, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0xff, 0x4) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)=""/4067, 0xfe3}], 0x1, 0x0, 0x0, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:01 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:01 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) wait4(r0, &(0x7f0000000000), 0x40000000, &(0x7f0000000100)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="02002bbd7000fddbdf250e0000000800060006000000080005007f00000014000380060007004e200000050008000600000008000400060000004400028005000d0001000000080005000300000008000900207600000800050007000000060002004e2400000800050007000000080003000400000006000e004e2400000c0002800800080002000000087c658bf5aed432e08d16b37dce993be4b1ebfd"], 0x90}, 0x1, 0x0, 0x0, 0x40010}, 0x20) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r3, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r3, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:01 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x881000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:01 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/243, 0xf3}, {&(0x7f0000000500)=""/37, 0x25}, {&(0x7f0000000540)=""/116, 0x74}, {&(0x7f00000005c0)=""/175, 0xaf}, {&(0x7f0000000680)=""/44, 0x2c}], 0x5, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r3 = semget$private(0x0, 0x20000000102, 0x0) semctl$SEM_STAT(r3, 0x0, 0x12, &(0x7f00000001c0)=""/225) semctl$GETVAL(r3, 0x0, 0xc, &(0x7f0000000280)=""/69) sendto$ax25(r2, &(0x7f0000000100)="b5df5e6067ef0b3ac2a3cd44dbc65447283447466e7dfa06222a7cae41e1c597bb5982377f8738a7331045b1593294979e2182410ebec27523714e97732c5aae18c5c5e1185d6ea684238e7f9ce2010cb3a17246f807ba7fbfd708bd9bc56b68734eb41e3c651388ad76c5469c78f60a6b2032c23d5efff6a6eecd87b26673f9e42250bdbbb26207790380eb4da649846cea7a753487713bf94e4dfd11a08f393c70a5dcb6bc0596578d033a696a456535ce2612cec47ca15290fdca9fac5728149a7d801d7679ed4f186478f81f496eb6b30bb13beba1bbbf07710e9d", 0xdd, 0x800, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) 17:46:01 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0xfffffffffffffff9) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000100)={{0x6, 0x0, 0x6, 0x1, 'syz0\x00', 0x4}, 0x5, 0x1, 0xff, r2, 0x1, 0x8, 'syz0\x00', &(0x7f0000000080)=['/dev/ptmx\x00'], 0xa, [], [0x5, 0x8, 0x4, 0x4]}) 17:46:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x1) r3 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x200) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000000)) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000000000000d8) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@remote, @rose, @rose, @rose, @default, @netrom, @remote, @null]}, &(0x7f0000000080)=0x48) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x15}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3122) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)=""/249, 0xf9}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000300)=0x80) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000240)=0x1, 0x4) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ttyS3\x00', 0x4040c1, 0x0) sendfile(r7, r6, 0x0, 0x20000000000000d8) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x149282, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x20000000000000d8) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000380)={0x22, 0x3, 0xfa, 0x90, 0xa4}, 0x6) ioctl$SIOCAX25DELFWD(r6, 0x89eb, &(0x7f0000000200)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) 17:46:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1412, 0x4, 0x70bd2c, 0x200, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x100200d0}, 0x40000) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r1, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000d7, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:02 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x881000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'tunl0\x00', 0x2}) r7 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$P9_RLOCK(r7, &(0x7f0000000040)={0x8, 0x35, 0x2, 0x2}, 0x8) 17:46:02 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x881000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:03 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x881000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @bcast, 0x846}, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000200)={@any, 0x17}) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000e80)='F', 0x1, 0x0) keyctl$unlink(0x9, r3, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'L-', 0x800000100000000}, 0x16, 0x1) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0xffffffffffffffbd) sendto$inet(r2, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r2, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:03 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000), 0x2) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:03 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000413b7d04700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000005400000000000000000000000000380074696d650000000000000000000000000000000000000000000000f1000000000000ffffffff4f970000000001000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000cf000000000000380071756f74610000000000000028372b75893eda63000000000000000000000100000000000000470d0000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000edffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:03 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540), 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) sendmsg(r1, &(0x7f0000000440)={&(0x7f0000000100)=@nfc_llcp={0x27, 0x1, 0x0, 0x4, 0x81, 0x91, "b0b2f80c29b7cc626d3ff53531bb09408c76282ff449c698336e66b2512197d6974d4b6b16614071a91a8892721f55e30bf9351b16338aafab27d9fcfb61b9", 0x2d}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)="cd57bbe3a1dd83eb3dba680f69457d243732b6298aa6ab65fb31e8beed036236539e943b", 0x24}, {&(0x7f0000000080)="7c2eccc64207724529050f23239f2e7eba9d9ded7807308a1ee8975c73", 0x1d}, {&(0x7f0000000180)="83d0c255bb628a4cdf1bc86387161737c22dfb8b337c6a795e7f8c90cda0f18afecf11dadc573fa9186a8b263ac58c252b0d46ca286c336d27e8b738fb3e7ca9471ee1341c312b66dc218b006b00942713ea4b91210bc46d0cc658c3f0536fcaefb64171945f8c7a39856a03a8780211b10668ad0235b8c9a374f4fd9a500dacb4959189228fdba2998b77aa4a639e1c5fd7ae75a2d7d364e16d333d0548b47a687ffd4ab279a5c8a1f1bbe6592f2abd1ad315b3734bc4820fb1d86ab6f2b761180359c782a892bdd7d1775048ecaf24aca1cf61385cf83789fe06ab75470bbb3bfeb176eca7a4724480fdee8b0071c12c", 0xf1}, {&(0x7f00000002c0)="19d4f295648d38dc07769b853bfe12dde9867081211a0859f4f9d47a44b04f6c75c9b1f431ba2a96c630756de6665a9d676f54f15fbac9ecbd0873f5c797c5d82807cc3f3bfc8afd46133ab302b5b34b703024c3cd9082ef4f12498f8066752f1c9c0d8389b9823eaa2cb14ea4851083a16033a9ef71d6903dc365407dfc8492effb", 0x82}, {&(0x7f0000000380)="e43658639f80ac73200e212bb551efa8c94902f105bfae9efdbfa088a4761c4efd0c9c5e155278852b4f146804b68b042bd25c298c39fe61427fe2ecee51f4ceccbb893bb211cbc5b4b162ca87ab3eb7910bfc9e80a36959252c1194e515d1b30c0333598878254cdc951827d090669e3b4f28424cdf5807a71413b75e51befbd6f21d436e0b6bf74871de0cc87f", 0x8e}], 0x5, &(0x7f0000001340)=[{0x1010, 0x10e, 0x0, "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"}, {0x58, 0x1, 0x6, "a01e24ed3dce4015b62c358ac4ae148ad25a16f95e5daed16fe7e83ef1b48279659b43f55785ccf59219e1d8b73e2c34b9407a6e8623c8ad9b5aecda6d327882b1a1d0e72909"}, {0xe8, 0x117, 0x2, "e33b9523fd2b25f3bd2845eaadda2f24e39a94cf322cb25bceb792516ca5665dfc7164764fbd19cb3e78a99387d6b5103387ad3cd49ed10344d33cc55db5451515daab0542efdbcd48229787530f8d609d2a7e2f69e56a53a816636e79f29734a4c5ba362ef3cf50498b0062b057d45b5f50f5663ea9fc1393cbf1bbe03c65ea86d0f7aa6760e70f9651ed37215ce2095144f9c386dcf6975676a916bb16308f8bec750da01d4e1c9163ae4f5bdf0dcb607d5be2db044a4359190bb8fce586fa3604d905701f63d4ace1cb0d298e287b8aaa602ee32e0b8e"}, {0x68, 0x1, 0x80000000, "61e43f4b3645e04acee859641d3ba5d076c5dd8c7ba74b61ef4ff8171732871e823307255c277eebdfc1ddf60c3bf0a0a43295a1fb01b9d989bf66c5d37252df2a7d5bf0a39605b637a75932d47b1e5106"}, {0xa0, 0x29, 0x400, "31d544607a829c266baedd2b227199d51fc5bab0c2757d9d3f831e58c48b191f2b8119c4a38939671373735321f7f4412991ae51af6b92ff3e291caeffabf1f486dbc7517fb35847485abf79c7fa31e0c1b6ad4150690377874b4fa4880f279d4ee2fef86be15bc8acff16c8ca4773a4e37fec3147c871947683c51658e5ac1fe0e27b5ac4758505a539710bb90dd207"}], 0x1258}, 0x4040000) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000580)={0x59, 0x4, 0x7, 0x9, 0x3e6a}) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, r2, 0xf01, 0x0, 0x0, {0x4}}, 0xff92}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0xf0, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff9d9a}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb0c}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x22000042}, 0x1) 17:46:03 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:03 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800000000000, 0x0, 0x6, 0x0, 0x0, 0x2}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:03 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100)=0x4, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x7) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:03 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:03 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) 17:46:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) prctl$PR_GET_DUMPABLE(0x3) 17:46:04 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/787], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000000000000d8) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x5, 0x5, 0x6, 0x7}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:04 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) get_robust_list(r1, &(0x7f00000001c0)=&(0x7f0000000180)={&(0x7f0000000080)={&(0x7f0000000000)}, 0x0, &(0x7f0000000140)={&(0x7f0000000100)}}, &(0x7f0000000200)=0x18) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe004003e, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4059, 0x1e11}], 0x1, 0x0, 0x4f71535feb1d5a60, 0x1f4}, 0x10000000}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:04 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 17:46:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x5, 0x70, 0x19, 0x4, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1}, 0x0, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80000, 0x0) sendfile(r1, r2, &(0x7f0000000100)=0x7fffffff, 0x2) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x4) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240), 0x38, 0x0, 0x0, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x3, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}]}, 0x48}, 0x1, 0x0, 0x0, 0xc005}, 0x40884) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:05 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 17:46:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/787], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:05 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22008bfd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000000e2350e17e52140e276f9031bad694392b33030ffd6a7633722c4b9ba33e470089788a9bba5e86c2f188ff27984bc91943ef43b9551b9f20e1230088ea8fb217e5d3e8cfb978cf2c96fdf1cbeb5e6665310c066d1065add741e071347974377fc8d773aff493cd9b2509a92c1497b875d79666166", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB="040003000000000010000200000000002000040000000000"], 0x5c, 0x3) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:05 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) 17:46:05 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, 0x0, 0x0, 0x0) 17:46:05 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, 0x0, 0x0, 0x0) 17:46:06 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="04000000e3a7cd4800000000913342b32974f3a21cbdd452c77a", @ANYRES16=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x60045}, 0x20004080) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r5, 0xbcb32d9336225ef9, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '@/!*.-\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x4004000) sendfile(r2, r3, 0x0, 0x100000080000000) 17:46:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/787], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:06 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, 0x0, 0x0, 0x0) 17:46:06 executing program 1: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x28d48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="266a2ef0e40fcac68e988d2ce35281465a5239682079f1230999b2dd96198e7f86838ea8434d7d85b6c027809284180d14e3452c451ff4299cd1bec4b82b0c70", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={r3}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23, 0x8, @private0}}}, 0x84) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:06 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, 0x0, 0x0, 0x0) 17:46:06 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22008bfd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000000e2350e17e52140e276f9031bad694392b33030ffd6a7633722c4b9ba33e470089788a9bba5e86c2f188ff27984bc91943ef43b9551b9f20e1230088ea8fb217e5d3e8cfb978cf2c96fdf1cbeb5e6665310c066d1065add741e071347974377fc8d773aff493cd9b2509a92c1497b875d79666166", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB="040003000000000010000200000000002000040000000000"], 0x5c, 0x3) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:06 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22008bfd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000000e2350e17e52140e276f9031bad694392b33030ffd6a7633722c4b9ba33e470089788a9bba5e86c2f188ff27984bc91943ef43b9551b9f20e1230088ea8fb217e5d3e8cfb978cf2c96fdf1cbeb5e6665310c066d1065add741e071347974377fc8d773aff493cd9b2509a92c1497b875d79666166", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB="040003000000000010000200000000002000040000000000"], 0x5c, 0x3) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) gettid() r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) socket$pppoe(0x18, 0x1, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x20000, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000380)=0x8a1) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="7201a960", @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf25030000000000000000801400020067656e6576653100000000000000000014000200726f73653000000000000000000078c181a01a3caae0a88a1e7e5bcd481625d1573dc0a380fe3503a2c4b9788452da8b1d076c8e92419262efea08a3277772d72920dbd5e015b75c185fb524d5dd0a38930db9df119f6da1b13823de23ca788595a200772e65b481962a64ef979e1f8ab644ca836d039149861b2b7b2e122bb24ac5005132c613ad20bc062615cd2ab22f51939300d4bbacfcdddaff"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8004) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r7, @ANYBLOB="00012bbd7000fbdbdf250500000005000600000000008000038021000500e6320fd3b6dfea10485a12b9a171a753358b57a024dedb81658adaa8070000000800020000080000500003802c0001800400030008000100af4900000c000200697036746e6c30000c000200697036746e6c30000400030020000180060002002c00000008000100000200000c000200697036746e6c300005000200090000004800018008000300000000001400020076657468305f6d616376746170000000080003000300000008000300030000000800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="c4f42c899f35e2fd6f5ea7150e2ed8996b1e3a54cd0d2c56aa5d88e5d5a5e221d650fa5ae16524eb10879e653c0437a97f604cdfc1c323747b6e22872803296c96d26a356342cfec74d4762c921f53fa9e90d23ddf1ffa674ce8716192817abbfb873c1c438824cb1c86631171fdd1c8d3bb7370f9093069cbd9f80af8b9084c0de323d1d984000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x4004804}, 0x4000040) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) getpeername(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) 17:46:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/800], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x14, r5, 0x0, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x4082) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r6 = gettid() setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000100), 0x4) process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f00004d0000/0x2000)=nil, 0x2000, 0x0) 17:46:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000080)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:07 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:07 executing program 1: perf_event_open(&(0x7f0000000480)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000540)={0x3, &(0x7f0000000500)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000580)={r3}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000000)={r3, 0x1}) 17:46:07 executing program 1: socket$inet6(0xa, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540), 0x4000000000002d0, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x37c5) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:07 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x22008bfd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000000e2350e17e52140e276f9031bad694392b33030ffd6a7633722c4b9ba33e470089788a9bba5e86c2f188ff27984bc91943ef43b9551b9f20e1230088ea8fb217e5d3e8cfb978cf2c96fdf1cbeb5e6665310c066d1065add741e071347974377fc8d773aff493cd9b2509a92c1497b875d79666166", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB="040003000000000010000200000000002000040000000000"], 0x5c, 0x3) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) gettid() r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000080)={&(0x7f00005f0000/0x1000)=nil, 0x1000}) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x5, 0x2, 0x6f92a81e, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r4}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x117000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:07 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x3, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}]}, 0x48}, 0x1, 0x0, 0x0, 0xc005}, 0x40884) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x400}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400201) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 1089.146370] hfs: can't find a HFS filesystem on dev loop3 17:46:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mq_timedreceive(r1, &(0x7f0000001000)=""/60, 0x3c, 0x1f, &(0x7f0000001040)={0x77359400}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000000)="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") [ 1089.317757] hfs: can't find a HFS filesystem on dev loop3 17:46:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000413b7d04700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000005400000000000000000000000000380074696d650000000000000000000000000000000000000000000000f1000000000000ffffffff4f970000000001000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000cf000000000000380071756f74610000000000000028372b75893eda63000000000000000000000100000000000000470d0000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000edffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800"/800], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:07 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0xa6e13965fb3e0f2a, 0x7, 0x9, r1, 0x0, &(0x7f0000000000)={0x9c0001, 0x3, [], @value=0x2}}) sendto$l2tp6(r2, &(0x7f0000000100)="c88ec9a097b6860989c073b1a7d6547f6b998c2e39179f52223a0fb7d10b6b6922a034bc50bc6ee0446a82ae8b5b38846545591258cef3cf9437e6643811e6bd6d903c297611f50f17d412ac876d3fda6eb5303f5460185d67b7feca5f783c85db642d1423da4c6d", 0x68, 0xc0816, &(0x7f0000000180)={0xa, 0x0, 0x7fffffff, @ipv4={[], [], @empty}, 0x40, 0x4}, 0x20) r3 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x2, 0x80) ioctl$SIOCNRDECOBS(r3, 0x89e2) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) recvfrom$phonet(0xffffffffffffffff, &(0x7f00000002c0)=""/83, 0x53, 0x10000, &(0x7f0000000340)={0x23, 0x1, 0x0, 0x2}, 0x10) 17:46:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) fcntl$setlease(r4, 0x400, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:08 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1af5eff25331f2c060d7f77959a2f8d4cb0baf48ba8a8d24a25bf5f947d295fb747f57b749cf9c62d9a5ff3ada239f3b62d2e25f348b729db5ccf8a8c771329c6867a9e6d3616c829a9eb1c09f0794b0d3760f6b", @ANYRES16=r5, @ANYBLOB="02002bbd7000ffdbdf250200000c080002312836c0b42097931c21fdab5a1eb3e475f2"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020028bd7000fbdbdf250202000100000008000100020000004c0004800800020003000000d5000c80e40005000000000000000000fff7000000"], 0x238}, 0x1, 0x0, 0x0, 0x40040}, 0x2004c010) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="000000013eadca4065d99ad7cdb3c37ab60ea42c17d1f4556290686e833613c69010b0dbf0deeb202cfa4be092eaaf2142f7974f7c1f988377bdb0307c6804b4f589d214017c5217cae84989241b08e8ed62157eb51c25fe000000003bae4c88bad50000000000", @ANYRES16=r5, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4004804}, 0x20044000) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x1ac, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x88, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9abb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x105f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e6524ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42a74475}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9c1d2d0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc58d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36e11d6c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42876c22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f75543}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14378d34}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6562eb20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x231a3a29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x428f1395}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3137}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf8, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c68dea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d11c120}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cd9c2e2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25abb36d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1242b9c1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c4e14b4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xefcb8e0}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x616f4c0c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x158c3f91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ec4792}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d8d80d1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x245f9576}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x682c4067}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28d4d31d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d31dff5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x141aa403}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22aa0963}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x44000}, 0x8800) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="00012abd7000fcdbdf25e1ffffff0700010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xfffffffffffffff8, &(0x7f0000000040)={&(0x7f00000008c0)={0xb8, r5, 0x400, 0x70bd2d, 0x25dfdbff}, 0xfffffffffffffe82}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x188, r5, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb8, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ba14f77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fa17d89}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ab5883a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a078ad9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28574f81}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78faaa12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a11d459}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x503391f6}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xac, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2355788c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13e8ea8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7645160}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21ecf22a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6571dbfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47713094}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6625383e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a60126e}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x468d2996}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cbd1ca1}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4195bd8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c561808}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56d10d41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ca40395}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14d54c08}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x40800}, 0x4) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:08 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@remote, @loopback, r3}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) [ 1089.683234] device lo entered promiscuous mode [ 1089.727217] Y­4`Ò˜: renamed from lo [ 1089.804490] hfs: can't find a HFS filesystem on dev loop3 [ 1089.909287] hfs: can't find a HFS filesystem on dev loop3 17:46:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="fab900007da9f84ee9d695b5ebab305a0738588bfdcddd29e2ad461ee6349857d6812e762ce8e42405052b6df2c1e29835b9ad70a256d3a4f912c95ee762f9e387f16b51fe6fe74d76753482223ceb137ac1940cb04eb9150c16b4308d7ccd2a966530760a95b6d128277ac7b1945c017dbf8b37baef9aba2f324222d15df9b6ec0ed9ef75348dffd94c61521db83bd9d728ba2857c92c2eb96f0cc710a6ca70385ad907b0f757273ab5cdfa7797433fa3ec779e4c7fa471ed7f0d7845fee74f03df599c3ff2894cbb0e41df338219df0a2f1e44ffcbc31db17247b9dae85b7cda3e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f000095dffc)=0x14) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x8}, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={r7}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000140)={r7, 0x7bab}, 0x8) r8 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:08 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x80000, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000080)={0xffffffff, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r1, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) bind$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xf85}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x40}}, 0x40) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:08 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000000000000d8) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x5, 0x5, 0x6, 0x7}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:08 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@remote, @loopback, r3}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:08 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e21, @broadcast}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) [ 1090.108957] hfs: can't find a HFS filesystem on dev loop3 [ 1090.177858] hfs: can't find a HFS filesystem on dev loop3 17:46:08 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x152}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_devices(r1, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f00000001c0)={0x9, 0xbc0, &(0x7f0000000000)="768e428ec2258db4a67996af7e762c2839b7dc4086a36de82446d5e8380aa71d92c3a738bb297ce9bc49fd5cc6fcb2308d67bf7667ca644b253374c65b48b02e2f4a90cb841474970adb4f2bfe80e4706e73a48a8838ae185c196dc1cf83a44ac924fd7973dd906e0c6c2b274142ea4c68210abf4b45698c0c1f5f097cf99bd63762919f82af122c4a38c87899d4cb40791f1c46d621570049b7cb4f54347a3686506b67b9f4961a6111f6bf63bbd7e0962f18c7a148abbdb83579d9dd6927300c22c112486ad12c59d27c7f1920844f7953011fbace451ac878e3faaf903286688d1e12af1fde0995", &(0x7f0000000100)="3c61c4cac153347ab303e06744930424091fbc5ed9fb55d14538ba41e6d5c8a25b13ef53ebe38dca771c08592e1fd838e7725d38b64c428c4c07a50041e023b558ef29301449fa531f3d576da90fdd6492866c3cff5d778172cd7354bb2d80bc37c0c04a3391615a74eee41682a1b18b839ef95dd6289f0c96624092597666f3f0400e2b5aee47bce9258b0e9b2b11343a50b878ca21e98d9889f0bc3c305d8ee3b2", 0xe9, 0xa2}) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="747970653d5046f65e2c6769643d", @ANYRESHEX=0x0, @ANYBLOB='\x00\x00']) 17:46:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000040)=0x4) 17:46:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/800], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:08 