0x7f0000000080), 0x4, 0x0)

11:41:59 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0)
open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x200, 0x0)

11:41:59 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0)
lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0xffffffffffffffff)

11:42:02 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x7f, 0x3b, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2}, 0x5000, 0x813, 0x10001, 0x5, 0x0, 0x8, 0x7f}, 0x0, 0xf, 0xffffffffffffffff, 0xb)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/150, 0x96}], 0x1)
openat$full(0xffffffffffffff9c, 0x0, 0x72901, 0x0)
syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x3, 0x228040)
memfd_create(0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000580)={0x77359400}, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

11:42:02 executing program 1:
msgsnd(0x0, &(0x7f0000000200), 0x4, 0x0)

11:42:02 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0)

11:42:02 executing program 2:
pipe2(&(0x7f0000001700)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
getsockname$inet(r0, 0x0, &(0x7f0000000100))

11:42:02 executing program 3:
r0 = socket$inet6_udplite(0x1c, 0x2, 0x88)
getsockopt$sock_int(r0, 0xffff, 0x1012, 0x0, &(0x7f0000000080))

11:42:02 executing program 5:
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000002780)}, 0x0)

11:42:02 executing program 2:
r0 = semget(0x2, 0x0, 0x0)
semop(r0, &(0x7f00000002c0)=[{0x0, 0x5, 0x1800}], 0x1)

11:42:02 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000400)=ANY=[], &(0x7f00000004c0)=0x94)

11:42:02 executing program 1:
r0 = socket$inet6_udplite(0x1c, 0x2, 0x88)
getsockopt$inet6_buf(r0, 0x29, 0x32, 0x0, 0x0)

11:42:02 executing program 5:
syz_emit_ethernet(0x26, &(0x7f0000000140)={@broadcast, @local, @val, {@ipv4}}, 0x0)

11:42:02 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)

11:42:02 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0)
io_setup(0x0, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001980)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}])