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setfsuid(0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r1, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000d7, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x30458372, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup2(r1, r0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x101000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x20c102, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xffffffffbffffff6) r3 = gettid() r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00', 0x1}) getsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x10) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 1090.465254] hfs: can't find a HFS filesystem on dev loop3 [ 1090.549996] hfs: can't find a HFS filesystem on dev loop3 17:46:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400204) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="747970653d5046f65e2c6669643d", @ANYRES64=r2, @ANYBLOB="2c007457b454705ff6f2633c8698acca9cdba9bed82363c774f855b695ccfa8b9e7372781689b8f12fd40230cacc19a2320b17ed89d3a6dbc0f83b02d328e29e9ece6d2d28197d9cd599affe3511d2422f7b248b74f9900874c2c9d9ea444575ed15ce632c5654f7d13757a823dce138125c4b0b090a4ae9a1a7b328c7e470841f57c804bcd7c1eb6801e5dfb932e6bab88f67310e9f3f6bdb6838364ac3fac71412869da143760015d8dea9c229650fcce0ab16b232dfdc9cd7b045739307234facc8c4e58df268"]) [ 1090.836991] hfs: unable to parse mount options 17:46:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) 17:46:09 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7f}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:09 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x881000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:09 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x881000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="747970653d5046f65e2c6769643d", @ANYRESHEX=0x0, @ANYBLOB="8556e7d8f6f8534e295ef1e529ffc26d3aaf6e46ef47f00a929d79670970ff986ceb713543fdcb1a587ba76ff564246b08bfacedfddb62b8df08b40c3590eac68d687a3b1b95e1acefcccdd4c3b073006ae30b74fdc08d70"]) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001840)={@private0, 0x0}, &(0x7f0000001880)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000004480)={0x0, @multicast1}, &(0x7f00000044c0)=0xc) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000000110a400000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff00000000"], 0x2c}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r8, r7, 0x0, 0x20000000000000d8) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000007480)=0x0, &(0x7f00000074c0)=0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000114000009040000000000000000", @ANYRES32=r12, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000009340)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x8a23, @loopback, 0x3f}, 0x1c, &(0x7f00000011c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="64c2cbcb5124dac2f90c45d9b7c1b7a9a0a54bc3f67760", 0x17}, {&(0x7f0000000140)="d2322200b393e61d2558236afaee2069659a42cc0466f219e80a07794b444b98e2dc39cb5db3e67172b5f19f3d565005a891ab115eb564e6165443a0923de01ba667", 0x42}, {&(0x7f00000001c0)="1d9d83ebd07c7316350c183a9bb7ecf08f1c66998ba73cac12df6af3099bde2ae8e7c319bcfe49fa0c3f8acfd87978a134551158619050a4411ac0bde9edc9065a2965bbf8b31d4a5563e65a5d857dc5c2eeef294ffb3be5d5d3cd730f238badd2e9578f6575857bba25d2e1135ec83528389c2f6ca032242ecc0c1ab0b20537501a1e8ece6b36556481f3d7df293ee811966de51c4a915e401862a1e1827c757c6b67052530719049ce8bfa095e92adcc87f6489ee96264b21b1eb6ac6b14194360be88ea61c5e58e45d1bf6e08bbafb1c9f7f068889f8f85621afa6e0f0496de51365f5df81c48af71a2eddaad712305d6c352abc74dea485f5a50913352c4867c49579b739a6897f9b8dd92cfe73980d6d069a589da97dec9b076ca2a1f1dfe2e5cd175f3df72f6d5d932071c227ccc2c5ec42f94ddf3bc36a4999cb8248e536735edf438419618d521e30c96b68eebe81bcd70b5f9ae7fed30a79360e8130df877e11c1758186dd39e2625dd5b051d57403f685c6ed8c9e384c4c63d5e8ba262e80a755be7222fc06a8582ba2305d0bd068fc31168026fbcfc9a47d48d6254fe944848d52a99124c4df28ba710e4f0b886fce7d2203e5d1e923b6d0ac876b84185b6d60f56d1294575802eb52bc03b83bf1c99c5f1de9cd771113a4b17a2deef429418d989c1d52d24ba677f7f5e6746120fa1764c3546974f22d213f78988c8a18fa3d0a10fe355a5340752eafc642cc80c4d12d4b720dacceaff92837b1f9dfc288c1083c8b7482e4bb9972e860f181766d9ef3e24be8fb8b66bd379d5633d9e13b5ced13343c2de3645ad17daf33a7d893095cb7e76337c89c95f36d32c6ed4ec49e3cc2fba9727cb5f7f5077307492028859c36af7d7c6a8c2040843ece070fc3db2567b1853b35d3d3fdf92e0b3bb499bc500283def7d54724bc07e2e3578fe42e15cbe6556175a20c59a50514428e44484ba006de0c05d151755e2ce4747eb726d4dda633000a69a363ff1af5570f2560833849e3560263334ed7cdb5a118d87cf1b56608fae503b783428394bd55edeaa37c9d937ce053de3f5fcc9ce4b373f12079604d191588065c0c4107e1140780635532b010b529f1b6c2e5c23b4b26e12f762fcf19a3bf3bb423445178e65b02b9f082ad1429d5bbd2d0cd74577755ef538ed95617d9363ddf67eab268f49da02b81a939d12706998729d573c9118fdcbfe63782e110e59b199b7aafcd77976237aaaf86b0ef2f67e9d4fa68c4508f668cbba40d109cec4e481d46f4aa4a0911aa513b2bced4f1662cd33f915a1af82dd5b19fe5ed38aea29daac674a02e9b43c8fdbab96feabba08d9a749c82545fb9d9c28d30c06e63a711c723a0e86b048e14516bde8f4c7e3f9c1e154975fe64e3d2b624508bae2e05639bd3ae1ead49ff0d18a135d2af624c9db8827cd941d3308444a16272a5aad4dc8e5b44fcb330a605065b4960dff6249dc79069634e74fced75e99a0823907cbdca8b11c3f4d7860f193396e03d4860b5e212487aba73e3aec74364f8ca91cda1b9553e95519ebab2b7e84e4834fa65b667e474db533197c129c6f39d11ac25494d7c91f49de2bd2831e3e451910a1dc2db855a7256489f9eb32f327b7c7892504ac68bdf31ef7358c894af98775a13db9e4110e5e596e634ee8d591f333fd2d3cc16d779fd2454e5cd24d7ae89de921fc061a3b374ccd806b4a72d3615d2b0b80091bdbcbae9ebe0793009ab4c9eb43b40953ab0bc4629e5d5e6a70453206c28ba1950fe1fbab4e666852c35d2d2ea1d468f2b3e02db5fbae37e12bb84bbcbe192ccc50b1d9a2ee09b12ad68440720330962dfc3b3da0583ab495b53da735a23b8bce76888af083537693fac6b56df448b802c2aac71d93b65123e8be3f4dba33976cf9e589517603c6ac0455c98c12d7e4639f21942cf2412f4f163d04b4672077fc588e2d394ecf3e9e7b8b71352f82f1fa7ed2b8f122358010d8800ccce41173cfe30cd68f2902160435c41284b632dcf2e03251142f2321eac78ceb5398bb650aa158385c277de286e7025ccb6fca93fefe8f9d9e43b1d4005e89414f82d8a603f2b4ad70482b63b580c557dcc85b269661e3c216697848650a6878ae6c172454f84b9cdf07b20f1b57c05b95d4f585b736bf63d8076765c7254d4756094d3bb3f59c946944d65acddfd67254956662f5f295ad763e16dcbd31bdbfb18e766aa5b3ac831fe56ef89d8a7c20a0f6848f232e5cd7c81be6997f4edca70ba7b1829aec9749b8ef1ec9ae4edfe20928435b650117199295c01aedd65f021655f78b342fd22cf47d58f5c65c15a04d90e1260e313fddfc11ad69de20b5933d12d7340d39cc4b18e2b66fee14ad07182a0535fa7a8a4b107c9e386590dfe1eda04c85c647f91efd3fada8066e163346ba1702b3c0d472b46fc3ec1b5702c5b15f4694b347ddbb702161ef1a1a6e2a1e7c3b2d4e28563ea65c7a1e8b6c474e7de075c4e48980daf7a3f3c241ec800ab568512933b251ba002def87a10e8abd89d29562fd570904b134dab4dfafc3376953106876ea416a15d48e492d2f3d017ed49f823ec1a1346b7dd2167671faa8026697c915b1770e227c44d968e3bd82e22c98199f042908262e83395cdc7b0b48e00fa4357a1a4c456627fff4669a9ba1235410ab16dab9079c47ebf17217d10646ec24886f6c72842f32edaa03044b42881caf9c97bb2f6150884063a5d5238885cad9f7b701eadece33da58ac53fac14bc1722fe004dcc214424a3dba596cf3c485b024e7dc25113e6ffdbe4372cb9b6631145b41ed0ec084ad6168a7c937f43350401286ffcedea5a172c89a263a0e2ff00a115bfee667a8727e544f7fcc05afbd68a417db950a1bc4de89ced7d3a371cd5bcb8bebaee17d0f756fa36b562c536693618df5a7476209da1368f112ba41fa135b2b97b1b2403844c9f38719cadafb35e42183b89de4c63721dfe9a9151a8aecc1614e5615d48c5f30293f5256d8b250505e6701108d944b5eaa24d214961bc299d10f83911bc1f5dfcbd9ee3108864a0240c350f81d78041cae31c8607cb191d834f38b58f327cf782724a542c6183fddf96e844b47e9078e404ce0ca3a0764c68e00b9d9fc98e229388f5c2304a6267346f99772832e30219cbd70c1eb50b9dff614d1a26933355ad4e3c05b7c8d40459a1fea206eee8c821d3a0649cb685e7adfd118b094158f8675a13f651365ea859ba60f6205e1d80e34316d6c513483b09d36d8d4b8c3cb4ca0011e8dbb73811ba0fd9f1da56a2bcd71681cb673e819db3e4865c8a95223f482930f8ff56f483cb16a3e0d2c5fc3b1114204fa3f9edfbf64fc7b5b91a70724a1ea9f116644bd9e131b4e84055c2d6ebbe6c825ec3bafa859631836ea4273fa22e18d2525fe92addb3b24582064ef241dcc58c2d08ac40ba4742fcecb34ef751757342ef846c7434f4315089ccc90b335a907d2dbdfb743060194b3ce8045e40a4b94c1dade3cdee0db452001fc8d48c3d4317f7814513d4e000033b96e20a2386ec4b7ad10d8294c689801d457de395e1f2549782b29d701ca813aa8ae52315740c38b14a560157bc9afe7e36f6e3cd970638a268594ca8a786923a5501e9268a02431f201586b8dc2471743b5820ebf6b9c85bfcfcec309afbe24cb07d2d296a95c5007b4fb9fdb0d260b6a1b1abe1bbca13f7f0080a33a97d1e780abb41330dd47b3b8a742f79bf90796206f30d5fc748d10dfc20f4989c2fccb947bccd1d912131c8b7f9c3c9d00ab7b40c556dcec349ccf1f3859be448dee6591642ee2ab379633bd066fe68e5c1213940255cf5fc06c4eb9e4082892a658ea94fbfdb9f38800df842b2f16aa081222471adfef08dd602adc9d780eee646c61e1f6dc5822b1053905c21792019ef91eacbd8bcfd301ce40683fe80d1cd8c08b28a4d0055d0461eb61b70923458515c823b03d927e380bfd92786bef1635a2ac7fc699a6cb369368314df9dbc421eaec52d671bb50d8611082abe14f7f5f65b14a790f56f17fc71812ff1569e3f3cf2c135789ef0d9df328b9652eda71f3bdbb20faa18f605a22b5a46a851c4a49fad7c858bae8449d4a99e73b58e02d74cebf5aebbcd1d61b02488360ddb04629e0a136bf493e3af5c88705a45bdb8402c954ce63b9d86ffcc4913e68740b28839b1bc555154024af32d6d19dc6d3e30ab7a4ba9c27f6b9fed2d29377821c43e02a5e47c169b9a0bbadec1a34d38979c33ffc65ba1402d1960385296f4b534a12bc8dc6d01af9247a74d5c4cacdbb07316dc4529b33a226082fc7872f82385032e05c57b85706af65d63ccb19fa0f25da39e449699448de13f9e6dbcf564bca5c55a4a80c0e5c7afdb60b7d838b47dbc455a35a7278aa2a14900f205ad52db717603a0929b36e7517c93f443cd71734642e78da6589e130d02807cd197baaa320daa12a8f367b00c3e5483b38340f94b36da027e7eb228869cf3c9b40a6e5a3758b1275dcf97c3c73a0c2185224e75f054eaba80892dfe79746cf3b004436e8aa0e3370e822d594113b4392bf0bafa3f96a1bc67969461e6c62ea7e149461cdeaa0d713eb71236b460eb194a3c00bde40acbeda149343cbb4d8386cb6707189243f7fc1bb9701366d6523be832d8fe038784ef1f5b2c531bbae32db33b05c17194502c6a86a93639356e9ab8f5815dea91d745854724b8fb0445b68fb2fa51837fc80fe29599c253e3dd68354de44af37be379a8564310e7f36bbcd95158de6d5e30161e6424cabf955f84e0867f10577a388deda2f1172d7032af64d601c9d4a2d512818f807193bcdbb7f380891e046cd5a67c33502b1932c17963414f9317e9fbf7699a33cfbea7a51e87c8f25440826d68c8532ebfb048cb3c22dbc07db2e31610332f89f7ddbbfff356adab52aa6652f2d11788230b7c7dfad18db55f99dd033748162aee468054a25d6f5c1d69caafbc2d0bd483e6e8f921272530735bee1e27e2352cd38943bddddc792f57352790de37b9307fdfbffa48b338e55137c543ea30735d77563917fcfa1079366cfbd009eee9e24923665ea612eab9bf509076436c20e12063c9d5e8f3c84a9695733623b132b2a3229c46745cea728576cc48407b47e89ac8255fa859b501dbe5499359c94896954dbc0dc28d141b824e5d4fb4136e0df764914cf43f15d85f7d62f76babc60d61a1321a98bd684d3ee36ea75667620afff679ea99a227cf0be8621f932ef43cd508cf99aacbea9473da443300040f3a802c444d1f09944f06b09a70cc78d132870a5e28c18b0157ed6054890be648d784615ff0218e2286f08663ef81a5fa4eb17b4a5a18bccbb983662ae1fd7bc4cfabcdf30a7e5365ab30c836a8aeb10023a647e6376dd22fe7aa08286e9f605502818383f916396e3314f7d971ab80c4e5343d84d10946403d57e07a6d1eb0f120a6aa1e7fa8d213a8adba2c8e178c905d9c6df75091500ad0ecda8d7f41dd2156298984c83ea735e8861d0bab679ba7ab0455ab4312d36f76836035660dd0728ecfcabc56c6c81e61f6141592d50b3826f90bba47cca739776bcf3562ea01459861558eaa5fd691b340bac6d85fbcba82e2f36236c3eb0af62c5a18783df743cefc7a68547a314b0aebfe12d220a2f51668006ef3a1e50b5e13b985bcf24bf952d643e6161c52042f5c4a35fb054f3673e0c722d96372cdb59eea726b591be9ba0d591068e1d1bf200a15d383ba40aa748fe4893f2d5a23e", 0x1000}], 0x4}}, {{&(0x7f0000001200)={0xa, 0x4e20, 0x3f, @empty, 0x14b9}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000001240)="3fecdccf1fb10b9c1aba33bc492273e68926da71280269a2a9585078fa33fa6de1296f48bd844605cb973e6d01bc53d1a7f5216047b6ba70b0d9125e973dd8b679c87204b50e5ebdaf92ef13d7da84d335c95e38f403f44e7c2bba226295269a181cdc2969a690ef5ec688ac2d1933b84f1c00cdf0559141cc3e8cb0d9c03074a59273a1d03075397a5554b18431a9088fcd6eb65ed6241869dd91cb8783ad19e4ccd49493dc6e59eb", 0xa9}, {&(0x7f0000001380)="94d5332c7cd6acb86a0f168b8595af4186e7ed384af4302baf19c62674a367a6ab1cc7b8b31c99e00fa158a4d58cec2cce2cb24cc76230a4e48e387b98b2aa0d4219848c1a92a93f894aacfbd00c2025f8b1964af636ae2e69976f1888e8cd97dfe231cfd2aef4430d18cc6b4005d2e761eaae3fa2225d3c2047d926efa31430a9a21931c79436f2b34870570705fbbdd1789a75cf2296a3e731adbfc1d9f24b9d29a16f99ab17f09cd0c66a0c02d5", 0xaf}, {&(0x7f0000001440)="6fe8d60a4765dfc6ef046087965b0a5c2348d5a2f87ef14b1f59f5388c6822362f33665deaa9a5e57364562fd624fc5daba3d32df4435b86aa30b42a9aaf65b55fdffff804720cbeb42c4055d93d90f4f02fff042e16edc12c21db5a9f8353109fa6c3f292a00e98af2ae40cab082b2ce557537fffdc99341592cfa3d29dc9175b786815e23a689381cde1c55393b116cfc7fd762211d2069868ccff33b0fd7d38d542fccd419a586f6b90fe715e875976b78cebfb528e19eb6280c7f440c475195eab2b9c9c6ac2a98a07e0da64eef008ca32a3c3ba745bece4cd37a15dc49c77bb6ffd7674d7", 0xe7}, {&(0x7f0000001540)="08871b1f3b6b59534df9449c549b2c1d4742b8d26389d3e05b767a37a1a76ce0253fbe1fead4cef90fb07b6f674868985db1ff918f04ca047144ebb6033850eaf133a58e247508d72987be31605f55243e698d", 0x53}, {&(0x7f00000015c0)="13246c4532aa52b94459c2a43d7289ea8994a95e30f876010d3158fa783cd3b78f084bdc2d97bc7db08be86407cc9d86c9efc2c4c082f6a0da7b6971bc85c95ba18ae9c720cf0d0e6e8fe7245457cf731fea45d6cc40118cabeaaa7390db165f30b493d10ab6ee405f837895afc78530aab5abefb43850b1e4f501403ff8467492c1abbc16aa6c54406006e86d9f5c8c2ecd7b450bac3ec3677e16f40ca991a03dcf2d6248a749add685977845e4764828914e183cffbe841cd66029ad13d0d1b54f89fc27ad33c3b4b40615d997b59559a58f50ba", 0xd5}, {&(0x7f00000016c0)="13ade6f82720099913711b6ced9bb7416e573b71e2a933a9359198a7379efe739058f0ecf17707bfebd8f9bf2ba5620d1f16fd31b42a970344adcf8335ce7a1824505c986c9e59f9d35f9ef1c30fbe65066db8ee568398f6ff64aa445a1fe3dcd7a5c374cc2a03ccba304cac6e", 0x6d}, {&(0x7f0000001740)="0530aa3f95b9e274ff74b8de0a7b56b73e22b982d3ba0d2e531fe34a49d8ffc6b9eb4084b021cf068e30b8c2e8f7771b623bde171802d825d66ea73d8fc2d000dbc802ac496b242bcbe640ab98afde81e60f03d98537b7b70497e25d807340bf9049436a87bec060683a", 0x6a}], 0x7, &(0x7f00000061c0)=[@hopopts_2292={{0x28, 0x29, 0x36, {0x87, 0x1, [], [@enc_lim={0x4, 0x1, 0x3f}, @enc_lim={0x4, 0x1, 0x8}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @dstopts={{0x120, 0x29, 0x37, {0x84, 0x20, [], [@hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}, @jumbo={0xc2, 0x4, 0x20}, @generic={0x84, 0x14, "de2761f7a4253c8eddcea746aa64a58f0e1c0fbf"}, @hao={0xc9, 0x10, @ipv4={[], [], @multicast2}}, @jumbo={0xc2, 0x4, 0x7}, @generic={0x5, 0x8f, "2b6758b50418b36be39f244abbd776e7f94a901bb7577228f2e2101a612b5827fe631fb87fe58863fb71a995fa5d5733c6c8d96903f19f0ba3e3b80bdecec5bd8e439a37aef78ef6996bbaea885c359a1101c7f6f45da496c2fc7d1342bfda0cf811e6b9c084d95e0fd90ce659a47527a64a9fe6e4b589a215993267c08663aa7c4539bf3112c6c6b6b5ad607ba5be"}, @calipso={0x7, 0x28, {0x3, 0x8, 0x3, 0x1ff, [0x2, 0x81, 0x8001, 0x200]}}]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x33, 0x0, 0x1, 0xe9}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @flowinfo={{0x14, 0x29, 0xb, 0x81}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, [], 0x1, 0x0}, r2}}}, @rthdrdstopts={{0x60, 0x29, 0x37, {0x3c, 0x8, [], [@jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x10, {0x0, 0x2, 0x47, 0x4, [0x29467cbc]}}, @ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x6}, @pad1]}}}], 0x258}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000001b40)="d8ddea8af0f581b022ca284b60e7b59480627addb2005ec6a784ac96c73c291f42f5eae0aa909864b2d4d66eef", 0x2d}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)="3263053a49a103177ba9a2e6031354de2815a906cc85673d3edef0bde15984e8b4ce8f0831c57c22c40c14934c4666ec5dbfbd677b42e36b7114dadad63ddc565015d4737c6af54f7dd036404dcad699818dad89eca3fe7c27b584c94b8a1f80e9bb74d9d00a26066fd7401b6be1e94f5ce6f357e4878bc783fc9468a8464c091af57900ea30ee56c2d90e4a3935a11ae52f76a4f785c912c17ddf2630fe9e0c0b02f88453d73ba7601adc153d0e53d3622eb960672133cb0767dd8605b7dd4e33ea0733a722d15a691d47af165694c923ef0ed05eb76ab7eb3c35b3", 0xdc}, {&(0x7f0000002c80)="db834d92399aabb30aa95d901db390a899460d6bdbb9f459b7358fe7af5a5f458dbd5fcbb283ec21663404ee579236ec118834592bd9db2d63aa63e3b8169827d91dac45d46e9f64af08375b0f17e7d1cf9efa635d6ca31def174ec36dee561bfbbc5c2cf03ee2a7cbabb5abc5d44ccd2d8856f7afd927955417fc158d0898df5916", 0x82}, {&(0x7f0000002d40)="e7205971a86d23a0f5eea8047d89fd7a37d6e2c9cf18d279cca367a20e882173ed6e6ebe6456bd9c3cfdf00825063b7825cac6b8cd39cc65c56f4d66607aef8c54acd99b00d5f6f90516ad96a39230d66d1451632a0b20c5eaa9256f6fd194808e1c67c013908165ffce3f6b41d4c5af06927cefb3b9dddf7532dfd9a8e0", 0x7e}, {&(0x7f0000002dc0)="c9621a31b1ec2e9322d1c3a69764f94fac11f0baf5c735699bd790c86eb37c548736f1d02534f24ce23bf38d5f55c2691f894b57cc0d35a8fbae6e3c777e001779c7dac8ecfe8653cd89841b58f158df5a914cd71358030f1e681844306649a55acb045d71cd08c72c4528215950c101ef160ba5587c8fd1df29ff918d904151dc3f10febae219a15d76086ec0ddab044f5d984f992b04fa79d75cd20d912e3fb4f8a6d5e3ab1fc0338fc462ccf09db6d0d9dfd23e3193da195340", 0xbb}, {&(0x7f0000002e80)="b8e21a194488047a1a309c08cff40e03dc2f53280150849f428324969752186b00e1941bc13a6a268ca7d4f981566228780819e4ebbda7f829ab4cd85a60bbd5afe0f5e83ec8c2031715164cc4091f85fdf685dc249710d81c2c312fddc59f1cb8d18a54720a960b0543bc6e39bf81ce1b9e87523e58adac3a", 0x79}, {&(0x7f0000002f00)="6fde9492fce53b79f3689f7b238c3cc4d15d4b47ddb88230b317fda0a8e4d6a90cd2ad928c0392643ba967300c93b7b8af", 0x31}], 0x8, &(0x7f0000004500)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1, r3}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r6}}}, @dstopts={{0x90, 0x29, 0x37, {0x0, 0xe, [], [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x2a, "ad2d7eb96a90c6c8cc19c2d310a9180433fa6a1c1b0960ceb8f10a65215e19602464f82e253d245d556e"}, @enc_lim={0x4, 0x1, 0x9}, @generic={0x40, 0x12, "206e76e90d0470ae4c6f49de5ee167556fb6"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x7, 0x9, [0x8001, 0x3]}}, @enc_lim={0x4, 0x1, 0x2}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x21, 0xa, 0x2, 0x9, 0x0, [@local, @mcast2, @mcast1, @remote, @mcast2]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x87, 0xc, 0x1, 0x20, 0x0, [@dev={0xfe, 0x80, [], 0xd}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr=' \x01\x00', @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2={0xfc, 0x2, [], 0x1}]}}}, @dstopts={{0x1040, 0x29, 0x37, {0x5e, 0x204, [], [@generic={0x3, 0x1000, "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"}, @pad1, @enc_lim, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x36}}, @enc_lim={0x4, 0x1, 0x3f}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1ff}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}], 0x1270}}, {{&(0x7f0000005780)={0xa, 0x4e21, 0x72, @remote, 0x8}, 0x1c, &(0x7f0000005ac0)=[{&(0x7f00000057c0)="70f3ba62e8110eba063e805198f45929c983b866ea567d88a61924f89eaa581f7ecb81064968899a3df9eef8407ba91c7f4a060a35ad6bed7fe9c305cd9c7e661a4a2b7c86c9558266d28cf79d87b5a7a3eadc4874dd3b1f7cc5a4aef190b7318859fa5ec5259a48028af3e466902e29f0eecbc7aa4232603ea053930aaa213ca4ab9e61bb82cf1f28fe8f96ef3d56d5e61c9328710d9e83d331da8624c69b5e2952a49074a370afa7d4505e77ee13bb61112061a1c103a89b9010b8dfc0a4ec65492c4899e429bca3852ab5b047a0b193a34725fcb026cc9b44ae0412cd1698d95dba3ec9994ac4c9c6731a316066c4ed16da", 0xf3}, {&(0x7f00000058c0)="216e59ac624415f298e65ee64933265974a355d1af04c0f17c28cf6ca89c2b1b10ca56f67cd9ad52a613f233cd910741584fa2f8167e46c9aa8fd9d6d5f4a8327c22357491b96586d8be8e58b3da9f8ec682c22d45b654711bf17cc04d4fa135b1756af0ed74bdeb", 0x68}, {&(0x7f0000005940)="66cc544dded6817602d8290249cff13969b70b9749af748d8eee39f267470647fc", 0x21}, {&(0x7f0000005980)="daa0eeedc51d4cff3c4041323c4540106a08783b7bc792239d15d6bb1727bee6f2c1b688f93e69b3836f4a1517b969a396a3a9e154da4eb7a8f7a939c32205ed0d1eb5b4ddff3d89a958d8b3c085efcb", 0x50}, {&(0x7f0000005a00)="17ccfaf339516b4de9e8744640ac230bcc8fa002d5e3946cff6d8658146b2a4cb9622dc36a9e60b270cb7ad9b32ddb070c78df9373ac47b96fdfea1389536d20f43514a0bb1079e35051bd37d23148a39fc885ac389556a879af3b809fe4aac03c681f174f596713dab8a0dfaa99a9fb361eb33e1db8eaae251ae2ad9afa08cc24d20125e568648ce536223560afefb7b4ea4185681715ca4edacdb7abcb667d9b9bfb77d35b684ebdbb70017320e3ed6d7c872fb49c84c7", 0xb8}], 0x5, &(0x7f0000005b40)=[@tclass={{0x14, 0x29, 0x43, 0x8}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x1, 0x12, 0x0, 0x0, 0x0, [@local, @empty, @mcast1, @mcast2, @mcast1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x32}, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}}}], 0xc0}}, {{&(0x7f0000005c00)={0xa, 0x4e21, 0x41ea1a0e, @private0={0xfc, 0x0, [], 0x1}, 0x2}, 0x1c, &(0x7f0000006140)=[{&(0x7f0000005c40)="c97141bebfa3fefbfb841ad22009c0a5b27e59c1c3902c1c9ab6d677971d30be541899ad029b2784f8b21011a61febc4e85bc10d879777b9e8f8fde3e74dcc97794e2d300634ed051ae9a97487b0835077b51e552ab57ef447cc0802a79963c831b59e48946e4d09060f9d5d9dd3d6c116619134f88dd34d51707a46ae30c3efd70e2a08fe1c6bd5f9041b0976b21941407eeb412493af1833ef421861ff35edb58c5a12200327a6d02d3e8a4d1d671e5b046e1f1bd9ac5901bbdb575f383c30501ba366", 0xc4}, {&(0x7f0000005d40)="ad7a72a489415455aa79c95cee615b1a0dc83eb16d34220e2ca826ec18e4a3bedca6e90e5b217253704528ed1739c89233ab7a12f2057e3986864666e269913af7d81594b8f07a10c94739bb56d5790da1929f2dfc26fa57784da9289285e6961929b96c8a54965bba68acf04c6d888bf21c5a6a28dea012241654a9aaf5fcdeb7660b03c9728850a27a0ebb2d9d8c8c0170453662d6b473edefd8678e20a58e312223d4157b872cd674786f0d287f81d65c74309293b17492d19045e185b6c5a57f9a13190e33dcfc852eb7a4b7399d0abaa3c5577295ca689ba892c5fac5725ab2dceb7936153e53a59f3b", 0xec}, {&(0x7f0000005e40)="b1c1", 0x2}, {&(0x7f0000005e80)="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", 0xfa}, {&(0x7f0000005f80)="27bbdf921299dd6f0943e8d0ed7a0cb7d13d369737341059ae18f489e1298b617d833722c0059195b3726ee30fabc33e9c93eb65f33e7e0ca7f1233cad59ea8f7d71c48e1e1fa9064e223f0e408e91b453d7f95704740bb9425b079e53224b955874f04995f6a8346d043120b56676a748bf7495643a4323d391eb92bc8059c1da90df7a84e08ce45d4a37766356ed59c748f33835e535e66c5465e23c31c375779fc5ea9f08c811891c1e0fa561feba48294df3b980509452cf", 0xba}, {&(0x7f0000006040)="de3c1927b3873e51c40fa6cf95dc2011b567ebe25482ee028d66ae2edf5a93fb344220d4f4956377c4a38cb1973d94c858b3d6b9a146ef83b77d466506dffb4a65a6affd2ac6ee007be3d41a86471e6208a9dcddfbd05a1a3f7052e87851104f6f50682c01d0c949acc6e1eaf3fa7a40a7cf0afb919d46559d0216c36b16261dacb67de261eb5dfabda619b43ab61d0120b39d6c68eafba35c734ea68aa26c11f14f328c4d3b56a647c19279d2af5ddc63305487cc0532eb539bef9a53f6720efbfeee8938ff99d12f644905ebab9464190d886d06afc936d5a355114b879e62487c85c8d12eff24922222cef0cedbd4d0ce5c0e", 0xf4}], 0x6, &(0x7f0000007500)=[@hopopts_2292={{0x28, 0x29, 0x36, {0x34, 0x1, [], [@jumbo, @padn={0x1, 0x1, [0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, [], 0x1}, r9}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x401}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x0, 0x1, [], [@jumbo={0xc2, 0x4, 0x401}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x7f}}, @hoplimit={{0x14}}, @rthdr={{0x48, 0x29, 0x39, {0xcd, 0x6, 0x2, 0x9, 0x0, [@mcast1, @private0={0xfc, 0x0, [], 0x1}, @private1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x200}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x3b, 0x0, [], [@ra={0x5, 0x2, 0x4}]}}}], 0x158}}, {{&(0x7f0000007680)={0xa, 0x4e24, 0x652a, @remote, 0x2}, 0x1c, &(0x7f0000007b80)=[{&(0x7f00000076c0)="64e9399b2affcffcef07c4150c2eaa1ebb1b30d33bfac6d2735ab9d669f4f161c48443eaac811417ab56fd7ff99d0d724cf28fdf3afa38b1f7b17a4a7ccae8585a3bf8e1ea5ad92dc61118b1bf1b6e4c4489ac6f6953d39eee641ae7262dda38ddb0b00aaa094848c516d89401da67367bb754bed41be26f7da1f1c19210d7560b32844dac5fa9e68068158688d6c5b33202ef11376b7e4a1646957d3762d3950f34ec66d398c2f3493272100923e01e17a668a72b50d0964d7c2bfb028ede629b8b7db4837e86fdb63f79dbcf85b0a1dfecd6937f3f", 0xd6}, {&(0x7f00000077c0)="b5da", 0x2}, {&(0x7f0000007800)="35aea8ee19", 0x5}, {&(0x7f0000007840)="f7bb2d7377bec3d1f85640541051353430844ff5162984010d540c7b1a3c6f9776b505aaac4f70cd23c78ba28f02b968e3205ad541591e7ec27eb1cacb59259b05ed619293a91c82e1c81fe89fd3ecda6e21dc667cba309d1653b7fe1d85633d1d41c8f0f73ad52e6c2f8399e258aaaee2b975e501e19ddf6f7cb7d5cf6da70ddddb", 0x82}, {&(0x7f0000007900)="a79872cf0be3cbec27e75ea3176c96e0ecee7d4dc6f2ae41f6a921c082c0288e3202c980f1586610b4559b5e932e09494c9597b600aaf75b78a815d8d9aa8bb36542d36a1c427ee2aececff1b72b747871fb610dfe9a54e5e8ada281e24ce6e16c6cb26209ab7c60ff02b46635f5e968f0a825d74a4697dd49a3238944b139240902209f5f3c4bee984212c4ba77705a08265af2e3ac61df51fa9a2b767e80f812588108568c4241e0ddbaf9440b192afde816e2f11b27ed941cb4e2facf80d12e4c", 0xc2}, {&(0x7f0000007a00)="7e666287cbdda4bc754c83abcb36d124dc138678f4d28655ddd819958a8c2d2f498c486745a60927a1081b7fc89305d119bc350d577aabd1c03afb0d0f48fd2b98e7a90b686de05036484d2b9c89d4939027b599a8fc754f6e6a16da8afcf09ab8818d7cf1e2d3b8333a730afdeb22db2d5047fb0f2ec824a547ba086804e3fa8a5667c5cc7cb3c73dc573da931d0b48cdf2888db71618b6cd03097a4c629789b6ef13ba039011ff843ea7737c44086d3b30c90c5fac9ae69d0a6ff0c66ed9094d35a914b5226da08b46b75b6bd5b6ae9329b1c23105060eede980642c06780a8915090ba1ca3078", 0xe8}, {&(0x7f0000007b00)="fba136e4a4e20af7c45e63b7b08385f4fa8398b7c1def1ba6dd4c8d2e5b0a998373381f466d798849d0ac399d12fec0a467cc48c1178ec65bbac2456d54af3019d9798e03aaa64c8b8ffbc5b0fd14d578b4deb5a9074a8bfef753b9b05a70293198cd1c6aff66440cea66e5b42e3caf26aae7d51f37c2ffaa173161d", 0x7c}], 0x7, &(0x7f0000002fc0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=r12, @ANYBLOB="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"], 0x1320}}, {{&(0x7f0000008f40)={0xa, 0x4e21, 0xfff, @private1={0xfc, 0x1, [], 0x1}, 0x2}, 0x1c, &(0x7f0000009080)=[{&(0x7f0000008f80)="abef3411b637300df07e47d9a6a0c44613e215a1f184531561712fb1016f14e2cd2e43abc6a743634ea1b936a1132faea322e8afa931e9c08592f7dec356618044460eecaebd6a5156a77b1b30f851cb70f01db6e116074cf16bea60287b89f00a50230fcce60cb0182f99fddd1ca48063fbdb78fd8288a10030268d02cf88ea3811fd", 0x83}, {&(0x7f0000009040)="ddf61aadf943cec78b0fdd56f9b23cd8882110471137b3010169", 0x1a}], 0x2}}, {{0x0, 0x0, &(0x7f00000091c0)=[{&(0x7f00000090c0)="a9e2b3639be7ef2ae565dcf851976d00425741e1eacbd0edc07915b646e30f241afc6bdef03e2e65811a2f6f38cc68b7e2a637c2f37238aff48909e44848d2e48e846aaea54ccb8a6a032f6b4d6d32e24ecc74533e759a5ca7f7eca18eeaf08ba008edf3b629c44fa9ea3e2986fbbe35eba8e145f97ceff2856e92acf5c110918a566997aaebb6c5a89b869114741924c3d61d007af80e01b082db0b654b013ced44782c01e9f1681ee4d41ed7a11a6f711d98cd69973ef48e352e4b4d48be7872bd33a6c65f229b88f952", 0xcb}], 0x1, &(0x7f0000009200)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x200}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x2c, 0xa, [], [@generic={0x8, 0x3e, "f3bf6680c7064226a42e4fe5f5129f4a4ab9c204bd5b8a80859dd6760b31a260f3616b69271ebcc8efde7959a6c125b214dc8d83ef7e5dc7b46f6781762f"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, [], 0x1}}]}}}, @dstopts={{0x38, 0x29, 0x37, {0x3b, 0x3, [], [@calipso={0x7, 0x18, {0x2, 0x4, 0xf9, 0x8, [0x5, 0x0]}}, @enc_lim={0x4, 0x1, 0x5}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2c, 0x0, [], [@pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x80}}, @rthdr={{0x38, 0x29, 0x39, {0x21, 0x4, 0x1, 0xff, 0x0, [@empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}}}], 0x130}}], 0x8, 0xc004) 17:46:09 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r3}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r3, 0x1, 0x20}, 0xc) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) 17:46:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000040)={0x101, 0x9, 0x100, 0xffffffff, 0x1, 0x7f}) r4 = dup2(r1, r0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x20000000000000d8) write$P9_RMKDIR(r5, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x20, 0x2, 0x1}}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 1091.223442] hfs: unable to parse mount options [ 1091.268958] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:46:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/806], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:10 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x881000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:10 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40885}, 0x48051) exit_group(0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101000, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r2, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r2, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) iopl(0x2) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) getsockname$tipc(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mq_getsetattr(r4, &(0x7f0000000100)={0x1f, 0x10000, 0x1, 0x6}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = gettid() r6 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') open(&(0x7f0000000180)='./file0\x00', 0x2, 0x119) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, r6, 0x0, 0x20000000000000d8) ioctl$PPPIOCSFLAGS(r6, 0x40047459, &(0x7f0000000040)=0x100000) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)=0x2) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) [ 1091.725234] hfs: unable to parse mount options [ 1091.731837] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:46:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:10 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7f}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:10 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4080840, 0x0, 0x0) [ 1092.062991] hfs: can't find a HFS filesystem on dev loop3 17:46:10 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x200) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000000)) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000000000000d8) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@remote, @rose, @rose, @rose, @default, @netrom, @remote, @null]}, &(0x7f0000000080)=0x48) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r4 = semget$private(0x0, 0x20000000102, 0x0) semctl$SEM_STAT(r4, 0x0, 0x12, &(0x7f00000001c0)=""/225) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000040)=[0xe31d, 0xffff, 0x0, 0x2, 0x9, 0x0, 0x101]) 17:46:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x8) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:10 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) wait4(r0, &(0x7f0000000000), 0x40000000, &(0x7f0000000100)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="02002bbd7000fddbdf250e0000000800060006000000080005007f00000014000380060007004e200000050008000600000008000400060000004400028005000d0001000000080005000300000008000900207600000800050007000000060002004e2400000800050007000000080003000400000006000e004e2400000c0002800800080002000000087c658bf5aed432e08d16b37dce993be4b1ebfd"], 0x90}, 0x1, 0x0, 0x0, 0x40010}, 0x20) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r3, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r3, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:10 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0x2, 0x8, 0x0, 0x2, 0x5, 0x3, 0x646d, 0x9, 0x2, 0x2, 0x40, 0x7ff, 0x0, 0x401, 0x1, 0x30, {0x8, 0x2}, 0x5, 0x1f}}) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r2, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00', 0x720}) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) sendto$inet(r2, 0x0, 0x0, 0x4080840, 0x0, 0x0) [ 1092.260783] hfs: can't find a HFS filesystem on dev loop3 17:46:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/806], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x2008008, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x1014423, &(0x7f00000015c0)={[{@type={'type', 0x3d, "27a900"}}, {@gid={'gid', 0x3d, 0xee00}}]}) 17:46:11 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppoe(r3, &(0x7f00000002c0)={0x18, 0x0, {0x4, @random="e9df634cb5ea", 'macsec0\x00'}}, 0x1e) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x2, 0x0) connect$tipc(r4, &(0x7f0000000280)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x2}}, 0x10) accept4$netrom(r1, &(0x7f0000000180)={{0x3, @rose}, [@default, @default, @bcast, @null, @null, @rose, @rose, @netrom]}, &(0x7f0000000200)=0x48, 0x80800) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r6 = dup2(r0, r5) ioctl$VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f0000000040)={0x6a, 0x0, 0x8000, 0x4, "06b55604643a823334747b55b439ac16f82f059dd0accc853225ccb7a0d8e92098bea718570e0bebe779e4bcf55c5214de437cde392324c316b121de9435db526dc0802483128a53549336def8c8dee4c135"}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pread64(r0, &(0x7f00000000c0)=""/189, 0xbd, 0x7) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65) 17:46:11 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x881000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:11 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x1, 'ip_vti0\x00', {}, 0x3}) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:11 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffff49, 0x22040ffd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x800, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x1f, @mcast1, 0xffffff80}}, 0x6, 0x9, 0x200, 0x2, 0x4, 0x5d2c665f, 0x6}, &(0x7f0000000300)=0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000340)={r5, 0x34, "c915d3a49959a8e06f67483264307011bbbf7d6ff32ed34e9bac506de0bff45a25fe96718736ca6d89dd90571f21e247bac5532f"}, &(0x7f0000000380)=0x3c) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f0000000100)=""/35) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000000)) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x40001) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x1, @remote}}, 0x1e) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x32) connect$inet6(r4, &(0x7f0000000700)={0xa, 0x4e23, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}, 0x1c) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}, {&(0x7f0000000100)=""/88, 0x58}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000180)=""/194, 0xc2}, {&(0x7f0000000280)=""/134, 0x86}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f00000004c0)=""/162, 0xa2}, {&(0x7f0000000580)=""/227, 0xe3}], 0x6, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:11 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x1, 'ip_vti0\x00', {}, 0x3}) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) [ 1093.248392] hfs: can't find a HFS filesystem on dev loop3 17:46:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) socket$netlink(0x10, 0x3, 0xb) [ 1093.360949] hfs: can't find a HFS filesystem on dev loop3 17:46:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="747970653d5046f65e2c6769643d", @ANYRESHEX=0x0, @ANYBLOB="cfa2"]) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) 17:46:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000413b7d04700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000005400000000000000000000000000380074696d650000000000000000000000000000000000000000000000f1000000000000ffffffff4f970000000001000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000cf000000000000380071756f74610000000000000028372b75893eda63000000000000000000000100000000000000470d0000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000edffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800"/806], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x4000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendfile(r5, r4, 0x0, 0x20000000000000d8) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 17:46:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) [ 1093.546491] hfs: unable to parse mount options 17:46:12 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffff49, 0x22040ffd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r1, &(0x7f0000000580), 0x3c1) r2 = dup(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x42000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0xa02080, &(0x7f00000002c0)={[{@dir_umask={'dir_umask', 0x3d, 0x1}}, {@gid={'gid'}}, {@quiet='quiet'}, {@umask={'umask', 0x3d, 0x2}}, {@type={'type', 0x3d, "7746ebae"}}, {@quiet='quiet'}, {@type={'type'}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@creator={'creator', 0x3d, "5fc5ac55"}}, {@file_umask={'file_umask', 0x3d, 0x6}}]}) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000100)='hfs\x00', &(0x7f0000000140)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) 17:46:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0xa30000, 0x4, 0x0, r0, 0x0, &(0x7f0000000080)={0x990a92, 0x5, [], @p_u32=&(0x7f0000000180)=0xd35}}) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000140)) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_opts(r3, 0x0, 0x8, &(0x7f00000001c0)=""/69, &(0x7f0000000000)=0x45) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x420, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}}, 0x4015) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup2(r3, r0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x9) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc7, 0x4000) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000100)=""/235) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) fcntl$dupfd(r0, 0x406, r2) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r1, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup2(r1, r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xb) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:12 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x18d042, 0x0) mknod(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000600)='./bus\x00', 0x22, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) exit_group(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4053, 0xfd5}], 0x1, 0x0, 0x0, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) 17:46:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff007f3b372618ac0b755795d500000cff000000e0d843f10feff8d04c5210152be2de66107cdd7f104acec0ef00aae48f643fc6a9f29a84c250", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400203) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) 17:46:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000413b7d04700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000005400000000000000000000000000380074696d650000000000000000000000000000000000000000000000f1000000000000ffffffff4f970000000001000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000cf000000000000380071756f74610000000000000028372b75893eda63000000000000000000000100000000000000470d0000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000edffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000fe"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000140)=[{&(0x7f00008f9f09)=""/239, 0xef}], 0x1, &(0x7f0000000100)=[{&(0x7f0000217f28)=""/226, 0xe2}, {&(0x7f0000000040)=""/184, 0xb8}], 0x2, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 1094.439180] audit: type=1800 audit(1593971172.914:280): pid=32766 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=17420 res=0 [ 1094.444127] hfs: unable to parse mount options 17:46:13 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}}, 0x40048800) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x0, 0x300, 0x70bd29, 0x25df5bfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz2\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x13) 17:46:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r2, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000d7, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0xfa20000, 0x3ff, 0x2, r0, 0x0, &(0x7f0000000040)={0x9b0953, 0x6, [], @p_u32=&(0x7f0000000000)=0x2}}) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000000c0)) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:13 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffff49, 0x22040ffd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup2(r2, r0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) connect(r4, &(0x7f00000006c0)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = gettid() r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x2000, 0x0) recvmsg$can_raw(r6, &(0x7f0000000680)={&(0x7f0000000140)=@ipx, 0x80, &(0x7f0000000500)=[{&(0x7f0000000940)=""/102400, 0x19000}, {&(0x7f0000019940)=""/196, 0xc4}, {&(0x7f00000002c0)=""/226, 0xe2}, {&(0x7f00000008c0)=""/96, 0x60}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/93, 0x5d}], 0x6, &(0x7f0000000580)=""/197, 0xc5}, 0x40000100) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r7, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) accept4$x25(r7, &(0x7f00000003c0), &(0x7f0000000400)=0x12, 0x80800) prctl$PR_MCE_KILL_GET(0x22) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000a2000000a2000000070000000d0000000900000f0200000004000200000200000001000000050000000100000005000000800000000500000001000000000000b99c000000030000000200000004000000ff030000ff0700000400000005000000bb0c000004000000000000000300000003000000feffffff7d000000dfa2020000000000000b02000000010000000000000e0200000001000000000000005f0030610000000000000000"], &(0x7f0000000840)=""/98, 0xc3, 0x62}, 0x20) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 1094.890468] hfs: can't find a HFS filesystem on dev loop3 17:46:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x7) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x4208c, &(0x7f00000015c0)) 17:46:13 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/235, 0xeb}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:13 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffff49, 0x22040ffd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="747970653d5046f65e2c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00e54dc3f75467fa9afd16c44fd65fad271355380e44a7ac94812bdde6551443b32a037011cc64f798614513332f4bd48c73f0d8cae925c4c099d2987d3e40166557d81e995b4e106e564b5c888c73efcdac1314ee7581b256d2eeb7d88b1a3799ef873b2d48af827aad8a1fa9d59382e80f1d958bd58baca60fa666b005e501be113d1ae11d248a07"]) 17:46:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000040)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) [ 1095.481536] hfs: can't find a HFS filesystem on dev loop3 17:46:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x4e, &(0x7f0000121000)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x688000, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb) 17:46:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0x7, 0x4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup2(r3, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xfffffffffffffffc) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) sched_setscheduler(r5, 0x4, &(0x7f0000000040)=0x6) r6 = socket$phonet(0x23, 0x2, 0x1) r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000080)=r7) 17:46:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f00000002c0)={0x0, 0x9, 0x100000000, 0x1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000000000d8) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000280)={0x40000010}) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="90205c6c3aafaa00f99200"]) r6 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000e80)='F', 0x1, r7) keyctl$unlink(0x9, r6, r7) r8 = add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="9c28f342144530b746a49956a9d913ae98b46bf64ae04b699b24f79a0fd33df0650402f0f740e533f95775e69d3f80fd1827ab52e991e1d6bcb0739e8b5829d09af67a8feb1807ebc2804071b75c347168173e82c4ef377611599ab0afb70d138737856982b6e7fd2f7f63060dcbe78b929689e0c4767047b7292db7058c4080e3ffa67ca176cbcac6048bd9dadeded76f738c3d65fe01d6783460402cf527d4391dc1ff0371968029d79d3e919347ce364ea40e4b06bcf78028", 0xba, r6) keyctl$setperm(0x5, r8, 0x0) 17:46:14 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x7}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x5e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x4d, 0x20040081, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) [ 1096.200844] hfs: unable to parse mount options 17:46:14 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x881000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000080)={0x6, 'wg1\x00', {0x6}, 0x1000}) getrusage(0xffffffffffffffff, &(0x7f00000000c0)) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) [ 1096.297641] hfs: unable to parse mount options 17:46:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000080)=""/201) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@type={'type', 0x3d, "00001000"}}, {@umask={'umask', 0x3d, 0x404}}]}) 17:46:14 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) r1 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)='*$+\x00', 0xfffffffffffffff8) r2 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000002c0)="808c507d560b56d94b1d498f76c06459d3f3d7de43c7a8c4fe384b6ff06141bb18af3841c2457f995858945974f8ac7164b3845bd636384b271a6b4a63da847a11e2dcb82519d8d435cba9c3ab76438039d1bc9dcc49c264c086066ba56f675aa2689377d05c4b3a66ee9c9baebfee810ba3145dea00ee36ea076a21ca64942da1b83452847a2aaf1c225715f9df7eea497a72f9aec110ee8185b5e773148e1c892fa2444cef03d6f7cc29ac309ab4ff4571e6257a3c25105c", 0xb9, 0xfffffffffffffff8) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x6a, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1, r2, r4}, &(0x7f0000000380)=""/233, 0xe9, &(0x7f0000000580)={&(0x7f0000000200)={'ghash-generic\x00'}, &(0x7f0000000500)="e6355ad9e62dcd1f467f1ee2a4f4876eed4a2c61ed4226d485aaccb834081b8f9ca432e27cebdbabed38092c1a0e08c5f2f48fecfd6610102626a0e5697fc79b02235016cf62defcdc67672c4b904c655df55a9b79c61705d0ea4a666fa27614ab1c67c5ee0d10e2d3f0d73208", 0x6d}) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:14 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x881000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 1096.755224] hfs: unable to parse mount options 17:46:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffeffff, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0xfdffffff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:15 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x980000, 0x1, 0x7fff, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990a2c, 0x8000, [], @p_u32=&(0x7f0000000000)=0x1f}}) sendto$inet6(r3, &(0x7f0000000140)="15b2157c762d635bc28f1f386648d218cb674ca1a10f4da60b3c4894b827a266d27d7137505aba8df5834bdb3a781d1ef032e9c93dd8fc9bb64a4a5bf978474c0767d5139f169ab4985f67569345078cbcc50bf654cc245689c309e1ac2b3f58f0acb601e9f12afb1f0289f124b772677269aac7a528c34dcc602f82b6b757ff1966696e92168c86b027f6a52a3b197de30a36a1465b70edb472a5771a6fc0bf63bbf0b6", 0xa4, 0x4, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) [ 1096.875118] hfs: unable to parse mount options 17:46:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10181, 0x0) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x800) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:15 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x881000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)=""/72) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup2(r3, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() process_vm_writev(r5, &(0x7f0000000040)=[{&(0x7f00008f9f09)=""/231, 0xe7}], 0x1, &(0x7f0000121000), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x6, @remote, 0x5}, @in6={0xa, 0x4e23, 0x2, @mcast1, 0x8000}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0xd9, @private1={0xfc, 0x1, [], 0x1}, 0x5}], 0x64) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:15 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x2000108) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000080)={0x727e0a6186befee6, {0x15, 0xf74, 0x7, 0x580}}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001340)=""/4067, 0xfe3}], 0x1, 0x0, 0x0, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4fe3c68bd83050022b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x4d, 0x42000, 0x0, 0xffffffffffffff06) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) [ 1097.123945] hfs: can't find a HFS filesystem on dev loop3 17:46:15 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x881000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) gettid() r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, r6, 0x0, 0x20000000000000d8) ioctl$VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f0000000200)={0x27, 0x3, 0xdd5, 0x1000000020000, "8becf6bca7f2b7434c50767eb3a282"}) sendfile(r5, r4, 0x0, 0x20000000000000d8) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f0000000180)=0x4) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f0000000040)=""/249, 0xf9}], 0x1, &(0x7f0000000180), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000001c0)={0x8, 0x1000, 0x1, 0x10001, 0x14, "526ed75b21060977f7081abd309f94e9a47a05"}) [ 1097.211615] hfs: can't find a HFS filesystem on dev loop3 17:46:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) openat(r3, &(0x7f0000000180)='./file0\x00', 0x20000, 0xa) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x20000000000000d8) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000080)={0xffff, 0x0, 0x3, {0x0, @pix={0x2, 0x10001, 0x52424752, 0x7, 0x4, 0xf63d, 0xc, 0xb09, 0x0, 0x4, 0x0, 0x7}}, 0x401}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x4840, 0x0) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x8) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000000c0)={0x80000001, &(0x7f0000000040)="0126ddfb56782a331b68300c66a5de6572a6e71a8081514e6421f97d80a4c5c2d759b8a06add1ef3c0a4d5f10c8a2043789f72a90298fd04c7501c68b1b135b6e14cc2d08781c99f3e94fa067333b8d6ee6ca5c9142758664899cab9fdbb9a156a0cb6781ff3a6b15c3a715f848563a77309417d61d92be347"}) r4 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 1097.510972] hfs: can't find a HFS filesystem on dev loop3 17:46:16 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x2000108) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000080)={0x727e0a6186befee6, {0x15, 0xf74, 0x7, 0x580}}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001340)=""/4067, 0xfe3}], 0x1, 0x0, 0x0, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4fe3c68bd83050022b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x4d, 0x42000, 0x0, 0xffffffffffffff06) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) [ 1097.743855] hfs: can't find a HFS filesystem on dev loop3 17:46:16 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x2000108) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000080)={0x727e0a6186befee6, {0x15, 0xf74, 0x7, 0x580}}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001340)=""/4067, 0xfe3}], 0x1, 0x0, 0x0, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4fe3c68bd83050022b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x4d, 0x42000, 0x0, 0xffffffffffffff06) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000080)=0x9, 0x4) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:16 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x7, 0x9, 0x80, 0x6, 0x0, 0x3e, 0x2, 0x301, 0x38, 0x20, 0x10000, 0x8, 0x20, 0x2, 0x80, 0x2, 0x7ff}, [{0x4, 0x3, 0x5, 0x0, 0x0, 0x3, 0x7, 0x9}], "4534b1f2961daa07ce250f8a3a145750bdf40d7daad6e77481b3540e4ec5daa74ab85865423ac4b560dd5e871c529a530b99c19f744972490472840c7d593cc846356b55d3e332c98b7cee98ba3f75a267bb05040e93ca2800a3540c497e850ba5b8a674912eee2ca3fafaee", [[], []]}, 0x2c4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) r5 = accept4$bt_l2cap(r3, &(0x7f0000000300), &(0x7f0000000340)=0xe, 0x180c00) ioctl$sock_ifreq(r5, 0x8971, &(0x7f00000003c0)={'gre0\x00', @ifru_settings={0x1, 0x81, @fr=&(0x7f0000000380)={0x8, 0xff, 0x56b, 0x2, 0x0, 0x1ff, 0x2}}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) [ 1097.861085] hfs: can't find a HFS filesystem on dev loop3 17:46:16 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000040)=""/10) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x20000000000000d8) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000001c0)) sendto$netrom(r5, &(0x7f0000000280)="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", 0x13e, 0x44110, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x48) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:16 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x7}, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x10) sendto$llc(r2, &(0x7f0000000180)="841baccebb97b7c3dae39b5b4b711f3fd7e69e546b3d5badce294483f4cfb7f7baf2f333424332154c1b25e45a50f5f210a1cc801b0e6ac18f60116634f9b5ab6c3d96f5ff1bc97942830b49906e17dca69df63c78c1247b20a2410ac10a323b41cf8e8154100b72be8ff986ab7d009dd237768f25d23c5073d5c31545bd94c146dc955ad8116d26", 0x88, 0x800, &(0x7f0000000240)={0x1a, 0x104, 0x9, 0xb9, 0xc6, 0x1, @local}, 0x10) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="747970653d5046f65e2c6769643d", @ANYRES16=r1, @ANYBLOB="a4c6e9526e107ec67cb6912d47d7f5af2fba23929fb37aa84beb6f54ce03379660281c8825b8236e07f7d3311a068825b5833a3cf056b243b004dfe08a6c1ec963a14d1ed55db50d75b6b266dd79630c0a55aa096bf62fee5ba8a3219674bd29de16edafe0ea43c513602e5fc3c50c6e8202e83b656a2641cc79a7a2131e56b74a101e5cd636311a1ceed25a7add9a6c4b9d85f6449c9e4e3c89fea42384427dc2230e8f4c5b9b65a0da55786fc3c7708adad826a623caf124b45d6c132801790e1ec7d6c037e6ba4d81c5d26afbbe61e8e4cba857ac"]) [ 1097.977698] hfs: unable to parse mount options [ 1098.033841] hfs: unable to parse mount options 17:46:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000000000)='./file0\x00', 0xd2ad, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xffffffff80000001, 0x20400) [ 1098.141211] hfs: can't find a HFS filesystem on dev loop3 [ 1098.199500] print_req_error: I/O error, dev loop3, sector 0 [ 1098.205393] Buffer I/O error on dev loop3, logical block 0, async page read [ 1098.219877] print_req_error: I/O error, dev loop3, sector 3 [ 1098.225737] Buffer I/O error on dev loop3, logical block 3, async page read [ 1098.233161] print_req_error: I/O error, dev loop3, sector 4 [ 1098.238957] Buffer I/O error on dev loop3, logical block 4, async page read 17:46:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) [ 1098.246154] print_req_error: I/O error, dev loop3, sector 5 [ 1098.251875] Buffer I/O error on dev loop3, logical block 5, async page read [ 1098.269852] print_req_error: I/O error, dev loop3, sector 6 [ 1098.275727] Buffer I/O error on dev loop3, logical block 6, async page read [ 1098.283193] print_req_error: I/O error, dev loop3, sector 7 [ 1098.288979] Buffer I/O error on dev loop3, logical block 7, async page read 17:46:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={r6}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r6, 0x3, 0x80}, &(0x7f0000000040)=0xc) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0xe9, 0x400) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000280)) r3 = dup2(r1, r0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x400004}) setsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000200), 0x4) r6 = accept4(r4, &(0x7f0000000080)=@hci, &(0x7f0000000100)=0x80, 0x80000) setsockopt$packet_buf(r6, 0x107, 0x2, &(0x7f0000000140)="26c690f24abeec54b11388db9fb506f1ecc6c365e938b03a555e910e71560294bee0842702ac94cd93fa082d7df923a2c0e33ab8c287e705f22c1ddb0fa5aee3425264c86722e85c0c8e213a1fb370d9bf0c173ef593f75faeeceb247c387301a90afa4fcc2cd344b746bb8cf489dfe8c628edd6578325dc276d0e8e239a4e6ea4486cac0764f26677b5f99362aaef5b646a90e2745b3b69952f2d01c4de728652541c91", 0xa4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r7 = gettid() ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x29) process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40000, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x9) [ 1098.377006] hfs: can't find a HFS filesystem on dev loop3 17:46:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 1098.421898] hfs: can't find a HFS filesystem on dev loop3 17:46:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 17:46:17 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000040)=""/10) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x20000000000000d8) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000001c0)) sendto$netrom(r5, &(0x7f0000000280)="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", 0x13e, 0x44110, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x48) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 1098.553112] hfs: can't find a HFS filesystem on dev loop3 17:46:17 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x881000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x72e, 0x58200) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) sync_file_range(r1, 0x7fffffff, 0x6, 0x5) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f00000001c0)={0x3, 0x1, 0x3000000}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000180)) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000140)=0x1, 0x4) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="747970653d5046f65e2c6769643d", @ANYRESHEX=0x0, @ANYBLOB]) 17:46:17 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000640)={0xdbc, {{0x2, 0x4e21, @private=0xa010102}}, 0x0, 0x3, [{{0x2, 0x4e21, @empty}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @local}}]}, 0x210) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) [ 1098.767474] hfs: can't find a HFS filesystem on dev loop3 17:46:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) dup3(r2, 0xffffffffffffffff, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="747970653d5046f65e2c6707643d", @ANYRESHEX=0x0, @ANYBLOB="6cfeaf2e1b00006b033db09a7be095b81aa739638d1a05a53b155de163271ccf26c678320b2196aff163700ea9297905f133a5d827d4246e7bc293b6970e4630f889281d4201316907036ace8d9b7c0ea2216afbfea6aa8afc6756781ce307cfbfe026f6665446"]) 17:46:17 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x881000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 1099.078636] hfs: unable to parse mount options 17:46:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000413b7d04700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000005400000000000000000000000000380074696d650000000000000000000000000000000000000000000000f1000000000000ffffffff4f970000000001000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000cf000000000000380071756f74610000000000000028372b75893eda63000000000000000000000100000000000000470d0000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000edffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffff"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:17 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000640)={0xdbc, {{0x2, 0x4e21, @private=0xa010102}}, 0x0, 0x3, [{{0x2, 0x4e21, @empty}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @local}}]}, 0x210) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:18 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x44, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x6cf}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001340)=""/4067, 0xfe3}], 0x1, 0x0, 0x0, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1000, &(0x7f00000002c0)=ANY=[@ANYBLOB="74ac773d636c69656e74266d61ffff00005845432c6d7900"/40]) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000180)=0xc) syz_open_procfs(r3, &(0x7f0000000200)='map_files\x00') 17:46:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:18 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000640)={0xdbc, {{0x2, 0x4e21, @private=0xa010102}}, 0x0, 0x3, [{{0x2, 0x4e21, @empty}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @local}}]}, 0x210) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) [ 1100.113456] ip_tables: iptables: counters copy to user failed while replacing table 17:46:18 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x881000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:19 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000000000000d8) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100)={0x27, 0x1, 0x0, 0x7, 0x0, 0x1, "b071f4f80366720098252cee8b96e5e9bed599d5713815c0ae3c603b6d36cfbe79a01e2d4e9013d9e6b744e630970ef7e17cd2e3de5b919f08d0f498f6c7ce", 0x11}, 0x60) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U-'}, 0x16, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$key(0xf, 0x3, 0x2) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r1, 0x0, 0x0, 0x4080840, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x18080) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) 17:46:19 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000000000000d8) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100)={0x27, 0x1, 0x0, 0x7, 0x0, 0x1, "b071f4f80366720098252cee8b96e5e9bed599d5713815c0ae3c603b6d36cfbe79a01e2d4e9013d9e6b744e630970ef7e17cd2e3de5b919f08d0f498f6c7ce", 0x11}, 0x60) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U-'}, 0x16, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$key(0xf, 0x3, 0x2) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r1, 0x0, 0x0, 0x4080840, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x18080) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) 17:46:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) [ 1101.020109] ip_tables: iptables: counters copy to user failed while replacing table 17:46:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x0, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x20000010) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00007be0c274dd0c5a61f6881a8200000000", @ANYRES16=r2, @ANYBLOB="04002abd7000fbdbdf250400000014000300000000000000000000000000000000002300070073797374656d5f753a6f626a6563745f723a6661696c6c6f675f743a73300000080004000a0101000800050064010100"], 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x800) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}}, 0x40048800) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r4, 0x300, 0x70bd29, 0x25df5bfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x8004) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) [ 1101.477758] hfs: can't find a HFS filesystem on dev loop3 17:46:20 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000440)={0x0, 0xe30}, &(0x7f0000000500)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="daeabe30e6b8f3ab7fc390f90e8723a5", 0x10}, {&(0x7f0000000140)="aa0db9a87a20a7d5add0f8a6fe38033428f243614345a735faf7ea26bb66de3ec9eb03fb46", 0x25}], 0x2, 0x0, 0x0, 0x4004001}, {&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x20, @mcast1, 0x8}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000200)="04955ff754f928fa65958bd3e0eb5b723b5749622848627ce58940d57926042eb7d058f736d3", 0x26}, {&(0x7f00000002c0)="67bf504a187087765e9fda5be1c11abd91419e875fb69e", 0x17}, {&(0x7f0000000300)="d0b4c900e70d244f31b5c25af261a70220f9ee620db056a2460ea65de5c5dd31f3b54d93a10f36", 0x27}, {&(0x7f0000000340)="33282549c10656fb6d84050180f76114057e0eccf0311c61043b49c8323fa0828897ba6f966b116aea3a79935188eac104157da6c0a0900066359e5789ccc2d09f20f1105f9fde08872f80fc45d0968afc99368664af0286bda3c8a1f3894533fbf25659fb8a563571a08fe5e44de0b53212a18b1a6a2d3f49ffa62013bf97f83f6bf6a033f22bd9db3709504b7a34f31eb152", 0x93}], 0x4, &(0x7f0000000640)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x4}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @init={0x18, 0x84, 0x0, {0xa8c, 0x400, 0x7, 0x8001}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8002, 0x7, 0x8001, r2}}, @authinfo={0x18, 0x84, 0x6, {0x5}}], 0xd8, 0x4000801}], 0x2, 0x20000004) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:20 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000440)={0x0, 0xe30}, &(0x7f0000000500)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="daeabe30e6b8f3ab7fc390f90e8723a5", 0x10}, {&(0x7f0000000140)="aa0db9a87a20a7d5add0f8a6fe38033428f243614345a735faf7ea26bb66de3ec9eb03fb46", 0x25}], 0x2, 0x0, 0x0, 0x4004001}, {&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x20, @mcast1, 0x8}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000200)="04955ff754f928fa65958bd3e0eb5b723b5749622848627ce58940d57926042eb7d058f736d3", 0x26}, {&(0x7f00000002c0)="67bf504a187087765e9fda5be1c11abd91419e875fb69e", 0x17}, {&(0x7f0000000300)="d0b4c900e70d244f31b5c25af261a70220f9ee620db056a2460ea65de5c5dd31f3b54d93a10f36", 0x27}, {&(0x7f0000000340)="33282549c10656fb6d84050180f76114057e0eccf0311c61043b49c8323fa0828897ba6f966b116aea3a79935188eac104157da6c0a0900066359e5789ccc2d09f20f1105f9fde08872f80fc45d0968afc99368664af0286bda3c8a1f3894533fbf25659fb8a563571a08fe5e44de0b53212a18b1a6a2d3f49ffa62013bf97f83f6bf6a033f22bd9db3709504b7a34f31eb152", 0x93}], 0x4, &(0x7f0000000640)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x4}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @init={0x18, 0x84, 0x0, {0xa8c, 0x400, 0x7, 0x8001}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8002, 0x7, 0x8001, r2}}, @authinfo={0x18, 0x84, 0x6, {0x5}}], 0xd8, 0x4000801}], 0x2, 0x20000004) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) [ 1101.601038] hfs: can't find a HFS filesystem on dev loop3 17:46:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x19) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$FIOCLEX(r3, 0x5451) ioctl$TCFLSH(r2, 0x540b, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x37}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb5e0}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x373}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1d}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x4) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) [ 1101.853084] hfs: can't find a HFS filesystem on dev loop3 [ 1101.891809] ip_tables: iptables: counters copy to user failed while replacing table 17:46:20 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x600, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r4}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='.\x00', 0x0, 0x0, 0x0, 0x22043, &(0x7f0000000280)=ANY=[@ANYBLOB='euid<', @ANYRESDEC=0xee00, @ANYBLOB=',dgYcontext=staff_ul\x00']) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r6 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x14, r6, 0x400, 0x70bd28, 0x0, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r6, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048800}, 0xc000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, r2, 0x0, 0x20000000000000d8) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0xfffffffb, 0x4, 0xff, 0x8, 0x81, 0x2, 0x6}) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$sock_inet_SIOCGARP(r8, 0x8954, &(0x7f0000000080)={{0x2, 0x4e24, @rand_addr=0x64010102}, {0x6, @remote}, 0x2, {0x2, 0x4e21, @multicast2}, 'macvlan1\x00'}) 17:46:20 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RXATTRCREATE(r1, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @remote, @private}, &(0x7f0000000140)=0xc) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) ptrace$setsig(0x4203, 0xffffffffffffffff, 0x8328, &(0x7f0000000000)={0x11, 0x6, 0x101}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0x9e0000, 0x6, 0xffffffee, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990a63, 0x8000, [], @p_u16=&(0x7f0000000080)=0x9}}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) 17:46:21 executing program 1: r0 = socket$isdn(0x22, 0x3, 0x36) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r1, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:21 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r2 = accept4$x25(r1, &(0x7f0000000000), &(0x7f0000000080)=0x12, 0x800) accept(r2, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000180)=0x80) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:21 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r2 = accept4$x25(r1, &(0x7f0000000000), &(0x7f0000000080)=0x12, 0x800) accept(r2, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000180)=0x80) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:21 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000000000000d8) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x424}, 0x1, 0x0, 0x0, 0x40801}, 0x30000010) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=""/173, 0xfffffffffffffffd, &(0x7f00000002c0)=""/213, 0x3000}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r3, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r3, 0x0, 0x0, 0x4080840, 0x0, 0x0) [ 1102.604401] hfs: can't find a HFS filesystem on dev loop3 17:46:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:21 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="0000a964", @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf250b0000003c00098008000200030000000800010001000000080001000400000008000200080000000800010003000000080002000500000008000200000100000c00038008000300ffffffff440004801300010062726f6164636173742d6c696e6b00002c000780080001000600000008000400050000000800010010000000080003000000000008000200080000005c0104800900010073797a30000000005400078008000300fbffffff08000200ff000000080003000400000008000400110000000800040001000000080003000600000008000400020000000800010012000000080004000001000008000300e400000054000780080002000000000008000200530500000800020020000000080001000700000008000200ef0000000800030000030000080001000700000008000400010400000800040000000100080002005bad0000440007800800030002000000080002000010000008000200fdf00000080004007f00000008000300000000000800020009000000080004000000000008000400ff0300001c0007800800010012000000080002000104000008000400001000000900010073797a30000000000900010073797a30000000000900010073797a30000000000900010073797a30000000001400078008000200010000000800040000000000240004801300010062726f6164636173742d6c696e6b00000c00078008000100170000005000028008000200010000004400038008000100ff7f000008000100860000000800020002000000080002000900000008000200070000000800020009000000080001000600000008000200060000000c000780080001000000000034000980080001000004000008000200020000000800020020000000080002000500000008000200010000000800010000000000"], 0x2b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000200)={'U+', 0x400000800000}, 0x16, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r2, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000000000000d8) accept4$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000001c0)=0x10, 0x80000) sendto$inet(r2, 0x0, 0x0, 0x4080840, 0x0, 0x0) [ 1102.742017] ip_tables: iptables: counters copy to user failed while replacing table 17:46:21 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x881000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000000)={0x6, 0x6, {r4}, {r6}, 0x3, 0x3}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r9) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x8420, &(0x7f0000000180)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}], [{@uid_gt={'uid>', r7}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', r7}}, {@subj_role={'subj_role', 0x3d, ')'}}, {@fowner_gt={'fowner>', r9}}]}) 17:46:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={r4, 0x1, 0x2, [0x9, 0x55d]}, 0xc) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) [ 1103.046411] hfs: can't find a HFS filesystem on dev loop3 [ 1103.182080] hfs: can't find a HFS filesystem on dev loop3 17:46:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1406, 0x8, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB=',\x00']) [ 1103.304290] hfs: unable to parse mount options 17:46:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000001100)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000001140)={0xffffffffffffffc1, 0x4, 0x1}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4$nfc_llcp(r3, 0x0, &(0x7f0000000080), 0x800) getsockopt$nfc_llcp(r4, 0x118, 0x3, &(0x7f00000000c0)=""/4096, 0x1000) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000010c0)={0x7, 0x33, 0x2}, 0x7) 17:46:22 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz0\x00', {0x0, 0x3f, 0x2, 0xa5da}, 0x34, [0x4, 0xa4e6, 0x6, 0x8, 0x9, 0x4, 0x101, 0x5, 0xfffff581, 0x64, 0x40, 0x886, 0x5c459d53, 0x3, 0x81, 0xca2a, 0x1, 0x1f, 0x32, 0x8, 0x713a, 0x5, 0x3, 0x5, 0x7, 0x3, 0x14b, 0x4, 0x9cccb00, 0x0, 0xffffffff, 0x7fff, 0x1d, 0x10001, 0x1000, 0x8, 0x7, 0xffffff25, 0xffffffff, 0x6, 0x7f, 0x0, 0x9, 0x81, 0x7f, 0x0, 0x4, 0x6, 0x10001, 0x81, 0x5, 0x100, 0x6, 0x13, 0x9, 0x3, 0x0, 0x2, 0x100, 0xed, 0x3, 0x1, 0x400, 0x5ef9], [0x5, 0x5bdaffd1, 0x0, 0x5, 0x1, 0x3d, 0x6, 0x4, 0x2d5, 0x0, 0x3, 0x800, 0x6, 0x81, 0x0, 0x3f, 0x58, 0x1, 0x8, 0x90f, 0x0, 0x10000fff, 0x9, 0x1, 0xc05, 0x4, 0x8f6, 0x8, 0x9, 0x8001, 0x7, 0x4, 0x0, 0x800, 0x7, 0xf08e, 0x70, 0x1, 0x203c, 0x7, 0x5, 0x5, 0x3, 0x0, 0x6, 0x25f, 0x1, 0xffffff73, 0x0, 0xd8f3, 0x0, 0xfffffffd, 0xd8, 0x0, 0x8, 0xaba0, 0x81, 0x9, 0x9c, 0x3d15, 0x8, 0x2, 0x7, 0x7], [0x8, 0xc95d, 0x5, 0x3, 0x4, 0x7f, 0x713c, 0x7, 0x7, 0xaa, 0xffffffff, 0x8000, 0x0, 0x1, 0x6, 0x7f, 0x7e0, 0x1, 0x0, 0x2, 0xfffffffc, 0x7fffffff, 0x1c, 0x71, 0xffffff11, 0x7fff, 0x1, 0x800, 0xffffffff, 0x3, 0x8, 0x6574, 0x4, 0xf466219, 0x2, 0x1, 0xff, 0x4, 0x0, 0x8, 0x9, 0x0, 0x2, 0x7, 0x7, 0x4, 0x7, 0x2, 0x1, 0x5, 0x6908000, 0x3, 0x3, 0xff, 0x5, 0x6, 0xbf1, 0x4, 0x4, 0x1f, 0x6, 0x6, 0x3, 0x8], [0xf710, 0x6, 0x0, 0x1, 0x3, 0x1, 0x1, 0x3, 0x80000000, 0x0, 0x1, 0x3f, 0x4000000, 0x101, 0x7f, 0x1, 0x2, 0xfffff7c9, 0x80000000, 0x6, 0x4, 0x1, 0xbb, 0x492, 0x3, 0x8, 0x0, 0x3, 0x2, 0x80000001, 0xff, 0x7, 0xb6, 0x7, 0x5, 0x2, 0x2, 0x8, 0xe52, 0x8001, 0xcac, 0x8, 0x3ff, 0xa7b, 0x6, 0x7, 0x0, 0x7, 0x9, 0x9, 0x7fffffff, 0xff, 0x400, 0x3ff, 0x4, 0x3, 0xccc, 0xb5c, 0x8, 0xfff, 0x1, 0x6, 0x2, 0x101]}, 0x45c) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(r1, 0x0, &(0x7f0000000040)={'U+', 0xfffffffffffffffe}, 0x16, 0x1) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3fb, 0x400, 0x70bd28, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000c0}, 0x80) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r2, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000d7, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000100)="56540fc8a69346dbe39dbe0bfbb344da698a0716c61aa64fc94c559081195bf4d4f2105a6f02585a0ce7f3ef246bd7038b06b1c0b548e1627242b78d2c220667ebb2c279f95b5bfef3037fdf52e4216a289b27d95ed6a71e02bfe705a90dccfcbfc6905a105cc1ca9f36a40be7d1fb7e4b6c1a77368b574e01ed577ed322ef6bb353a7c9b07ebd", 0x87) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r1, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:22 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000500)=0x92, 0x4) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="c18f00000000000000006b0000000800030008998ad56c67419d83a835334cf1ba0e1dd770fb76", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @local}, &(0x7f0000000140)=0xc) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x168, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xea, 0xbe, "5e54c8f068bfc7b299e1e78ca85884423354d0a7d3a23fcdbf3167513b5806327225ca60323f43b751d757ad559a645c38ae2887bad20f37ca1c1d2d7bed7992faa3e3e7021ca7d86ff0e72e74c1d278fb3d44cb4c8e4b110d5de68a5dae14f2e825ead774f419dd85ecd38be3ca5423c7451f23dd9e4a5e6f36e5a7ad41477c207b216044d76b9d94ea8f935d9a6bde7f84fb09e4d416a0ad65da1060895c94e193bef0a1165cc1ce0a4894f2c9279b17e9c1d18130e23c8f5bef18f27451dd2a2d91445c058561e8cc0e09e4eec465066b2e726b42224d626a7bd04487ecb173504effa211"}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x13, 0x13, "7b02bd973f51917e3054608dbd6c20"}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x20}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3b}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xe0}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xa2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x3b4}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r1, 0x0, 0x0, 0x4080840, 0x0, 0x0) [ 1103.459292] hfs: can't find a HFS filesystem on dev loop3 [ 1103.540862] hfs: can't find a HFS filesystem on dev loop3 17:46:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) [ 1103.638509] ip_tables: iptables: counters copy to user failed while replacing table [ 1103.669883] hfs: can't find a HFS filesystem on dev loop3 [ 1103.697694] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 17:46:22 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) bind$x25(r1, &(0x7f0000000000)={0x9, @remote={[], 0x3}}, 0x12) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfe3}], 0x1, 0x0, 0x0, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) [ 1103.746062] hfs: can't find a HFS filesystem on dev loop3 17:46:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x30400, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xfffffffffffffffd) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) [ 1103.936142] hfs: can't find a HFS filesystem on dev loop3 17:46:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="747970653d5046f65e2c02000000", @ANYRESHEX=0x0, @ANYBLOB="2caca1169b32e4134e459c8c66473e3df8391a8eca5154be99c924d030b8d99a56a02c2c14d87b8850f6393b878f1c36b2eb98b165f2649fc2893fdff8"]) [ 1104.149527] hfs: unable to parse mount options 17:46:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r5, 0x40044104, &(0x7f0000000000)) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="747970653d5046f65e2c6769643d", @ANYRESHEX=0x0, @ANYBLOB='4\v']) [ 1104.340881] hfs: unable to parse mount options 17:46:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={r4, 0x74, 0x10, 0x0, 0x2}, &(0x7f0000000040)=0x18) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:23 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf3, 0x4}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x490000, 0x0) r2 = dup(r1) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xc17) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000600)=0x9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) [ 1104.486411] ip_tables: iptables: counters copy to user failed while replacing table [ 1104.553712] hfs: can't find a HFS filesystem on dev loop3 [ 1104.646691] hfs: can't find a HFS filesystem on dev loop3 17:46:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) lookup_dcookie(0x100000000, &(0x7f0000000000)=""/173, 0xad) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:23 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf3, 0x4}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'U+'}, 0x16, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x490000, 0x0) r2 = dup(r1) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x1e11}], 0x1, 0x0, 0x20024fa, 0x1f4}}], 0x1, 0x100, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xc17) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000600)=0x9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) sendto$inet(r0, 0x0, 0x0, 0x4080840, 0x0, 0x0) 17:46:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) [ 1104.812245] hfs: can't find a HFS filesystem on dev loop3 [ 1104.884858] hfs: can't find a HFS filesystem on dev loop3 17:46:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x5) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) connect$nfc_raw(r3, &(0x7f0000000000)={0x27, 0x1, 0x0, 0x3}, 0x10) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="7479a608566f8ed76eb56769643d", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x20000000000000d8) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f0000000040)={0x20, 0x6a, "cee174dc087007b28a83fbad3efaa555ace8d1fed81842a5b7fc332f05ed75913704fbbaa2142f83f96c5d13c1cf3f71db9653ca8c32ebe8bf03c4ef09f72cc06df91350dc331c4c4b7496b58deb153ea5adfbfa429d2b52de3200f6c152804ef79ce1192f6b2b97686f"}) 17:46:23 executing program 5 (fault-call:18 fault-nth:0): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 1105.064794] hfs: unable to parse mount options 17:46:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@v1={0x2, "4497fe6859a47913d8afc122"}, 0xd, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="48e96dbdcd5ad38c3d", @ANYRESHEX=0x0, @ANYBLOB="f561"]) 17:46:23 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf2507000000600003800500080000000000140002006970365f76746930000000000000000006000400fbff000014000600200100000000000000000000000000010800050064010100060007004e20000014000600000000000000000000000000000000013400038014000600fc020000000000000000000000000001080003000000040014000600ff0200000000000000000000000000018406eeb05ffa18e5c32d63f19f3c373c"], 0xa8}, 0x1, 0x0, 0x0, 0x4040010}, 0x20004000) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:23 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5607, 0x2) [ 1105.333085] hfs: unable to parse mount options [ 1105.389543] ip_tables: iptables: counters copy to user failed while replacing table [ 1105.425879] hfs: unable to parse mount options 17:46:24 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x100000001, 0xad4f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x30, 0x1, 0x9, 0x0, 0x5a, 0x0, 0x87e1}, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) ptrace$setregs(0xd, r0, 0x80000000, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x200303, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x20, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000000140)='net/sockstat6\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:24 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf2507000000600003800500080000000000140002006970365f76746930000000000000000006000400fbff000014000600200100000000000000000000000000010800050064010100060007004e20000014000600000000000000000000000000000000013400038014000600fc020000000000000000000000000001080003000000040014000600ff0200000000000000000000000000018406eeb05ffa18e5c32d63f19f3c373c"], 0xa8}, 0x1, 0x0, 0x0, 0x4040010}, 0x20004000) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:24 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 17:46:24 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0xffffffff, 0x3, 0x20}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_INFO(r2, 0x81204101, &(0x7f0000000080)) 17:46:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) [ 1106.213063] FAULT_INJECTION: forcing a failure. [ 1106.213063] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1106.225455] CPU: 0 PID: 929 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 1106.233161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1106.242509] Call Trace: [ 1106.245096] dump_stack+0x1b2/0x283 [ 1106.248729] should_fail.cold+0x10a/0x154 [ 1106.252883] __alloc_pages_nodemask+0x22b/0x2730 [ 1106.257643] ? trace_hardirqs_on+0x10/0x10 17:46:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, r5, 0xf01, 0x0, 0x0, {0x4}}, 0xff92}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1a4, r5, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffedd}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa8b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, [], 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000000}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x20000}, 0x80) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) [ 1106.261877] ? check_preemption_disabled+0x35/0x240 [ 1106.266890] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1106.271726] ? trace_hardirqs_on+0x10/0x10 [ 1106.275965] ? __unlock_page_memcg+0x4f/0x100 [ 1106.280487] alloc_pages_current+0xe7/0x1e0 [ 1106.284810] __get_free_pages+0xb/0x40 [ 1106.288693] __tlb_remove_page_size+0x296/0x470 [ 1106.293378] unmap_page_range+0xebf/0x1d80 [ 1106.297625] ? vm_normal_page_pmd+0x340/0x340 [ 1106.302120] ? uprobe_munmap+0x18/0x200 [ 1106.306091] unmap_single_vma+0x147/0x2b0 [ 1106.310238] unmap_vmas+0x9d/0x160 [ 1106.313793] exit_mmap+0x271/0x4b0 [ 1106.317328] ? SyS_munmap+0x30/0x30 [ 1106.320980] ? exit_aio+0x21f/0x2e0 [ 1106.324626] mmput+0xfa/0x3a0 [ 1106.327745] do_exit+0x93c/0x2ae0 [ 1106.331211] ? task_work_run+0xf1/0x190 [ 1106.335184] ? mm_update_next_owner+0x5b0/0x5b0 [ 1106.339851] ? get_signal+0x31c/0x1c90 [ 1106.340169] ip_tables: iptables: counters copy to user failed while replacing table [ 1106.343744] ? lock_acquire+0x170/0x3f0 [ 1106.343833] ? lock_downgrade+0x6e0/0x6e0 [ 1106.343849] do_group_exit+0x100/0x2e0 [ 1106.363616] get_signal+0x385/0x1c90 [ 1106.367342] ? tty_vhangup+0x30/0x30 [ 1106.371056] ? check_preemption_disabled+0x35/0x240 [ 1106.376076] do_signal+0x7c/0x15d0 [ 1106.379634] ? setup_sigcontext+0x820/0x820 [ 1106.383948] ? tty_vhangup+0x30/0x30 [ 1106.387674] ? do_vfs_ioctl+0xe2/0xfe0 [ 1106.391560] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1106.397181] ? ioctl_preallocate+0x1a0/0x1a0 [ 1106.401586] ? check_preemption_disabled+0x35/0x240 [ 1106.406630] ? kick_process+0xe4/0x170 [ 1106.410516] ? task_work_add+0x87/0xe0 [ 1106.414417] ? exit_to_usermode_loop+0x41/0x200 [ 1106.419085] exit_to_usermode_loop+0x160/0x200 [ 1106.423663] ? SyS_ioctl+0x5c/0xb0 [ 1106.427218] do_syscall_64+0x4a3/0x640 [ 1106.431109] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1106.436294] RIP: 0033:0x45cb29 [ 1106.439499] RSP: 002b:00007f2bd29ccc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1106.447203] RAX: fffffffffffffffc RBX: 00000000004ef280 RCX: 000000000045cb29 [ 1106.454468] RDX: 0000000000000002 RSI: 0000000000005607 RDI: 0000000000000003 [ 1106.461730] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1106.469000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1106.476261] R13: 000000000000056d R14: 00000000004c8337 R15: 00007f2bd29cd6d4 17:46:25 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setpipe(r4, 0x407, 0x1) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 17:46:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) syz_open_dev$tty1(0xc, 0x4, 0x2) 17:46:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000000c0)={0x2, 0x401, 0xbdd}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r2, 0x540b, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x200, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x100000010c) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x80, 0xe3, 0x7, 0x3, 0x6}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 17:46:25 executing program 5: syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0xc11}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCXONC(r0, 0x5607, 0x2) 17:46:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x200, 0x8, 0x4, 0x9, 0x12, "df43fafdfc1d9ceaaf6c3c7d985600ada9a6ae"}) 17:46:25 executing program 1: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 17:46:25 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) 17:46:25 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x1, 'syzkaller1\x00', {}, 0x401}) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000000c0)={0x0, 0x3, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9c0907, 0x6865b622, [], @string=&(0x7f0000000000)=0x1}}) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000100)='net/udp6\x00') ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000140)={0xffff, 0x17d, 0xffffffff, 0x1b2ac75a, 0x15, "d9ccbc478fc507711d4ad17f1b3be724efa441"}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 17:46:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000413b7d04700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000005400000000000000000000000000380074696d650000000000000000000000000000000000000000000000f1000000000000ffffffff4f970000000001000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000cf000000000000380071756f74610000000000000028372b75893eda63000000000000000000000100000000000000470d0000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000edffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000080)={0x9b0000, 0x7f, 0x0, r0, 0x0, &(0x7f0000000040)={0x3800dc, 0x2, [], @ptr=0x1ff}}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x3, 0xbb, 0x6, 0x7f, 0x7, 0x30, 0x1, 0x1f, 0x5, 0x7f, 0x81, 0x5}, {0xfff, 0x1, 0x6, 0x77, 0x9, 0x1, 0x20, 0xff, 0x8, 0x1f, 0x20, 0xd7, 0x4}, {0x0, 0x8, 0x1, 0x6, 0x3, 0x0, 0x40, 0x20, 0x0, 0x4, 0x3, 0x1, 0x200}], 0xff}) recvfrom$llc(r3, &(0x7f00000000c0)=""/182, 0xb6, 0x101, &(0x7f0000000180)={0x1a, 0x101, 0x1, 0x6, 0x1, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x42) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 17:46:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 17:46:25 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x78, 0x2, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$inet6(0xa, 0x5, 0x9) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x5, 0x201, 0xffffffff, 0x1, 0x2, 0x6, 0x5}, 0x20) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3e8}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/hci\x00') preadv(r2, &(0x7f00000017c0), 0x0, 0x20000) [ 1107.332866] ip_tables: iptables: counters copy to user failed while replacing table 17:46:25 executing program 1: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 17:46:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r2, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000d7, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000280)={r5, 0x0, 0x0, 0x8000}, &(0x7f0000000100)=0x14) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x20000000000000d8) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x13, 0x2, {0x0, 0x3, 0x5}}, 0x14) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r5, 0x4}, &(0x7f0000000180)=0x8) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r7 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f0000000080)={0x9, 0x0, 0x1, 'queue0\x00', 0x9}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 17:46:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r5, 0xc91add0bf88807dd, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x15) r6 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="04000000e3a7cd4800000000913342b32974f3a21cbdd452c77a", @ANYRES16, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x60045}, 0x20004080) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x34, 0x0, 0x56da3c61163ce1a, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x4001) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r8, 0x100, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x40}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x40}}, 0x4000088) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000480)={[0xfff, 0x6, 0xffffffffffffff48, 0x7, 0x40, 0x1, 0x8, 0x7fffffff, 0x6, 0x1000, 0x4, 0x0, 0x4, 0x0, 0x0, 0x6], 0x100000, 0x40302}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ocfs2_control\x00', 0x401, 0x0) 17:46:26 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, @in={0x2, 0x4e23, @multicast2}, @ipx={0x4, 0x1, 0x8, "b222f63538a7", 0x20}, @generic={0x29, "8070ea75b030b0dcb80762ac1a54"}, 0xb3, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)='vlan1\x00', 0x8, 0x7, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x104003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000024c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x10, 0x3f2, 0x200, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008840) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x8019) ioctl$TCFLSH(r2, 0x540b, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) r4 = dup2(r0, r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r6, 0xc91add0bf88807dd, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000a0}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x140, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4}, 0x10000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x28, &(0x7f0000000080)}, 0x10) ioctl$TCFLSH(r3, 0x540b, 0x0) ioctl$TCXONC(r3, 0x5607, 0x3) 17:46:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x268080, 0x20) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000040)) 17:46:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:26 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TCXONC(r0, 0x5607, 0x3) 17:46:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000040)={0x5000, 0x10000, 0x5, 0x6, 0x200}) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f00006a9000/0x2000)=nil, 0x2000, 0x14) 17:46:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x8, 0x70bd28, 0x25dfdbfc}, 0x1c}}, 0x11) [ 1108.179859] ip_tables: iptables: counters copy to user failed while replacing table 17:46:26 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TCXONC(r0, 0x5607, 0x3) 17:46:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) 17:46:26 executing program 1: mq_unlink(&(0x7f0000000000)='-\xf0[(\x10\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 17:46:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x3, 0x2000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000000040)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:27 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 17:46:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000080)={0x4, 0xbf}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000180)) 17:46:27 executing program 2: setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "c2b613dbe0257033ed684afa22c58a68"}, 0x11, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000040)=0x6) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5607, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x19) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r3, 0x540b, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000000000d8) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000080)=0x3ff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r4, 0x540b, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x4) ioctl$TCFLSH(r2, 0x540b, 0x2) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000040)={0x3, 0x0, 0x800}) 17:46:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:27 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0x4, &(0x7f0000000140)={&(0x7f0000000200)=@setneightbl={0x68, 0x43, 0x0, 0x70bd28, 0x25dfdbfc, {0xa}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0x2}, @NDTA_THRESH1={0x8, 0x2, 0x40}, @NDTA_THRESH3={0x8, 0x4, 0x4}, @NDTA_THRESH2={0x8, 0x3, 0x800}, @NDTA_THRESH1={0x8}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x8}, @NDTA_PARMS={0x10, 0x6, 0x0, 0x1, [@NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x657}]}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x80000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x200cc040}, 0x40) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f0000000780)=[{&(0x7f0000000300)=""/126, 0x7e}, {&(0x7f0000000380)=""/151, 0x97}, {&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000680)=""/156, 0x9c}, {&(0x7f0000000740)}], 0x7, 0x4) 17:46:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 17:46:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x10, 0x80000) r4 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, r6, 0x0, 0x20000000000000d8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f00000000c0)={r10}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040)={r10}, 0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:27 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) [ 1109.056252] ip_tables: iptables: counters copy to user failed while replacing table 17:46:27 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000080)) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 17:46:27 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x1, 0x0, 0x3, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000100)={0x100, 0x1, 0x98a, 0x3ff}, 0x8) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:27 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000400)={0x9f0000, 0xff, 0x3, r0, 0x0, &(0x7f00000003c0)={0x98091e, 0x6, [], @p_u32=&(0x7f0000000380)}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xbf) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000200)={0x9d0000, 0x7, 0x4c1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9e0902, 0x8, [], @p_u16=&(0x7f0000000140)=0x3}}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000240)={0x5, 0x6}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = dup2(r6, r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x22402, 0x0) getsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f0000000080)={@local, @multicast1}, &(0x7f00000000c0)=0xc) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000000)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 17:46:28 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x404000, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) fallocate(r0, 0x7, 0x4, 0x8001) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0xffffffffffffff62}}, 0x40048800) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r3, 0x300, 0x70bd29, 0x25df5bfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000280)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000040)) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x182c1, 0x0) ioctl$TIOCNOTTY(r7, 0x5422) 17:46:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x3e, 0x0, 0x1b}) ioctl$TCXONC(r0, 0x5607, 0x2) 17:46:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) gettid() r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) process_vm_writev(r3, &(0x7f0000000180), 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/216}, {&(0x7f0000000180)=""/255}, {&(0x7f0000000280)=""/174}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:28 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x1de5}, {{&(0x7f0000000100)=@l2, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/97, 0x61}, {&(0x7f0000000a00)=""/230, 0xe6}, {&(0x7f00000003c0)=""/206, 0xce}], 0x3, &(0x7f0000000500)=""/37, 0x25}, 0x2}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/230, 0xe6}], 0x22, &(0x7f00000002c0)=""/35, 0x23}, 0x80}, {{&(0x7f0000000780)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/6, 0x6}, {&(0x7f0000000840)=""/128, 0x80}], 0x2}, 0x9}], 0x4, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) [ 1109.944070] ip_tables: iptables: counters copy to user failed while replacing table 17:46:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x101002, 0x0) 17:46:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x82) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:28 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x40080, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0xa10000, 0x9, 0xffff0ca1, r0, 0x0, &(0x7f00000000c0)={0x9a0001, 0x1, [], @string=&(0x7f0000000040)}}) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000140)=0x5, 0x4) 17:46:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0xd, &(0x7f0000000040)="8026109c7ec16cb1ebf1f4c471", 0xc, 0x0, &(0x7f0000000080)="4f05937b3de031f62307f3aa"}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) mq_timedsend(r4, &(0x7f0000000140)="01913c530dcd98a8a529fd4e6627", 0xe, 0x2, &(0x7f0000000180)={0x0, 0x3938700}) madvise(&(0x7f00005b0000/0x3000)=nil, 0x3000, 0xc) 17:46:28 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) 17:46:29 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x3f}, {{&(0x7f0000000100)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001a00), 0x0, &(0x7f0000000400)=""/242, 0xf2}, 0x8f64}, {{&(0x7f0000000500)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000580)=""/167, 0xa7}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/66, 0x42}, {&(0x7f00000016c0)=""/99, 0x63}, {&(0x7f0000001740)=""/153, 0x99}, {&(0x7f00000002c0)=""/188, 0xbc}], 0x6}, 0x9}], 0x3, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:29 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffbfffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x220324dd5c3611ee) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x5607, 0x2) 17:46:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000413b7d04700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000005400000000000000000000000000380074696d650000000000000000000000000000000000000000000000f1000000000000ffffffff4f970000000001000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000cf000000000000380071756f74610000000000000028372b75893eda63000000000000000000000100000000000000470d0000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000edffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000), 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:29 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x81040, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000100)) 17:46:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v1={0x2, "368fa44c"}, 0x5, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:29 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:29 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) [ 1110.836869] ip_tables: iptables: counters copy to user failed while replacing table 17:46:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000005c0)={{0x16, @remote, 0x4e23, 0x3, 'sh\x00', 0x16, 0x6, 0x53}, {@rand_addr=0x64010102, 0x4e21, 0x3, 0x2, 0x200, 0x7}}, 0x44) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup2(r3, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_open_dev$mouse(&(0x7f0000000640)='/dev/input/mouse#\x00', 0x4, 0x212800) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f00005dc000/0x3000)=nil, 0x3000, 0x12) sendmsg$sock(r4, &(0x7f0000000540)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x2, @local}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)="5016d6ecf04a4a77e7956cf374baa7e5720adc2d5a7add5a9660350d0024f048cc07891bb28690413d58ed18cfdfc0c3eee71cfaf093d312f4c7e53dd1293c8dd3b622fb3fb8e4d649a44a8f27931c40baa94ef748fbeca755d38113515fc63d", 0x60}, {&(0x7f0000000140)="e0851e1283a61888b2150f7555797edd06ce6fb3a43ece78a688ec6c807f7fec8c8d3b8dec4fd5806c1ff1958be7e95ee528f492a163b94a7353514c2d2fdb34884e8e5f8c1b9be55d733b17cffb0c892d3288dfe72a9cba40d4bcb1691fe7121472e53f5f5af3d983ad55ac8b2cb6587c7a38d4dd75aadc6be09113f6b6aea4f7c498d39fbdf83cca8f4aba90a72b1c000df3d04732a893b4d9", 0x9a}, {&(0x7f0000000200)="01fa74963a1904e8dfc20dad3f681976c5789f0824cf973ddf5f9e07f6f05b805208bc7733494dd5955ab54be4f11e208df9648c3681fd40306fa9f1a9c6b49837f8906c40de7c0702", 0x49}, {&(0x7f0000000280)="36c499af86d642d842b8bbd86ce94183a0e86176d2e49898199cc69463b05abfa6", 0x21}, {&(0x7f00000002c0)="1d517bde1ed2b77ba71b57103bbfb1474a4ed1d5250c58a7295e4d794f9283b150353ee62bf0d3728c5514b5ee523da2c3da1a04d0aa3a330e0e13401f04f964a0397fa35ea5f1a74c69df92551f683a7d0cbc13e6049c934b62ee88b4b3aef258342ab70df089fed09a37e92713feff59724c52055d46d56fb2feea38783ab81fb3fc0a1f82c43842a1c334c2c65d09778005e9dff1ed26966fce1fc6aac9e288f9253a82df42bb7019d83b4c5b485737a9b331417de29c010584d83642268ce5e4e25a8ca109cc0b25ff0229d688c7781657bb68e0ac99a0306ee0269d160ccec3baab51c9a79e", 0xe8}, {&(0x7f00000003c0)="16c86724eac65dc232228d30a36ed8dcb63d47ced481ae11f313f6f75cf598bd5be39670f9efa66d2e64ae13f5d4953427effc82a02f6649c168f81f4c6f0f9b1ea28b1f566773317d9e0fc61c17d7e43b490a92f74b11d26200bd518f068f21649fe542f41b3b1905c2712998c0d51cf5a2ca75e1b95a128a829aa9db61c409777421332e7245c0b8f39bdcd8d3510757dbbc9ee5e9b757744797fea98eba25513b85a66994543b4a997e0edfd328fe376fd995591501ae3772bed817c250b0a2dc7813e8c99b0d9720c13f9caf4a9c8691f8e7740d90262e69155a5847dd7064694a38dc3a8adca7f25f40", 0xec}], 0x6}, 0x24008000) 17:46:29 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x3c, 0x0, 0x3, 0x3, 0x0, 0x9, 0x0, 0x10d0ff}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000000)="b968ca0086b4d7967f4af274556184c63b74150d87", 0x15}, {&(0x7f0000000080)="a69efada16ba602b448494396842110ff1361b5aef615d61a9062d3a2915d1f0361a2f9bbc2b1cc424bc1c8a3f49622b31084f326469489b0e8918a22474253cf94d896387c7efdb6981a28596005c5a62c06c410f1aced1a5d8fd41c7118beb904b6d0809ccb18e0e7f72be26731bf439f12baafbd20e1b4dcc99d4e99c3fb4db0b97bf7bab5146a5f0b99874d6fcd1f9292c93ca983cfb8d5324470bc92b51397292b89e1c5e182397a317bc18123795cb4f660ef2a95fcb2e01b94182e410afca10d5946fe73f3ac7e037269f80b9147814cf06c65a", 0xd7}], 0x2, 0x0) 17:46:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() set_thread_area(&(0x7f0000000040)={0xff, 0xffffffffffefe7ff, 0x400, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1}) mq_unlink(&(0x7f0000000080)='\x00') process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 1111.131488] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20003 17:46:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 17:46:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:30 executing program 4: ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5607, 0x2) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) 17:46:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000), 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:30 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000100)={[{0x9, 0x1, 0x40, 0x3, 0x4, 0x80, 0x8, 0x40, 0x2, 0x9, 0x5, 0x7, 0x6}, {0x6, 0xff, 0x5, 0x0, 0x3, 0x3, 0x7, 0x0, 0x1f, 0x8, 0x4, 0xff, 0xffffffff}, {0x100, 0x20, 0x9, 0x4, 0xb, 0x4, 0x2, 0x1f, 0x1, 0x8, 0xf7, 0x3f, 0x8}], 0x90}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0xfff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100), 0x0, 0x2006}], 0x1100000, &(0x7f0000000180)=ANY=[@ANYBLOB="677270726564030000006a71756f74613d73797a2c6572726f72733d636f6e74696e75652c7573726a71756f74613d73797a2c6e6f6c61726765696f2c75f379ea09d31af99c210b4fe63716738c73726a71756f74613d73797a2c686173683d72757061736f762c657569643c", @ANYRESDEC=r3, @ANYBLOB=',appraise_type=imasig,hash,seclabel,obj_user=/dev/ptmx\x00,measure,\x00']) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000000000000d8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {0x0, r7, r5}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x40, 0x9, "996e92cf215feeda959fe81e34a59574ef6eec1c5e314e14644827b23935ce291f6670a1856f7b3da9f3f7038e6f385106dba0ed96ce8b8c994efc8bf4a05263146230b582227207016949ff327d885b9aa7adcf290bafaf8cc13ded3bb568b233976af8488f91de4e4d4135fa24806d772ee435d774112b210d164f9fa230f66d950ce4e7ffa134d4c353b9589fa69e9e300d24be0aefa1dae7612bcca20e91199d32932b569b6d9d07418477cc947a359684d5997a6bbed6efe1e0acd0acc908afb77865c7f9deaf8b3e304055147641945abec458cb43362afc9b6ed3446ec8f84596eadfbb90a11e919300adbca32e97a01c47833816fa2a66edbe0890da", 0x32, 0x40, 0x2, 0x0, 0x10, 0x2, 0x81}, r7}}, 0x120) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r8, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000100)=0x7) 17:46:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/242, 0xf2}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) rt_sigqueueinfo(r3, 0x14, &(0x7f0000000040)={0x9, 0x2, 0x2}) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 1111.691039] ip_tables: iptables: counters copy to user failed while replacing table 17:46:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 17:46:30 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_open_procfs(r1, &(0x7f0000000000)='setgroups\x00') ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) 17:46:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$AUDIT_USER(r2, &(0x7f0000001100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000010c0)={&(0x7f0000000080)={0x1010, 0x3ed, 0x20, 0x70bd29, 0x25dfdbfc, "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", ["", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x4}, 0x400) 17:46:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 17:46:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 17:46:30 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x505e}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_PIE_ON(r2, 0x7005) ioctl$TCXONC(r0, 0x5607, 0x2) 17:46:31 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x200000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000180)={0x0, 0x4, 0x80000000, [], &(0x7f0000000140)=0x5}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x1, 0x81, 0x80, 0x7}, {0xffff, 0x4, 0x5, 0xff}, {0x2, 0xe4, 0xfe, 0x3}]}) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r3, 0x540b, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000080)={0x29, 0x7ff, 0x200}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) 17:46:31 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f00000001c0)={0x100000000003}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 17:46:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000), 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) [ 1112.717793] ip_tables: iptables: counters copy to user failed while replacing table 17:46:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) ptrace$getsig(0x4202, r4, 0xe000000000000, &(0x7f0000000040)) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000), 0x4) fstatfs(r0, &(0x7f0000000140)=""/192) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 17:46:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00', 0x4}) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x1000000, 0x0, 0x0, 0x40000, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=0x0, @ANYBLOB="00009941ddf578ad5342baf35b1f163a439d54daa4ab9cbbcbb005d0d4a6abdeb799e17f7dd919c5bfe3cd984111d9bfa2c81a6c6aef03007001a4f51eada7ac121aead5bb0dd9be024a9593c95cc0165c23a88c080ea03bd0bc63934e689143468bf365a6d61eb0ffb0aa7a1dff260ed5b30582cd0b2e00e078cba85d", @ANYBLOB="53ce089a44a6a9678689ab1490e5277a560322fa57a568a62c1f7c2ad794b071a63172859787bc72bc2d5b3501ce4bf647b1dbf1a748ba444ef6415f681ff87a8e6cb23f3f46fd29a4eaca2122ff425493a7df96febf679fa3bb1cf130d9d9af2b6d047ba38c19f0f055bb23298b80e4cc4b110f89182f6ff8cca746bb7cea71925d72151ac7777a73a69b07966b9aca417867a6abe3950b8091d3c01802aef04411712dbb85832b086a1aac1a82a7ebb0cfc492cec24551203af071939f481cba2db813a0b900bbfc2b85d1475ef9db8524a57de40fb25055eaea", @ANYBLOB="3f38f454eed3436f7fbd0177bd51659da9b9f0534b6bc7486ff79f5b00558416e9c02171a8831f0dff826e14c694bc21a9399162f10ce8aad64ac16b84", @ANYRES64=r3]) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="04000000e3a7cd4800000000913342b32974f3a21cbdd452c77a", @ANYRES16=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x60045}, 0x20004080) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4040) 17:46:33 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept4$x25(r2, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:33 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xd01, 0x0) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x2) 17:46:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) [ 1114.737580] ip_tables: iptables: counters copy to user failed while replacing table 17:46:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e24, @local}, {0x1, @random="6fe8bf91bbba"}, 0x10, {0x2, 0x4e20, @broadcast}, 'vxcan1\x00'}) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x8840, 0x0) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000080)) 17:46:33 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)="a6dd8e93d1935bf0eb2302387050a11d4c3ae3c96912388d82d62d3d333f6f72301478818b78d173b051eaa07001491c65047bb5364bfac462cec6641f179c2941c413b53967ed0814b6ad055fe6ed2200fc8631322d49b06567a901f718414dd2e2a895b8ca4338d195f42f6538199f32ac2026f400ac746740464f30bf2de6dffeef4d2d6851c91e27b46c187aa351", 0x90}], 0x1, 0x8) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4004051) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x1ff, 0x10000}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r3 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x200) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r2, 0x0, 0x20000000000000d8) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x10007ff) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x2) 17:46:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = dup2(r2, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 1115.082040] hfs: can't find a HFS filesystem on dev loop3 17:46:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r1, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000d7, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x2d4100, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value={0x0}, &(0x7f0000002000)=0x8) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={r6}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r6, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x3e, 0x0, 0x60, 0x5, 0x7, 0xa8, 0x7, 0x7f, 0xdd, 0x7, 0xa6, 0x93, 0x7, 0x1f}, 0xe) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000140)={r4, 0x100}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={r7, 0x9, 0x30}, &(0x7f0000000280)=0xc) 17:46:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ftruncate(r2, 0x1) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="747970653d5046f65e2c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c00ffffffff7f00000000c7f5cb2f80828b46254eae8e6aaf1d25a21400cf5964ae69b3d90b48603e3f1c6a6ff74dea99210e16e1d595a12c37c57e3bc52062ee24c5ae580e2e00026cd9cda4a3bb3d62e2bbce941be018a1283f5e3892c802d0b8dc80cfbd295276cb05084c82cf08e884ce391b30913d6da195c61169f9f3bda881ce1d7d9e1ad0b9494bf8ac3a49d3384d4e5b5cc627dfea000000007049dc41603cdac062a7d9d1054c75292f87801c54c5249f2465913d01a873"]) 17:46:33 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0x1b) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7ff, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x2, @local, 0x81}, @in={0x2, 0x4e24, @broadcast}}}, 0x118) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000080)={0xb, 0x100, 0x4, {0x1, 0x6de9, 0x3, 0x8}}) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0) prlimit64(r5, 0x9, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000240)) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x1, 0x0) fgetxattr(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="73656375726974792ed22e7829b85634fa3bd42a7b2323242d00"], &(0x7f0000000300)=""/22, 0x16) [ 1115.302772] hfs: can't find a HFS filesystem on dev loop3 17:46:33 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x20000, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp1\x00', 0x80, 0x0) r4 = dup(r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4000000000000d7, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0xffff, @local, 0x9, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="747970653d5046f65e2c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c0035c0434ad1053dc6455873c37ed063d259a72f7d583cb5ff00000000579fc08bd0504852e214360d96"]) 17:46:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5607, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:46:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) prctl$PR_GET_SECUREBITS(0x1b) 17:46:34 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) creat(&(0x7f0000000100)='./file0\x00', 0x20) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x100000000000019f, 0xc) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x82882000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000180)={0x2, 0x3ff, 0xa, 0x6, 0x3}) sync() [ 1115.543504] hfs: can't find a HFS filesystem on dev loop3 17:46:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:46:34 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) io_destroy(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) getpid() ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000040)) [ 1115.609087] hfs: can't find a HFS filesystem on dev loop3 [ 1115.634094] ip_tables: iptables: counters copy to user failed while replacing table 17:46:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000280)={0x6, @win={{0xfffffff8, 0x9, 0x8, 0x2}, 0x9, 0x9, &(0x7f00000001c0)={{0x8, 0x101, 0x6, 0x6}, &(0x7f0000000140)={{0x7, 0x81, 0xfffffff9, 0x202}}}, 0x0, &(0x7f0000000200)="1296158ced9aec7dfb01905b836e8dc921a511f7ef9b9b39d788eca94f6c8366978e7203bd4f858f9e5759853b54a089ce727139f32b0ea0580616988a5e59c314a97d90858b69bfa637b827ebb1576769ecc8e395c4ef2e6bbdccd7578031bfe77fe3"}}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) unshare(0x4000200) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00') 17:46:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r4, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r4, &(0x7f00000002c0), 0x4000000000000d7, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x7f, @remote}}, 0x3, 0x4}, 0x90) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)=0x1) [ 1115.817720] hfs: can't find a HFS filesystem on dev loop3 17:46:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000004c0)) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x220, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast, @remote, 0x8, 0x1}}}, {{@arp={@loopback, @broadcast, 0xffffff00, 0xff, 0x3, 0x6, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff]}}, 0x40, 0xedb2, 0x7, 0x7, 0x1d7f, 0x0, 'veth1_to_batadv\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x11}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, 0xf, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) [ 1115.949701] hfs: can't find a HFS filesystem on dev loop3 17:46:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) [ 1116.028941] hfs: can't find a HFS filesystem on dev loop3 17:46:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setuid(r2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r4 = getegid() setxattr$system_posix_acl(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010005000000000002000000419aaa00", @ANYRES32, @ANYBLOB="02000500", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02000200", @ANYBLOB="040005000000000008000600", @ANYRES32=r4, @ANYBLOB], 0x4c, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = getgid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000240)=0xe8) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setuid(r8) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000640)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r10 = getegid() setxattr$system_posix_acl(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010005000000000002000000419aaa00", @ANYRES32=r6, @ANYBLOB="02000500", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="02000200", @ANYBLOB="040005000000000008000600", @ANYRES32=r10, @ANYBLOB], 0x4c, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {0x1, 0x4}, [{0x2, 0x2}, {0x2, 0x5}, {}], {}, [{0x8, 0x5, r4}, {0x8, 0x4, r5}, {0x8, 0xd, r10}], {0x10, 0x7}, {0x20, 0x1}}, 0x54, 0x2) 17:46:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 17:46:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) r5 = dup2(r1, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r8, r7, 0x0, 0x20000000000000d8) r9 = socket(0xb, 0x5, 0x80) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000240)={0x0, 'syz_tun\x00', 0x2}, 0x18) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) 17:46:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:34 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x10, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x2f88}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000240)=0x8) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:34 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/autofs\x00', 0x602, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000002640)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002600)={&(0x7f0000002540)={0xb0, 0x3, 0x7, 0x401, 0x0, 0x0, {0xa}, [@NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9c0}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x40}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7019}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) syz_open_dev$tty1(0xc, 0x4, 0x1) 17:46:35 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x80000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/185, &(0x7f0000000140)=0xb9) uselib(&(0x7f0000000000)='./file0\x00') [ 1116.514597] ip_tables: iptables: counters copy to user failed while replacing table [ 1116.526311] hfs: can't find a HFS filesystem on dev loop3 17:46:35 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:35 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$TCXONC(r2, 0x5607, 0x0) 17:46:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$unix(0x1, 0x7, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) r1 = dup(r0) remap_file_pages(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x0, 0x31813) mmap$snddsp_control(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x1000019, 0x12, r1, 0x83000000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000100)) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x900044, &(0x7f0000000040)=ANY=[]) [ 1116.643268] hfs: can't find a HFS filesystem on dev loop3 17:46:35 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x20000, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x600200) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) 17:46:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000040)) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 17:46:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5607, 0x2) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000)="26bfca84226d171fbf4c6454f190b95b780bb98cc141c39239568f9a28124af5f9056aee5a1cfcdc2d9a77d124819e2b10f51c02b4e8d8134977004664e0a898d0d5862331bb0364ead6b3d372d7e4499ac3c16d4fe9ee62a8fd41dde361207b54945a6f03e1a92d81b88f4ba27e0ce45b4f23ebc0015cec709860fc8ae9ed37cf2104a227b6d4ff5338f417948ad21f18188b25aa2557bac3533356c64291f8ea675446f5e806597521207065735921e7e6017cd9a78172f4ce9a37d3b59c90353531d11ea2431292216ed1d13a938a7f761768a6ab8ff45f5c5cb5f3a5ff3028e34050797c75b11a81", 0xea, 0x8000, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010102}}, 0x24) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) fcntl$setstatus(r1, 0x4, 0x2000) 17:46:35 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x5, 0x9, 0x0, 0x0, 0x31, 0x0, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xfffffffc) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000e80)='F', 0x1, r2) keyctl$unlink(0x9, r1, r2) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x1}, 0x0, 0x0, r2) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000e80)='F', 0x1, r4) add_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="46d8d06a5e18d7314adc4a832145e93ea4e7a5f4e292803ac5dd24c0e6c1855c48013bb5ff1a8aedc7a182df52dd1f57b035ab451f2f185f64d413d558eaf4cfec2fb7d6015b26643b49847a02d35d90733d891bfdf22a719e565eb462fac780389b68c16f2fb9b44e93834dbf2881e5d6995dc5a4b3ce5c8ebd68c54d3938faa5c299a22ce8508fd5d821ecd9d68fc0c8bef583669e3597fef7e185c97ab9ac66aa8b45a57ea934e7bfe7c4ec11c1f2d9d1c0311c82958b96fdfd5453db2b9b2277e48ca8a6dfb1c0d6f89fe462d1f68d65403b4583c4bf21f17e993bfff696813647357b9b11a02e570f930db5fcb958106bd61dbce690f5ab301f1cc3f891841a62d0dd23792ef997f08666c73e444003bdb8752659a8e0a938b34280e901a00dc0", 0x123, 0x0) keyctl$unlink(0x9, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='load default trusted:@ 18446744073709551$12 J8b\x009614a\x00'], 0x35, 0x0) keyctl$unlink(0x9, r3, r4) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r3) r6 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000e80)='F', 0x1, r7) keyctl$unlink(0x9, r6, r7) r8 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r7) keyctl$KEYCTL_MOVE(0x1e, r1, r5, r8, 0x1) 17:46:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x0, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x441800, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000100)={0x8, 0x8, 0x6000000, 0x5, 0x1}) r3 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f000062d000/0x4000)=nil, 0x4000, 0x3) 17:46:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x18, r3, 0xf07, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x3f0, r3, 0x100, 0x70bd28, 0x4, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0001}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc05a510a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb73}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x38, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10001, @rand_addr=' \x01\x00', 0x89}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0x254, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "c25abb0f1ce2c3670a788b637a04e7affbd41d01c9b161505d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "d53bdb94868fdb482642f8db3e0c0794d09fcb242afbac496f11ba"}}, @TIPC_NLA_NODE_ID={0x3d, 0x3, "25941379f66194c8f6159092a310baf7d71aaa3c33da670deb26d3cb64f5997588dae85c757c0753651c270b11592cc8eaed89c1f668b7d71e"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "8f336a5af6f3330df2f46a882b3cbd7af0ff890e"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "ab26776a3074d90f302e72c1d5f9842f515d2fd649a84fd8"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "5ab5e3e6521302b6e04b195e87e98705cc364323c0c4a95637f3107c5c66"}}, @TIPC_NLA_NODE_ID={0xb1, 0x3, "434145181b587f7668b628e959488b7662eb424ecc757e11201361385c959c8d5a4b685d32886c638ec71a49bd6703a8ba91db3d7d7e33828bf0f8f78457450b6e33f40efc3283639ec9c77afe4e02e36b540455db1bce2709170f3697d5268fbe36fa4f0d0c606170293dfa1b598aeb8dd35e8e2e591ada2dcaa54ffd07f68a9c2e8e6400f97c76fabd1a49f6fb61d7d79f878f4a97f00191be3219e987ceb6db0feaab3f7745bb59d342cd0c"}]}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x40800}, 0x801) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd8) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0xfffffffffffffffe, 0x5, {0x7, 0x1f, 0x2, 0x22b0001, 0x94, 0x7, 0x9, 0x2}}, 0x50) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000140)={0x6, r1}) 17:46:35 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvfrom$l2tp(r3, &(0x7f0000000080)=""/170, 0xaa, 0x2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) ioctl$TIOCSBRK(r1, 0x5427) [ 1117.344639] hfs: can't find a HFS filesystem on dev loop3 [ 1117.387140] ip_tables: iptables: counters copy to user failed while replacing table [ 1117.418074] hfs: can't find a HFS filesystem on dev loop3 17:46:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000080)="7488a1efd8e16532de712d", 0xb, 0x3f}, {&(0x7f00000000c0)="1737f349360b75e24cfd22e8ad0c32c433fad0900d2f37a46b57f4226e3645365302991af872ce50db242651f8e4c804476691c9e0a2b10940f6ea75c3ae628912e4e48d867752c894d017e4939a7928c40374b8528d94fe1e4fa9ddcdcf2651bdfc427e8c", 0x65, 0x80}, {&(0x7f0000000140)="2f6effa8f8f29036aba1fa61598697c3db7410ecf6f0778cb53f35afebf3b74c9392f8b612a0baa98ddd3369d2d635580a804df6921c3e59b216ac8f231b37bc25bcbadf62589989f65ebe9c64799cdacfd2caa461d50b7bc2f4044a945079d7542ea6bc98038158e391674359a443d80594", 0x72, 0x200}, {&(0x7f00000001c0)="588ca63f3b944121b58dc479fd9acab5d814dc09e13dd35ad59f1d866ea59868cdddcf398ff5fded4374b0c4270afef0", 0x30, 0x75}, {&(0x7f0000000200)="2047fa3ea311b49b8567e3432fc966a45fc8f1411a1e2837d988a5cc6608f1a21b74af33b6b4bf214204d44b98e98edf1a28b1473bfc1fcbc42760ef007e298fd61d6596ced9173aa8295436864f3b1744cdf4ee258a422ef6eff1248691a75b3d957fea8213fe2de9c6e9258bf5bdce53f998311d917cb22d1f76433c8c897c0d58ab29dd81ec309c553ad321d1fb4c4494ffa9aeb76b87aaf24240d435f252b488e858c0f1aecca8c5da0c030ccde6fdecc1984f208233a4ae2ba7a2fa7ea4c48f8d1d8672f5673cd61a3e9620de3ee26abbccdb4b097aef7ca8d1fac75b", 0xdf, 0x2}, {&(0x7f0000000300)="76f4505a9862b57fa066e9054fe8cfdf72c16f9b7a2b02d82ee3d8a5c08a2959be1f2aa9bfd8380a672c6e3fe4695da27192f0d473636e7b9f53ff266c7df6df4159424e1046bb3fe956d5fae6dd418d9d5b4cdf0467b0b02181295133262988f941b4713493b43478fa1fe44d9d3b39310c5c165f996cd951d4313d3fc33f00ae6980ef", 0x84, 0x2fe}], 0x181001, &(0x7f0000000540)={[{@quota='quota'}, {@data_writeback='data=writeback'}, {@rgrplvb='rgrplvb'}, {@spectator='spectator'}, {@localflocks='localflocks'}, {@data_ordered='data=ordered'}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@euid_eq={'euid', 0x3d, r4}}, {@smackfsdef={'smackfsdef', 0x3d, 'gid'}}, {@fsname={'fsname', 0x3d, 'gid'}}, {@subj_user={'subj_user', 0x3d, 'gid'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:35 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() fstat(r0, &(0x7f0000000100)) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x800, 0x3ff) ptrace$setregs(0xd, r1, 0x9, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 17:46:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 1117.547435] hfs: can't find a HFS filesystem on dev loop3 17:46:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCXONC(r0, 0x5607, 0x2) 17:46:36 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1f84cebac2d3d2ec"}}, 0x48}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="747970653d5046f65e2c67696429a376564b275189a63d493e31e1bd38eca88264c2b153d9a66749d4c354ac9cd199d9293ceeab10ae0cf6caccc0db3a0f5627b4bd30f34c02a3a525292ca5d5f17977a24c484785515733b6ed8663f3da048e7b2c", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r3, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r3, &(0x7f00000002c0), 0x4000000000000d7, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000001400)=""/168, &(0x7f00000014c0)=0xa8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/139, 0x8b}, {&(0x7f00000000c0)=""/134, 0x86}, {&(0x7f0000000180)=""/67, 0x43}, {&(0x7f0000000200)=""/121, 0x79}], 0x4, &(0x7f00000002c0)=""/4096, 0x1000}, 0x2180) 17:46:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) r5 = dup2(r1, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r8, r7, 0x0, 0x20000000000000d8) r9 = socket(0xb, 0x5, 0x80) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000240)={0x0, 'syz_tun\x00', 0x2}, 0x18) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) [ 1117.917526] hfs: unable to parse mount options [ 1118.001588] hfs: unable to parse mount options 17:46:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000413b7d04700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000005400000000000000000000000000380074696d650000000000000000000000000000000000000000000000f1000000000000ffffffff4f970000000001000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000cf000000000000380071756f74610000000000000028372b75893eda63000000000000000000000100000000000000470d0000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000edffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x0, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:36 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0xc) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x8, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) r5 = dup2(r1, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r8, r7, 0x0, 0x20000000000000d8) r9 = socket(0xb, 0x5, 0x80) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000240)={0x0, 'syz_tun\x00', 0x2}, 0x18) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) 17:46:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) [ 1118.175724] hfs: can't find a HFS filesystem on dev loop3 [ 1118.198792] ip_tables: iptables: counters copy to user failed while replacing table 17:46:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) lsetxattr$trusted_overlay_redirect(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)='trusted.overlay.redirect\x00', &(0x7f00000010c0)='./file0\x00', 0x8, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)={0x84, 0x200, [], [@generic={0x3, 0xfffffffffffffec7, "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"}, @ra={0x5, 0x2, 0x1000}]}, 0x1010) lremovexattr(&(0x7f0000001100)='\x00', &(0x7f0000001140)=@random={'security.', '@\x00'}) 17:46:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) r5 = dup2(r1, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r8, r7, 0x0, 0x20000000000000d8) r9 = socket(0xb, 0x5, 0x80) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000240)={0x0, 'syz_tun\x00', 0x2}, 0x18) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) 17:46:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) [ 1118.457981] hfs: can't find a HFS filesystem on dev loop3 17:46:37 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x3000000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 17:46:37 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r2 = fcntl$dupfd(r0, 0x0, r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x111, 0x6}}, 0x20) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r5, 0x104, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xd}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0xc1) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) write$9p(r2, &(0x7f0000000100), 0x0) [ 1118.659738] hfs: can't find a HFS filesystem on dev loop3 17:46:37 executing program 4: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5607, 0x2) 17:46:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {0x0, r4, r2}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x401, 0x1, "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", 0x6, 0x1f, 0x0, 0x0, 0x40, 0x9, 0x7, 0x1}, r4}}, 0x120) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000000)=0x3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000040)) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000240), 0x1) 17:46:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, r6, 0x0, 0x20000000000000d8) r8 = socket(0xb, 0x5, 0x80) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000240)={0x0, 'syz_tun\x00', 0x2}, 0x18) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) 17:46:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x0, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x300b, 0x1}) 17:46:37 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f0000000100)=""/107) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, r6, 0x0, 0x20000000000000d8) r8 = socket(0xb, 0x5, 0x80) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000240)={0x0, 'syz_tun\x00', 0x2}, 0x18) 17:46:37 executing program 1: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 1119.059947] hfs: can't find a HFS filesystem on dev loop3 [ 1119.082193] ip_tables: iptables: counters copy to user failed while replacing table 17:46:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, r6, 0x0, 0x20000000000000d8) socket(0xb, 0x5, 0x80) 17:46:37 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x1, 0x9, 0x0, 0x0, 0x1000}, 0x0) r1 = socket$inet6(0xa, 0x4, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x2000, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'syzkaller1\x00', @ifru_hwaddr=@random="a500f3bdc360"}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000500)}, {&(0x7f00000002c0)="ce4ff2ebc338d19a34848b821318778e2101c62c9993166649d3b133424ada029bbd39dca64bbd90c9d092f44b91676cca15f419653187832d4de2a2d7daf6f57b7f05920a91f7320c7877225a7c3b5213d1d575197d543439596970b088d0e37fdb5ce0e1d5442c767b12766ed7ddee5caebd2b192f61b4b58853d3f13db3a015abd770011231d6bcd5ce1ebb3a00f20138ebef2119eefd7289e3c15baeea1269a67ac1c931d8aebdb80ff1f6cd7cdd223a067ff5e0fd4d5c78c67838706849", 0xc0}, {&(0x7f0000000200)="aa80cd9bf1eb40672da06080483ddac650ac3a0b47a0999598b5d4b7f9d91ac675ab", 0x22}], 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f0000001640)=[{&(0x7f0000000380)=""/236, 0xec}, {&(0x7f00000004c0)=""/4, 0x4}, {&(0x7f0000000640)=""/166, 0xa6}, {&(0x7f0000000580)=""/14, 0xfffffebb}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/41, 0x29}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, 0x0) 17:46:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="74797065fa0046f65e2c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) 17:46:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x1080, 0x0) connect$rose(r3, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x0, [@default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default]}, 0x40) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000100)={0x5, 0x18, 0xce, 0x94f, "04489d3cf080edd40aa3b5bcbe01d6f76406c3f93691e9223d8d0139b01bad29"}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x10000099) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio1\x00', 0x2000, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000240)) ioctl$TCFLSH(r6, 0x540b, 0x0) ioctl$VT_GETMODE(r6, 0x5601, &(0x7f00000001c0)) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r8, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ppoll(&(0x7f0000000000)=[{r0, 0x200}, {r8, 0x2}], 0x2, &(0x7f0000000080), &(0x7f00000000c0)={[0xfffffffffffffffa]}, 0x8) [ 1119.360412] hfs: unable to parse mount options 17:46:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8000, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'ipvlan0\x00'}}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, r6, 0x0, 0x20000000000000d8) [ 1119.508638] hfs: can't find a HFS filesystem on dev loop3 17:46:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000240)=0xe8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setuid(r4) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r6 = getegid() setxattr$system_posix_acl(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010005000000000002000000419aaa00", @ANYRES32=r2, @ANYBLOB="02000500", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="02000200", @ANYBLOB="040005000000000008000600", @ANYRES32=r6, @ANYBLOB], 0x4c, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r6) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x1905050, &(0x7f00000015c0)) 17:46:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:38 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) 17:46:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)=r1) 17:46:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={r7}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000280)={r7, 0x9}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={0x0, 0x1}, 0x8) ioctl$TCXONC(r0, 0x5607, 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r9, r8, 0x0, 0x20000000000000d8) ioctl$KVM_TRANSLATE(r8, 0xc018ae85, &(0x7f0000000240)={0x1000, 0x1000, 0x7d, 0x0, 0x7f}) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0x20, "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"}) 17:46:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x1040, 0x0) bind$netrom(r2, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) [ 1119.923867] ip_tables: iptables: counters copy to user failed while replacing table 17:46:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x28, r3, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000040)) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000180)={0x400, 0x7, 0x3, 0x1, 0x9}) [ 1120.045265] hfs: can't find a HFS filesystem on dev loop3 17:46:38 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0xffffffffffffffda, 0x6, {0x7, 0x1f, 0x80000001, 0x1, 0x200, 0x40, 0x7fffffff, 0x80000000}}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') 17:46:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) name_to_handle_at(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xe4, 0x7f, "4eed007e86a0c6abf269562328ce172530d63660bc58a86120d25c6409503a10e4d3002422e9cf0b5e9352daa7f9b96aed9de42412956fbd436ab724992f197ce4a9f04c2e291205f0b426a39c5274810b8b31f4a3721fcd780ce6035207a47b849f75983db37d57bc7d6518a02bc0a07365f6e87ae6fcc6ff22c8f76b50dcdc0a5e4f89f560c2389db7ca0f6898e7c6847488bfd890df3381a136cfd25a3ef0c6ba90f245ae1f195ea065d34275a0c23479e60717af01fb6b1ed234d28c9925c8cb73db9ddcc33eb8f48f50e0aee12b76479aab39881499157c77b9"}, &(0x7f0000000140), 0x1400) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x9) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="747970653d5046f65e2c6769643d", @ANYRESHEX=0x0, @ANYBLOB="15"]) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000180)={0x0, 'nr0\x00', {}, 0x400}) 17:46:38 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x44800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x180000, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f00000000c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x19) ioctl$KDMKTONE(r1, 0x4b30, 0x8) ioctl$TCFLSH(r3, 0x540b, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) fcntl$setstatus(r6, 0x4, 0x44400) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x2c}}, 0x20000040) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000280)="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") [ 1120.265719] hfs: unable to parse mount options 17:46:38 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) read(0xffffffffffffffff, &(0x7f0000000100)=""/13, 0xd) [ 1120.439822] hfs: unable to parse mount options 17:46:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:39 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000000)={0x7, 0xff}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xfdde2736621e9c1b, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) ioctl$TIOCSBRK(r1, 0x5427) 17:46:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="b6c239dff727c3c07d3f3a0a4374", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) [ 1120.809454] hfs: unable to parse mount options [ 1120.812030] sctp: [Deprecated]: syz-executor.4 (pid 1878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1120.812030] Use struct sctp_sack_info instead [ 1120.852048] ip_tables: iptables: counters copy to user failed while replacing table 17:46:39 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x3, @local, 0xff}}}, &(0x7f0000000100)=0x84) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x1, {0xa, 0x4e22, 0x9, @empty}}}, 0x3a) 17:46:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x3) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) 17:46:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) gettid() madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000c40)="6ba4940fa7feffec7dcf00509ef5a7dc6c0a81301bf0cb84888dae20cedd34b1e4eb64fa0062042ff14383c4896639b1721f82547748c51acbccb1135630907a511e28069db007f42c83cc02d838e00a3121abaceef273a915c47114411f0a61f7f1facba830a88f5b008d653929d69e672f218b48fa97b81a77b75176ab9300af454fd10f55f60a71c248053b797a347a97b6ad151d4993c95586262c426740", 0xa0, 0x8800, &(0x7f0000000d00)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0x10001, 0x3}, 0x20) r2 = dup(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000d40)={'veth1_virt_wifi\x00', 0x1}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) epoll_pwait(r6, &(0x7f0000000bc0)=[{}, {}, {}, {}], 0x4, 0x18b12a97, &(0x7f0000000c00)={[0x1]}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) write$binfmt_elf64(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/2704], 0xa90) 17:46:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/237) ioctl$TCXONC(r0, 0x5607, 0x2) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ff7000/0x1000)=nil) shmat(r2, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmctl$IPC_RMID(r2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000240)={0x7ce4, 0x3, 0x1, "c81bb01a91f1c3d77a731af97ecd37a93f09b7b7af54847042a925d3fb6cf6b9", 0x38416761}) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000100)=""/225) [ 1121.043342] hfs: can't find a HFS filesystem on dev loop3 17:46:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) gettid() madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000000)={{0x0, 0x0, @identifier="5d352949b5f528eed8d6abaefc5b816a"}}) [ 1121.320505] QAT: Invalid ioctl 17:46:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="747970653d5046f65e2c6769643d", @ANYRESHEX=0x0, @ANYBLOB="a4c4aca3841d66a88a10b67b701173c33ba5821cf6bd146545a89d47745f574ee73b2e156ae6ed9b6c0b139297e288f38381953d1c61"]) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r2, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000d7, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@null=' \x00', 0x6, 'bridge_slave_0\x00'}) 17:46:40 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8d}, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) gettid() madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4$phonet_pipe(r2, 0x0, &(0x7f0000000000), 0x80000) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000080)=0x400, 0x4) [ 1121.674733] hfs: unable to parse mount options 17:46:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x40001, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x14, r3, 0x0, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4008084) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) [ 1121.738026] ip_tables: iptables: counters copy to user failed while replacing table 17:46:40 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000280)={0x9, 0x48d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@canfd={{0x0, 0x1, 0x0, 0x1}, 0x37, 0x3, 0x0, 0x0, "09a5127c5e9189f38c8f292338a33555c3878fb3a96aecb566d31a4ea0c5c0510868ac8be26257861cecdd17ff0b9ba301eecd4331a6a52690eac73d5156434f"}, 0x48}, 0x1, 0x0, 0x0, 0x4040801}, 0x4008015) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000300)={0xb3f0}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) [ 1122.062420] hfs: unable to parse mount options [ 1122.101461] QAT: Invalid ioctl 17:46:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000000)=0x80) sync_file_range(r1, 0x8f4d, 0x24000000000000, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c18f00000000000000006b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000ff000000000000"], 0x28}}, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000002c0)={@broadcast, @broadcast, 0x0}, &(0x7f00000004c0)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000114000009040000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14, 0x80000) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x4) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r10, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="0900020073797a307e1500000900020073797a31000000000900020073797a30000000771031e4dc5534f0ae7794cd83f25d7e6d56a748dde659c101c7f20fa2b85a4f45a2b876c81c23028157defe33fa37a5593de122d241a31c8ae83a937473fb0c5c1c00"/130], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x1) 17:46:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:40 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x70, 0x70, 0x8, 0x0, 0x20, 0x0, 0x5, 0x2000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x1, @perf_bp={&(0x7f0000000040), 0x12}, 0x30, 0x3, 0x2, 0x2, 0x4a80000000000000, 0x998, 0xdc5}, r0, 0x4, r3, 0x4) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000100)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$TCXONC(r5, 0x5607, 0x3) [ 1122.220686] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1122.337592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000413b7d04700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000005400000000000000000000000000380074696d650000000000000000000000000000000000000000000000f1000000000000ffffffff4f970000000001000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000cf000000000000380071756f74610000000000000028372b75893eda63000000000000000000000100000000000000470d0000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000edffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100), 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:41 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x1000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:41 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) dup2(r1, r3) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="747970653d5046f65e2c6769643da965d52285b076076c1c00"/40, @ANYRESHEX=0x0, @ANYBLOB=',\x00']) 17:46:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r3, 0x540b, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000180)={0x8000, 0x20, 0xffff3f87, 0x5, 0x5c, "d419c767cb828b6ef790d150f6d43eaeaeb54b", 0x0, 0x80}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r4, 0xc91add0bf88807dd, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x62fffdceb23293a1) syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f00000001c0)={0x7, 0x0, 0x4, 0x8000, 0x81}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r6, 0x540b, 0x0) ioctl$TCXONC(r6, 0x5607, 0x0) 17:46:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x2, &(0x7f0000000240)=[{&(0x7f00000000c0)="64d78e2d8bf693524ffb5eb369a12656231c51df53ceb8a74ea12ae72f5b65957dbd6646bf368aa6d050cc4d0c5467ae2ffab440421b1ff94271773d65faf4c75ce10f024bc7fc7a4ee032af28f6e61c0da421679cffd4beff452e570b2e87fe5b78a89fadba8bee6c4593f742ef0d8d86b2b2003e916ef442d89f0c0168d57718d84ce0052ee8840ce5e0f65347994007500f07bc850fc7748f2ff9286eda606dea15235f3597dc101850d9c5ad3312da72b437f76c44ba8ff9ed8dfa48b40f55ba1e183016f6", 0xc7, 0x7fffffff}, {&(0x7f00000001c0)="b48013fcae1bde0c5c86f5f46023e7641ef15afe8dee2427e9cb75e64b56ff4fbd244f66b6afb8b10f99158add91dc66995d875e0f420afd04df18d9128612e5fde4649d4e3c946871a0a58e3da6e154ebae3f0d40c38e8d96dcbfd493febb2db97d397044c80acdae1a416499b55b44b856cedde273d89490aabe8a", 0x7c, 0x8}], 0x4000, &(0x7f0000000280)={[{@discard='discard'}, {@discard='discard'}, {@statfs_percent={'statfs_percent', 0x3d, 0x4}}, {@localflocks='localflocks'}], [{@obj_role={'obj_role'}}, {@dont_appraise='dont_appraise'}, {@uid_eq={'uid', 0x3d, r1}}]}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000040)) [ 1122.561939] hfs: unable to parse mount options 17:46:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="747970653d5046f65e2c6769643d", @ANYRESHEX=0x0, @ANYBLOB]) 17:46:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @private}, &(0x7f0000000140)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xec}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc1}, 0x44104) 17:46:41 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) dup2(r1, r3) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) [ 1122.600481] ip_tables: iptables: counters copy to user failed while replacing table [ 1122.678297] hfs: can't find a HFS filesystem on dev loop3 17:46:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) rt_sigtimedwait(&(0x7f0000000000)={[0x7fff]}, &(0x7f0000000040), &(0x7f00000000c0)={0x0, 0x3938700}, 0x8) ioctl$TCXONC(r0, 0x5607, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000140)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc5d31ac56c113e81}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80084}, 0x4040800) 17:46:41 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@remote={[], 0x0}, 0x6, 'gretap0\x00'}) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r1, 0x9, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/156, 0x9c}], 0x1, 0x6) 17:46:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@type={'type', 0x3d, "5046f65e"}}, {@gid={'gid'}}]}) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) [ 1122.851628] hfs: can't find a HFS filesystem on dev loop3 17:46:41 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) dup2(r1, r3) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) write$P9_RLOCK(r1, &(0x7f0000000080)={0x8, 0x35, 0x1}, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r3, 0x540b, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000000)={0xae, 0x101, 0x200}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 17:46:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000001300)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="747970653d5046f65e2c6769643d", @ANYBLOB="25c5a035bc617b624dd027c1d1d145eb0f1f4383be3f267f54d57fa443364b665a615f82d270bf17cae74d2e7e9a41c42c4f03b6fc9700a31ecb57c31d0c75470374ff63a652c8", @ANYBLOB="8107ccb15dc1d94acd7684df3e71e4765f01fb8e2911d40d2b665d1cac7efad4380b7e938848de7b205f936791e1f7d4d5c5944b682f491e5d28f2ef1f476db2db723b4759ac095315d2988e19251d351073afb20ca722e2c76560f8d42a8c6afdababe1218a49c344970810eceb2b2ab85910748003f1624afe51180c3f0af9c7c3072f3869157b54d0a02c27f214540e2beb491c39adfb94fdf1474778bafbc511a6acf86016e80ecbd4022c1b981ec97c4838c9d38613d8d850897994"]) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x80000, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000440)={0x1f, @none, 0x7f}, 0xa) read$dsp(r3, &(0x7f0000000400)=""/1, 0x1) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000480)={0x0, @reserved}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x600, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@remote, @in6=@private0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000000)={0xf33, 0x5, 0x1}) 17:46:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100), 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:41 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x0, 0x0) [ 1123.420752] ip_tables: iptables: counters copy to user failed while replacing table [ 1123.440789] hfs: unable to parse mount options 17:46:41 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000000)={{0x2, 0x0, @identifier="05127e00b5bb879c97aaa8c23ce5bda5"}}) 17:46:42 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x1) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 1123.602039] hfs: unable to parse mount options 17:46:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8001, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0x6, 0x7b, 0x7f}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000080)) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000180)) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(khazad)\x00'}, 0x58) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000240)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x10001, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) 17:46:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x10000, 0x0) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000080)) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0x0, 0x9, 0x0, [], [{0x7, 0x0, 0x8001, 0x4, 0x8000, 0x1}, {0x0, 0x2, 0x81, 0xf2ef, 0x286a, 0x5}], [[], [], [], [], [], [], [], [], []]}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070f000000000000000c000280f2ff010000000000eac139098ff9e12a43b729f82dc69fb4ad91200e058b80c88064f6515d88cd8d8ba02243ad76bee8eb8b909a5120690fe50ed26fba"], 0x20}}, 0x0) ioctl$TCXONC(r0, 0x5607, 0x2) 17:46:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000240)=0xe8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setuid(r4) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r6 = getegid() setxattr$system_posix_acl(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010005000000000002000000419aaa00", @ANYRES32=r2, @ANYBLOB="02000500", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="02000200", @ANYBLOB="040005000000000008000600", @ANYRES32=r6, @ANYBLOB], 0x4c, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r6) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[], [{@pcr={'pcr', 0x3d, 0x1}}]}) 17:46:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:42 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000000500)}, {&(0x7f00000002c0)="e7556cd8def6bb589d8c6b93ef1a98a2c27210e6ed9aa7b11b181be22b1f33c151091e0c54f0b84b4b4700396f1a9be69b70e06367bd322723cd1f8112fd9e57e40c28f47a78c6e71ffff1f8a530b6a91acb53369b7af592170fed9afc729eb9332e27e571ae6e3dee28cd3d90e023ccd872825578bfeda106099b5303e0034eb3892606817049911de805f539347b8e514f1a2d64a9d8a8d6ac55a3f9a1761e3a47de5256702c3901e2952a57d29de352212988c505", 0xb6}, {&(0x7f0000000380)="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", 0x1000}], 0x3, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 1123.842015] hfs: unable to parse mount options 17:46:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x1ff) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x4031, 0x461, 0x8}) 17:46:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'bond0\x00', 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:42 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) read(0xffffffffffffffff, &(0x7f0000000100)=""/13, 0xd) 17:46:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000280)={{0x77359400}}, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x464, 0x400, 0x70bd27, 0x25dfdbfe, "9047870d082bec1bb9530fe13dbd07a207a68da2d88336d1fc68aec47310bed38345ebd5de30d4cf4329dd57b1039995257c2b1a", [""]}, 0x44}, 0x1, 0x0, 0x0, 0x24040081}, 0x44000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r1, 0x0, 0x20000000000000d8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000080)={0x2e2, 0x42, 0x0, 'queue0\x00', 0x9}) 17:46:42 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400180}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x18014) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100), 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:42 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000040)={0x5, 0x0, 0xbf, 0x200}) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) [ 1124.279894] ip_tables: iptables: counters copy to user failed while replacing table 17:46:43 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f00000000c0)={0xfffffff8, 0x1, 0x0, {0xffffffff}, 0x4, 0xdb0e}) write$FUSE_LK(r2, &(0x7f0000000040)={0x28, 0x0, 0x7, {{0x0, 0x3, 0x2, r3}}}, 0x28) 17:46:43 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f0000000100)=""/107) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:43 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x8009}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f0000000200)=""/94, &(0x7f0000000280)=0x5e) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000001c0)={0x1ffffffffffffd}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x1859095, 0x0) getpid() r4 = syz_open_procfs(0x0, &(0x7f0000000140)='timerslack_ns\x00') preadv(r4, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/137, 0x89}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f0000000380)=""/170, 0xaa}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000440)=""/125, 0x7d}, {&(0x7f00000004c0)=""/212, 0xd4}], 0x6, 0x0) 17:46:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = semget$private(0x0, 0x20000000102, 0x0) semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f00000001c0)=""/225) semctl$SEM_STAT_ANY(r1, 0x2, 0x14, &(0x7f0000000080)=""/218) 17:46:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ttyS3\x00', 0x2000, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000540)={0xbc, 0xfffe, &(0x7f0000000140)="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"}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x573, 0x201001) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f00000005c0)={0x0, 0x0, 0x4, 0x3}) sendmsg$sock(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="0c8df2bf3272976f659ce24e36e14c1592a27ca347b9d916503ca796bf795bc378059718fa6eb3c65d08141ef36371e5249f0fe943ff403c8e53db5bd76704c6dbb67326d1e8122db3fa7d1c83fdb2a79e03b5cd62d981625335fb556ade2d11a48f6be1571484600e6fdfa8b11d43ff5922b195263eed3328275ec37cc19b53d47897673118c266dd3590381caa629aa4b673401adc17714ff0ab662c166b481e525111ddf754aef5f4ff0b06e70732cf543f9848", 0xb5}, {&(0x7f0000000780)="18fcf5b408ffc790a2ce75ff44c92b64a5c5b0af0ff67e72119bebeafb6eba73824617fdc69a2e4b2a23139deba8c3cc42ce706f733f227d7bf392a06db4", 0x3e}, {&(0x7f0000000880)="a8ab360dbaf2a1a21b607f35292414215d802f4400c3434e577d1114fb75cdd633f947b14e7a1b4d549e22460278ca68f646b2e3164b75bf55d43624442932d86bbacff6c278c13d5d08f8537aa80a277fae1971b04ced825dff2a825f15ca14cc03abb57389333a87ce48886eadc282f4806a5b4315cac77870b7f39b1dfe30442058b76686b78c4ec95792adef0d3014f288a8edf2af096c848cf57619c21da6d380837f93af5c4fe827f50908557c58cd3fc9d854a506037fc3e58a8aff2d26a9cf4347d95ca6ac2b58106ce2f150f4aa028ee5e628026362a439f494f4078b9d9cb4a0d3d1c5ec28589bdfe830d3ebf02af9eb", 0xf5}], 0x3, &(0x7f0000000800)=[@txtime={{0x18, 0x1, 0x3d, 0x43}}, @txtime={{0x18, 0x1, 0x3d, 0xff}}], 0x30}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000640)={0x1, 'tunl0\x00', {}, 0x9}) write$P9_RREAD(r3, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x100b) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000600)) 17:46:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:43 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x3000000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 17:46:43 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x14, &(0x7f0000000100)={0x2e, 0x200, 0x4}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f0000000200), 0xf, 0xa33e) 17:46:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:43 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(0xffffffffffffffff) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000080)={0x0, 0x400}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) 17:46:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) [ 1125.410706] ip_tables: iptables: counters copy to user failed while replacing table 17:46:44 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000200)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10000040, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x6, 0x5, 0x6, 0xe75b, 0x281}, 0x14) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:44 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x505e}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 17:46:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000413b7d04700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000005400000000000000000000000000380074696d650000000000000000000000000000000000000000000000f1000000000000ffffffff4f970000000001000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000cf000000000000380071756f74610000000000000028372b75893eda63000000000000000000000100000000000000470d0000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000edffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5607, 0x2) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r2, &(0x7f0000000400)=@hci={0x1f, 0x2}, 0x80) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000d7, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000024cf20f08a86bf563acdca6321da0272bf16263cf59dbc0dd524af6ce73f34bb0d60890e64dffe8bf51004885eeb59bfa41a12e6891305753790fdf770eb6868638dc4186cdefb198ec11dceebb2d16a528beea9dfcece89e2c711e721643908b5de881aa9e6452fec4db264db2954d622ff3942933f220dec90481fa2bd238913e4000000002f2af98695a194089bc7d574523c0ab612d0857768bb19a8dcafcfcd0f765f27460cdfafed12eb39dbbb8cc1df1b9ee3a7896430e87a425b1a91510bf1baa2c028d4a6c1280870482cf425d2a17adb40da84568944450f05ceb22cd2e096f6b373d035618496cf5a15a833ef396247a46bf6f2a60bb7832f3c8ca0196450577c73056b4fd4c2ccb176122fb7447ccedc83087119c733b7dbea02f634e8c76a903056bd6466ecf125c3dba2e5729988", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040)={r5, 0xb, "1b127b454fe1a61632ece9"}, &(0x7f0000000080)=0x13) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e21, 0x101, @mcast1}}}, &(0x7f0000000180)=0x84) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) 17:46:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f00000000c0)=0x6) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000080)={0x8, 0x4c40, 0x400, 0x0, 0xffff}) [ 1125.606898] ip_tables: iptables: counters copy to user failed while replacing table 17:46:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:44 executing program 1: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x200d00, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r1, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000d7, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xf, 0x80, 0x3417, 0x3, 0x200, r0, 0x1, [], r2, r4, 0x3, 0x1}, 0x40) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0xfffffffffffffff7) 17:46:44 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x505e}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:44 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x80000183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'osx.', 'status\x00'}, &(0x7f0000000200)=""/103, 0x67) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 1126.041640] ip_tables: iptables: counters copy to user failed while replacing table 17:46:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:45 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x505e}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5607, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x202000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0x4, 0x7, 0x7fff, '3\f!Y'}) [ 1126.584871] ip_tables: iptables: counters copy to user failed while replacing table 17:46:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000413b7d04700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000005400000000000000000000000000380074696d650000000000000000000000000000000000000000000000f1000000000000ffffffff4f970000000001000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000cf000000000000380071756f74610000000000000028372b75893eda63000000000000000000000100000000000000470d0000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000edffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) [ 1126.759640] ip_tables: iptables: counters copy to user failed while replacing table 17:46:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) [ 1127.020534] ip_tables: iptables: counters copy to user failed while replacing table 17:46:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:45 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x1, 0x9, 0x7fff, 0x0, 0x0, 0x0, 0x2000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x40000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000140)=0x60) 17:46:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)=0x3ff) 17:46:45 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000413b7d04700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000005400000000000000000000000000380074696d650000000000000000000000000000000000000000000000f1000000000000ffffffff4f970000000001000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000cf000000000000380071756f74610000000000000028372b75893eda63000000000000000000000100000000000000470d0000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000edffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) [ 1127.248314] ip_tables: iptables: counters copy to user failed while replacing table 17:46:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) syz_open_pts(0xffffffffffffffff, 0x20002) 17:46:46 executing program 2: syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:46 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xf, r0, 0x400000006, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:46 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000100)={[{0x9, 0x1, 0x40, 0x3, 0x4, 0x80, 0x8, 0x40, 0x2, 0x9, 0x5, 0x7, 0x6}, {0x6, 0xff, 0x5, 0x0, 0x3, 0x3, 0x7, 0x0, 0x1f, 0x8, 0x4, 0xff, 0xffffffff}, {0x100, 0x20, 0x9, 0x4, 0xb, 0x4, 0x2, 0x1f, 0x1, 0x8, 0xf7, 0x3f, 0x8}], 0x90}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:46 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x103080, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r2, 0x540b, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r3, 0x540b, 0x0) ioctl$TCXONC(r3, 0x5607, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x1054c5) 17:46:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000080)=""/231) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x2040, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) dup3(r5, r3, 0x80000) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000180)={{0x3, 0x0, 0x5, 0x0, 0x607}}) [ 1127.625982] ip_tables: iptables: counters copy to user failed while replacing table 17:46:46 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00', 0xfffffffffffffffc}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0xf, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x7}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x804) ioctl$TCXONC(r1, 0x5607, 0x2) 17:46:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:46 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:46 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x91}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f00000002c0)="290c0df36dc4ee3475ebcbfb97875e1a277147ffffff8ca70318b84af935cee0e3b01e1099f324373cecb18bbadb15ae3bafa226da91e5e47ac6404d60b8bf4f11e9ae80ed4568a3743f85691355bc91a3572c4bf2ce133c9396bbfcfb0152a598b89a0934301e31fd7b9237450a3ece8006552bcd813b232f2bfe710d5e450c4d44dc12e19e88ab29bb90534bfec6986a34a75faa7be1e723f1753421768536692efe95abf76cb32f5bb8", 0xab}, {&(0x7f0000000100)="d7224f164f8987772e7091161585be0efe99bff0647db7f4fba5523fecbcd1436471f71d8a1fc335a0a669c2be476b9bdbe68a56636d807c5bb2e247dff54904273a243b051d22e6c1", 0x49}], 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000880)={0x0, &(0x7f0000000840)=[&(0x7f0000000380)="a58d15a01adcfa1c317922c8bf64a1423d537f9fa7b6d49067163a31cc787e060ec23462b9b7244e617d54f97bb4f7675056eb2c1b2fc8bd3fb69f625dcc3518b964776e28a32bcf23a70628566778049e10531b0bc99337d133db2edf6a365904891e6828620911e63e3f6eca8bd8dad15b8e2566d66e1ebb2348b3c55bcc10e475f52788314c05615045ad0495198a1aeb040b7c8737e2f1a531f6eb96499d2cdaa40c736178f9d482d92a19fe1f86a2b3ae74fa3d2f21961b03f892c312dd61b4d7cd492adeaa055b53115a4750f855ee3fccc044e5c51e6749d2fc6ca0c4892a03f5", &(0x7f0000000480)="53541a991d54f3ab835113bf0b8603f1f9a4d683e301e3d22f7d03bfd31301c3cd3b8f4f749bb477758f141efdf61ff054a37bdc93bf580154de196d43ddcf7d31fdd520c627ff464ae302ba4c1fad72e1213a4937db07a573181ebae701e07bddf748a519e52b4c65dfef8d45527306fb5004062108c7cb8bcd657eef1b5159b5a2f42507fd016c3c4e9c2829d261d9351c1d3e4d1b6e0eb75fc6a9262abaa95f19f2835f366c99e6", &(0x7f0000000240)="688f022b1e733ce83b5da0261540642c88f40a2a6f938937a94b690b4841140de865", &(0x7f0000000540)="7310c114cf5289e62256196ceafaf68a042d475a1938d502882b38359b14ac8762afdcbb7aa620a67224816697c6bce1b50b5e6465b186c833192ec6e1ff202f2d35d2286fcf80978c5f97ce1ab58f4756dc230da229851add39d464e9e4750b2ce66436dcf61ad07bf44accc096da7fa57c907fe6ebf0348edc0d88b2d9652916e92979fef58d40701adf6b80d582db3c63a3b0dca5d1b46ee3536d937f0c2acc2981dddfee10f2f3f590a8224d90387573cdc585a90a08de4c0425a6f0e2c1ccdd25f27f7b087bfe83fee2e1f6af3ab27116b90112d55f0e4af2c555f378e815", &(0x7f0000000640)="2b6c85524bfde64b0bbbd14fc67a653fa2d6a4c425937f37528842fba26fb8171381c210d2607c364b6eda9320b27f8ca0a72c5a41b07c80425818b2ae4ce10db5e649ba787d52c066e71a0dd7a85de15193303a927730fdeecea9ad86e6014afbae4eb3a3d825a22859f8f5b1075fec278e55234b3bd4910c49d626635ad5b5d1b407e7cfb5071e8fc78e7b6780f8be7e2def6fbfbbc00a10a55bf8e7ee4e8deb87af795f91d24b135b2cba43b0067d6caa78de543026666f72ce27b1c047a494afd44fb72eb7666e564c47b91b9e1d9156639f0612f386c712a133b351068c1e", &(0x7f0000000740)="224b90e1f42322df96eca34df2c5c6ec7eb8cf1e8f53d7d175fca8f1c1a786ed7dc932f4a5d0d06f31bbd23a0d78d26442d84238bf12b62253cc9c6d066d627229a3839b89ab3ee4f0c876b51880bd11acfa8a4e9724a3f6b05fff9bfbaf5f8c20ebd6a63aecb732a432ab187a4ecccf329ae6e2c392068d49bfe3bb8177a8719fbe002407183e3d37be8f4db307f790c7b1c08a6bd53b6b06731b2f3eb074787a64a7be8c02d4da53abb4eeeea7b68f1207eaa2323b4ef02b433b73659ed36293402258d1cc8710044653b33e714fe3928e58b34b348b59ef16d9754ded41053eebfe401cffb92503"], 0x4}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000140)={0x7, 0x6, 0x3}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, r6, 0x0, 0x20000000000000d8) ioctl$SIOCRSACCEPT(r6, 0x89e3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$packet_buf(r5, 0x107, 0x2, &(0x7f0000000540)="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", 0x1000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x14, r3, 0x0, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000fedbdf250140000005002d00010000000a000900ea2ad09b44f1000008002c0013080000050030000100000005002f0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x10) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1405, 0x400, 0x70bd2a, 0x25dfdbfb, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x30}}, 0x4000) 17:46:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) [ 1128.063532] ip_tables: iptables: counters copy to user failed while replacing table 17:46:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7ff, 0x80200) 17:46:46 executing program 5: futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x77359400}}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9, 0x0, 0x0, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x4, 0x0, 0x5}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x0, 0x400000000000) 17:46:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:46 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x200) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) [ 1128.473117] ip_tables: iptables: counters copy to user failed while replacing table 17:46:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = syz_open_dev$vcsn(&(0x7f0000000680)='/dev/vcs#\x00', 0x9, 0x103a00) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r1, 0x0, 0x20000000000000d8) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x20200000000000) ioctl$TCXONC(r0, 0x5607, 0x2) 17:46:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r3, 0x540b, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0xd, 0x3, 0x3b, &(0x7f00000002c0)="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"}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) 17:46:47 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) fallocate(r0, 0x7, 0x4, 0x8001) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0xffffffffffffff62}}, 0x40048800) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r3, 0x300, 0x70bd29, 0x25df5bfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000280)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000040)) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x182c1, 0x0) ioctl$TIOCNOTTY(r7, 0x5422) 17:46:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) eventfd2(0x9, 0x80801) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0xfffffffd}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) recvfrom$ax25(r4, &(0x7f0000000100)=""/112, 0x70, 0x2, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RRENAMEAT(r6, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) [ 1128.961601] ip_tables: iptables: counters copy to user failed while replacing table 17:46:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) [ 1129.255314] ip_tables: iptables: counters copy to user failed while replacing table 17:46:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() ptrace$pokeuser(0x6, r3, 0x2, 0x4) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000100)={0x0, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) write$cgroup_pid(r2, &(0x7f0000000000)=r3, 0x12) 17:46:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) [ 1129.432881] ip_tables: iptables: counters copy to user failed while replacing table 17:46:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5607, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) 17:46:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000003c0)="60a8ba7b59d3e85cb7a73fd75841cde06b281dc52a250f4f8599044da8e8fde60a201640cd26d4fc81ebd8b68a8d8f860318f9ea91bc442adee95b5c5fa2d9c978f17e179feb2a94af0c3cac0de2d079432419d34a177bbf4c34d288645cdc6f705f8ce32d8a6c4840dbeeb392554cff15ca319485d0427c0f8fc3a5d8983a71d2601991aac9dc3c8dc1003c3438e7", 0x8f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x400000, &(0x7f00000002c0)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030362c6d6f64653d30303030303030faeca3269cc0ed10e8303030303030303030303230303030302c6d6f64653d30303030303030303030303030000800000000000037372c6d6f64653d30303030303030303030303030303030303030303030372c6d6f64653d30303030303030303030303030303030303030303030312c6d6f64653d30303030303030303030303030303030303030323030302c6d6f64653d303030303030303030332c6d6f64652d13545f3d30303030303030303030303030303030303030303030322c61707072616973652cd6"]) ioctl$TCFLSH(r0, 0x540b, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000100)={0x1ff, 0x547, 0x0, 0x7, 0x10001}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r5 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000200)) 17:46:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:48 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) close(r1) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000fdffffffefffff0100000000000000d5507836fe004000060000000000000006000000000000000100000000000000040094167e835d000000000000e107000000000000f30000000000000000000000010000000000000007000000000000003c2b19d88ac7120478515a4fe93ade08f0f0f9cfa1096586858395a853a230b63ff32f08e2bb863a8af35163ed855c13e31bd9db941f5bc0bcee434a6c38ce5ac3c0e27f5f0b6064ba3d97aeeac35a03c4cee568e4d17edcc9663a95c710"]) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x1c}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f0000000100), 0x0, 0x3) [ 1129.843020] ip_tables: iptables: counters copy to user failed while replacing table 17:46:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000100)={0xe, {0x5, 0x9, 0x9, 0xc5, "e4377896af702a6fba627812e2c894d5bc38cdfb4c536d462bfc0effb56a5eda3946c55a7fbe4360a40fd814a14634354941a5e3b3054a21ed5926a798be7f6303b41b86d0e15e0e216d26f9e4a99999d9b6da394bccc3f6f54ea82b8f86cb8466b1ec9a8b2b0eeaee72d7cc4bb89d9d19b07c172fbfe08e8d9353be4ded06e4989883e29aa034d5c4c4bf344c86feeb11c95e6f0742739856d550f6713a835c4d209d3935dc54c7e316f4f30744bba26b1c8f25d5c6bf5f1abb1963f019d186cbbeb8e390"}}, 0xd1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) 17:46:48 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:48 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) recvfrom$l2tp(r2, &(0x7f00000004c0)=""/75, 0x4b, 0x2020, &(0x7f0000000540)={0x2, 0x0, @empty}, 0x10) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0) r6 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}}, 0x40048800) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r6, 0x300, 0x70bd29, 0x25df5bfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='2\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf5edb000000000000000741000000140018000000bf7564703a73797a315400000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r8, r7, 0x0, 0x20000000000000d8) sendmsg$nl_crypto(r7, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="e0000000100000012bbd7000fddbdf25737464726e67000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc6567d1710000000000000000000000000000000000000000000000b546a7c624054ecba9c2b71ea2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009eee09ff37d3fc7917000000000000000000000000003bc22b4a4a1a5000000000000000000000000000000000000000000000000000000000000000000000000000000004000000200000009d47aa5e7afac57f61a07721a2c6a59a1dc0ef38b2aeff03b175bdf5ac9a04004474643c7c0d7e33bd7e43671c6272232a6a15b104a8db4e55857e3d57ee655e03b1fb1c7cbc7c7d6522e2291098ba2343b1433f32d3f2862d4dc15563edc60efe61ef1e9b9e770bea49d11a8e6bb48d6754"], 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) 17:46:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r1, 0x9, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100), 0x10) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) 17:46:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:49 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x204000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000114000009040000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0xe}, {0xd, 0xf}, {0x5, 0xd}}, [@qdisc_kind_options=@q_atm={0x8, 0x1, 'atm\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4008094) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000040)) 17:46:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) timer_create(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x15}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x100) ioctl$RTC_EPOCH_READ(r2, 0xc0287c02, &(0x7f0000000040)) ioctl$TCXONC(r0, 0x5607, 0x2) [ 1130.754365] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:46:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000000c0)=0x1) ioctl$TCFLSH(r1, 0x540b, 0x2) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000140)={0x1, 0x0, 0x0, 0xfffffff7, 'syz1\x00', 0x7}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r6 = dup3(0xffffffffffffffff, r5, 0x80000) ioctl$VT_GETMODE(r6, 0x5601, &(0x7f0000000100)) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x4) 17:46:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:49 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) alarm(0x3f) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:49 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x8000000) r0 = getpid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x400, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0xe0, 0x7, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_USERDATA={0x56, 0x7, 0x1, 0x0, "715a66c13ec26f6dd64ee2bcc04115a60751d649ab21407a6beb657001e853b87d8e2bb312a9eb12f5772442d5d45662640603b850dc991a1c338a34d4207203da99bc35136ffde7513121d39a757d96a033"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x56, 0x7, 0x1, 0x0, "62b654e9a185d56976c34bfced7354ff207cf28aad2e97cdd37c7a74a756d70e726d875babc969c9806e1da6ba3ab01f501d444246624de27f1356db01055719ae2c8ce416b8a11056ba4d888bb9bb5ecb8f"}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x4090) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/91, 0x5b}, 0xfffffbfc}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3ff, 0x3}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r3, 0x0, 0x44000000) finit_module(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @local, @ipv4={[], [], @broadcast}}) 17:46:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:50 executing program 5: syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9, 0x0, 0x0, 0x1000, 0x0, 0xf58}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="bcf67fda3054d380c34d9606cb45049f8ea526340b17df01a38d3f19bceecd4e678624852a23498159d64bac29782db08ce2a4d8bd69ace8a33142a72cdf4f558cce3e5ae9bc7490ed0a531aceee908adadefad992c6ae10526a00", 0xffffffffffffff5d) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x6, 0x2, 0x0, "7d773580023d0836fe03885dc9bfdad64899ea8248ec5cec32cbc9ca622eee73", 0x33363248}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x8, 0x10, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') preadv(r4, &(0x7f00000017c0), 0x0, 0x0) 17:46:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) [ 1131.897391] net_ratelimit: 1 callbacks suppressed [ 1131.897397] ip_tables: iptables: counters copy to user failed while replacing table 17:46:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) gettid() process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:52 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x141700) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) fsync(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x5607, 0x0) 17:46:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x10) 17:46:52 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x100001b5, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000012c0)=ANY=[@ANYBLOB="061c000000000000c91000001606000000000000ffff0000000081b2cb098925c10ef45963e2c80ff40967a5d7f42473d48c5ace6508eec8b133b7978d9ca3cc2add3bdde5ab6387098e9b3199165f0dfbcefd31641bfee5f42cf7967fde1cb58502a7a56d0e59c1f8757e75f50677b5d2a0dad7a4272ed6b3d0979e028040b3ef0a417044bc7c789e1750d923a229519d3eaaa5420800b06f587a322ba4053d7d827e2fb843fa7849278f8eb129604583bfa5b252a28d8b2dd023e4570bc249d100819ef8af184c2252d3dcb063c204000000010710000000030205ff7fffff00000000000005020000000000000000"], 0xf0) preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) gettid() process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) gettid() process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xb, 0x25c082) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000080)={0x0, @reserved}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000040)) [ 1133.815687] ip_tables: iptables: counters copy to user failed while replacing table 17:46:52 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0) r1 = socket$inet6(0xa, 0xa, 0x10000) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="b830b07eddc287c3375f9c", 0xb}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:52 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) alarm(0x3f) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 17:46:52 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:52 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x10000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r1, @ANYBLOB="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"/282], 0x11c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040080) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000280)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) ioctl$TCXONC(r2, 0x5607, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x48d0}, 0x20008044) 17:46:52 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:53 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, 0x0, 0x194, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f0000000100)="4ec0625adbb7050c72b54972d4845d7df55295fc5e5991a8993483d80800000000000000306de01f264dbe4f5a58b89f39e0778ee69ba562e8fba9557f370f6edcb37cbd17f7b129863fe87e628c090332c900ab", 0x54}, {&(0x7f0000000200)="1bb1e148fee1555385ae7d2e5706825cc1998f6d211043fcf0c0624b30bd1b096c91c8f229ddfdd9605f2f18c97d17645a13d512", 0x34}], 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x1, 0x40, 0x23, 0xfffffffffffffffc, 0x0, 0x0, 0x3ff, 0x7fff}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f5, 0x800, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8080}, 0x40) 17:46:53 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) alarm(0x3f) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r2, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000d7, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000280)={r5, 0x0, 0x0, 0x8000}, &(0x7f0000000100)=0x14) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x20000000000000d8) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x13, 0x2, {0x0, 0x3, 0x5}}, 0x14) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r5, 0x4}, &(0x7f0000000180)=0x8) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r7 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f0000000080)={0x9, 0x0, 0x1, 'queue0\x00', 0x9}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 17:46:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) [ 1134.689347] ip_tables: iptables: counters copy to user failed while replacing table 17:46:53 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0xa, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1b, 0x0, 0x2000003, 0x100, 0x0, 0x0, 0x0, 0x2}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000100)=0x7fff, 0x4) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000000)=""/11) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x5607, 0x2) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000100)={'ip6tnl0\x00', 0xffffffff}) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', './file0', [{0x20, '}**&*).\xe9\''}, {0x20, '($,'}, {0x20, ':\xab/*'}], 0xa, "15e749e79359313997b3c34eeaea"}, 0x2c) 17:46:53 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) alarm(0x3f) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:53 executing program 3 (fault-call:1 fault-nth:0): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) 17:46:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:54 executing program 1 (fault-call:5 fault-nth:0): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 17:46:54 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xfffffffffffffffa, 0x100000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x6b, 0x2, 0x1, 0x0, 0x3, 0x6}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) creat(&(0x7f0000000100)='./file0\x00', 0x8d) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 1135.459497] FAULT_INJECTION: forcing a failure. [ 1135.459497] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.541855] CPU: 1 PID: 2866 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 1135.549689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1135.559041] Call Trace: [ 1135.561633] dump_stack+0x1b2/0x283 [ 1135.565266] should_fail.cold+0x10a/0x154 [ 1135.569449] should_failslab+0xd6/0x130 [ 1135.573452] kmem_cache_alloc_node+0x25f/0x400 [ 1135.578056] __alloc_skb+0x9a/0x4c0 [ 1135.581691] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1135.586537] ? netlink_autobind.isra.0+0xa9/0x290 [ 1135.591381] ? netlink_autobind.isra.0+0x1c5/0x290 [ 1135.596316] netlink_sendmsg+0x921/0xbb0 [ 1135.597604] FAULT_INJECTION: forcing a failure. [ 1135.597604] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.600383] ? nlmsg_notify+0x160/0x160 [ 1135.600395] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 1135.600412] ? security_socket_sendmsg+0x83/0xb0 [ 1135.600428] ? nlmsg_notify+0x160/0x160 [ 1135.629339] sock_sendmsg+0xb5/0x100 [ 1135.633054] ___sys_sendmsg+0x70a/0x840 [ 1135.637033] ? copy_msghdr_from_user+0x380/0x380 [ 1135.641794] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1135.646723] ? lock_downgrade+0x6e0/0x6e0 [ 1135.650868] ? check_preemption_disabled+0x35/0x240 [ 1135.655885] ? lock_acquire+0x170/0x3f0 [ 1135.659853] ? lock_downgrade+0x6e0/0x6e0 [ 1135.663999] ? __fget+0x226/0x360 [ 1135.667448] ? __fget_light+0x199/0x1f0 [ 1135.671425] ? sockfd_lookup_light+0xb2/0x160 [ 1135.675925] __sys_sendmsg+0xa3/0x120 [ 1135.679726] ? SyS_shutdown+0x160/0x160 [ 1135.683723] ? wait_for_completion_io+0x10/0x10 [ 1135.688395] ? SyS_read+0x210/0x210 [ 1135.692015] ? SyS_clock_settime+0x1a0/0x1a0 [ 1135.696419] SyS_sendmsg+0x27/0x40 [ 1135.699974] ? __sys_sendmsg+0x120/0x120 [ 1135.704028] do_syscall_64+0x1d5/0x640 [ 1135.707916] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1135.713098] RIP: 0033:0x45cb29 [ 1135.716281] RSP: 002b:00007f2a7345dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1135.723990] RAX: ffffffffffffffda RBX: 00000000004fef00 RCX: 000000000045cb29 [ 1135.731258] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000003 [ 1135.738526] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1135.745797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1135.753067] R13: 000000000000095f R14: 00000000004d6478 R15: 00007f2a7345e6d4 [ 1135.770534] CPU: 0 PID: 2873 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1135.778336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1135.787685] Call Trace: 17:46:54 executing program 3 (fault-call:1 fault-nth:1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) [ 1135.790282] dump_stack+0x1b2/0x283 [ 1135.793917] should_fail.cold+0x10a/0x154 [ 1135.798071] should_failslab+0xd6/0x130 [ 1135.802047] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1135.806721] alloc_pipe_info+0xaa/0x380 [ 1135.810703] splice_direct_to_actor+0x581/0x730 [ 1135.815374] ? avc_policy_seqno+0x5/0x10 [ 1135.819435] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1135.824287] ? do_splice_to+0x150/0x150 [ 1135.828268] ? rw_verify_area+0xe1/0x290 [ 1135.832334] do_splice_direct+0x164/0x210 [ 1135.836487] ? splice_direct_to_actor+0x730/0x730 [ 1135.841340] ? rw_verify_area+0xe1/0x290 [ 1135.845409] do_sendfile+0x469/0xaf0 [ 1135.849187] ? do_compat_pwritev64+0x140/0x140 [ 1135.849222] FAULT_INJECTION: forcing a failure. [ 1135.849222] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.853799] SyS_sendfile64+0xff/0x110 [ 1135.853811] ? SyS_sendfile+0x130/0x130 [ 1135.853824] ? do_syscall_64+0x4c/0x640 [ 1135.853834] ? SyS_sendfile+0x130/0x130 [ 1135.853845] do_syscall_64+0x1d5/0x640 [ 1135.853864] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1135.853878] RIP: 0033:0x45cb29 17:46:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5607, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x10000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/77}) [ 1135.893031] RSP: 002b:00007fe15ed9ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1135.900755] RAX: ffffffffffffffda RBX: 00000000004fd880 RCX: 000000000045cb29 [ 1135.908038] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1135.915308] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1135.922574] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000006 [ 1135.929838] R13: 0000000000000905 R14: 00000000004cbe3c R15: 00007fe15ed9b6d4 [ 1135.938388] CPU: 1 PID: 2881 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 1135.938395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1135.938399] Call Trace: [ 1135.938416] dump_stack+0x1b2/0x283 [ 1135.938433] should_fail.cold+0x10a/0x154 [ 1135.938449] should_failslab+0xd6/0x130 [ 1135.938461] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1135.938476] __kmalloc_node_track_caller+0x38/0x70 [ 1135.979927] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1135.984602] __alloc_skb+0xca/0x4c0 [ 1135.988233] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1135.993081] ? netlink_autobind.isra.0+0xa9/0x290 [ 1135.997926] ? netlink_autobind.isra.0+0x1c5/0x290 [ 1136.002858] netlink_sendmsg+0x921/0xbb0 [ 1136.006922] ? nlmsg_notify+0x160/0x160 [ 1136.010896] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 1136.012179] ip_tables: iptables: counters copy to user failed while replacing table [ 1136.015914] ? security_socket_sendmsg+0x83/0xb0 [ 1136.015926] ? nlmsg_notify+0x160/0x160 [ 1136.015937] sock_sendmsg+0xb5/0x100 [ 1136.015951] ___sys_sendmsg+0x70a/0x840 17:46:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:54 executing program 1 (fault-call:5 fault-nth:1): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r1, r2, 0x0, 0x800000080004105) [ 1136.015964] ? copy_msghdr_from_user+0x380/0x380 [ 1136.015978] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1136.015986] ? lock_downgrade+0x6e0/0x6e0 [ 1136.015998] ? check_preemption_disabled+0x35/0x240 [ 1136.016016] ? lock_acquire+0x170/0x3f0 [ 1136.016026] ? lock_downgrade+0x6e0/0x6e0 [ 1136.016044] ? __fget+0x226/0x360 [ 1136.070496] ? __fget_light+0x199/0x1f0 [ 1136.074478] ? sockfd_lookup_light+0xb2/0x160 [ 1136.078981] __sys_sendmsg+0xa3/0x120 [ 1136.082792] ? SyS_shutdown+0x160/0x160 [ 1136.086777] ? wait_for_completion_io+0x10/0x10 [ 1136.091457] ? SyS_read+0x210/0x210 [ 1136.095087] ? SyS_clock_settime+0x1a0/0x1a0 [ 1136.099500] SyS_sendmsg+0x27/0x40 [ 1136.103040] ? __sys_sendmsg+0x120/0x120 [ 1136.107104] do_syscall_64+0x1d5/0x640 [ 1136.111001] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1136.116189] RIP: 0033:0x45cb29 [ 1136.119376] RSP: 002b:00007f2a7345dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1136.127084] RAX: ffffffffffffffda RBX: 00000000004fef00 RCX: 000000000045cb29 [ 1136.134350] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000003 [ 1136.141619] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1136.148886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1136.156151] R13: 000000000000095f R14: 00000000004d6478 R15: 00007f2a7345e6d4 17:46:54 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x402000, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x5, 0xfffffffe, 0x3, 0x0, 0x2, 0x8, 0xfffffffd}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:54 executing program 3 (fault-call:1 fault-nth:2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) 17:46:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) [ 1136.300460] FAULT_INJECTION: forcing a failure. [ 1136.300460] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.342803] CPU: 0 PID: 2903 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1136.350619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1136.351554] FAULT_INJECTION: forcing a failure. [ 1136.351554] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.359967] Call Trace: [ 1136.359987] dump_stack+0x1b2/0x283 [ 1136.360006] should_fail.cold+0x10a/0x154 [ 1136.360023] should_failslab+0xd6/0x130 [ 1136.360035] __kmalloc+0x2c1/0x400 [ 1136.360045] ? alloc_pipe_info+0x156/0x380 [ 1136.360058] alloc_pipe_info+0x156/0x380 [ 1136.360074] splice_direct_to_actor+0x581/0x730 [ 1136.360087] ? avc_policy_seqno+0x5/0x10 [ 1136.360103] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1136.410887] ? do_splice_to+0x150/0x150 [ 1136.414853] ? rw_verify_area+0xe1/0x290 [ 1136.418909] do_splice_direct+0x164/0x210 [ 1136.423052] ? splice_direct_to_actor+0x730/0x730 [ 1136.427905] ? rw_verify_area+0xe1/0x290 [ 1136.431957] do_sendfile+0x469/0xaf0 [ 1136.435672] ? do_compat_pwritev64+0x140/0x140 [ 1136.440258] SyS_sendfile64+0xff/0x110 [ 1136.444184] ? SyS_sendfile+0x130/0x130 [ 1136.448164] ? do_syscall_64+0x4c/0x640 [ 1136.452131] ? SyS_sendfile+0x130/0x130 [ 1136.456123] do_syscall_64+0x1d5/0x640 [ 1136.460069] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1136.465268] RIP: 0033:0x45cb29 [ 1136.468452] RSP: 002b:00007fe15ed9ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1136.476157] RAX: ffffffffffffffda RBX: 00000000004fd880 RCX: 000000000045cb29 [ 1136.483430] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 1136.490691] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1136.497959] R10: 0800000080004105 R11: 0000000000000246 R12: 0000000000000006 [ 1136.505224] R13: 0000000000000905 R14: 00000000004cbe3c R15: 00007fe15ed9b6d4 [ 1136.529919] CPU: 1 PID: 2911 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 1136.537727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1136.547077] Call Trace: [ 1136.549690] dump_stack+0x1b2/0x283 [ 1136.553325] should_fail.cold+0x10a/0x154 [ 1136.557477] ? lock_downgrade+0x6e0/0x6e0 [ 1136.561632] should_failslab+0xd6/0x130 [ 1136.565611] kmem_cache_alloc+0x40/0x3c0 [ 1136.569680] skb_clone+0x126/0x320 [ 1136.573230] netlink_deliver_tap+0x65b/0x860 [ 1136.577650] netlink_unicast+0x485/0x610 [ 1136.581721] ? netlink_sendskb+0x50/0x50 [ 1136.585791] netlink_sendmsg+0x64a/0xbb0 [ 1136.589859] ? nlmsg_notify+0x160/0x160 [ 1136.593848] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 1136.598903] ? security_socket_sendmsg+0x83/0xb0 [ 1136.603689] ? nlmsg_notify+0x160/0x160 [ 1136.607672] sock_sendmsg+0xb5/0x100 [ 1136.611410] ___sys_sendmsg+0x70a/0x840 [ 1136.615412] ? copy_msghdr_from_user+0x380/0x380 [ 1136.620173] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1136.625108] ? lock_downgrade+0x6e0/0x6e0 [ 1136.629256] ? check_preemption_disabled+0x35/0x240 [ 1136.634267] ? lock_acquire+0x170/0x3f0 [ 1136.638221] ? lock_downgrade+0x6e0/0x6e0 [ 1136.642355] ? __fget+0x226/0x360 [ 1136.645821] ? __fget_light+0x199/0x1f0 [ 1136.649774] ? sockfd_lookup_light+0xb2/0x160 [ 1136.654248] __sys_sendmsg+0xa3/0x120 [ 1136.658026] ? SyS_shutdown+0x160/0x160 [ 1136.661974] ? wait_for_completion_io+0x10/0x10 [ 1136.666624] ? SyS_read+0x210/0x210 [ 1136.670226] ? SyS_clock_settime+0x1a0/0x1a0 [ 1136.674637] SyS_sendmsg+0x27/0x40 [ 1136.678163] ? __sys_sendmsg+0x120/0x120 [ 1136.682203] do_syscall_64+0x1d5/0x640 [ 1136.686069] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1136.691233] RIP: 0033:0x45cb29 17:46:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) [ 1136.694398] RSP: 002b:00007f2a7345dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1136.702093] RAX: ffffffffffffffda RBX: 00000000004fef00 RCX: 000000000045cb29 [ 1136.709339] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000003 [ 1136.716585] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1136.723846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1136.731105] R13: 000000000000095f R14: 00000000004d6478 R15: 00007f2a7345e6d4 17:46:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0x0, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:55 executing program 1 (fault-call:5 fault-nth:2): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 17:46:55 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000280)={0xffffffff, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000100)={0x8, [0xfffe, 0x1, 0x1, 0x9, 0x6, 0x100, 0x6, 0x5]}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:55 executing program 3 (fault-call:1 fault-nth:3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) 17:46:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5607, 0x2) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x40) [ 1136.906062] FAULT_INJECTION: forcing a failure. [ 1136.906062] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.926219] ip_tables: iptables: counters copy to user failed while replacing table [ 1136.930539] CPU: 1 PID: 2937 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 1136.941804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1136.951155] Call Trace: [ 1136.953745] dump_stack+0x1b2/0x283 [ 1136.957377] should_fail.cold+0x10a/0x154 [ 1136.961588] should_failslab+0xd6/0x130 [ 1136.965565] kmem_cache_alloc_node+0x25f/0x400 [ 1136.970154] __alloc_skb+0x9a/0x4c0 [ 1136.973811] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1136.978659] ? nfnetlink_rcv_msg+0x4b7/0xc00 [ 1136.983101] netlink_ack+0x218/0x970 [ 1136.986831] ? netlink_sendmsg+0xbb0/0xbb0 [ 1136.991087] netlink_rcv_skb+0x2ba/0x370 [ 1136.995153] ? nfnetlink_net_exit_batch+0x150/0x150 [ 1137.000187] ? netlink_ack+0x970/0x970 [ 1137.004091] ? ns_capable_common+0x127/0x150 [ 1137.008537] nfnetlink_rcv+0x1ab/0x1650 [ 1137.012511] ? check_preemption_disabled+0x35/0x240 [ 1137.017534] ? perf_trace_lock+0x109/0x4b0 [ 1137.021788] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1137.026721] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1137.031854] ? nfnl_err_del+0x150/0x150 [ 1137.035845] ? netlink_deliver_tap+0x90/0x860 [ 1137.040359] ? __rcu_read_unlock+0x158/0x160 [ 1137.044769] ? lock_downgrade+0x6e0/0x6e0 [ 1137.048923] netlink_unicast+0x437/0x610 [ 1137.052990] ? netlink_sendskb+0x50/0x50 [ 1137.057056] netlink_sendmsg+0x64a/0xbb0 [ 1137.061127] ? nlmsg_notify+0x160/0x160 [ 1137.065102] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 1137.070125] ? security_socket_sendmsg+0x83/0xb0 [ 1137.074914] ? nlmsg_notify+0x160/0x160 [ 1137.078887] sock_sendmsg+0xb5/0x100 [ 1137.082637] ___sys_sendmsg+0x70a/0x840 [ 1137.086628] ? copy_msghdr_from_user+0x380/0x380 [ 1137.091384] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1137.096309] ? lock_downgrade+0x6e0/0x6e0 [ 1137.100459] ? check_preemption_disabled+0x35/0x240 [ 1137.105492] ? lock_acquire+0x170/0x3f0 [ 1137.109472] ? lock_downgrade+0x6e0/0x6e0 [ 1137.113629] ? __fget+0x226/0x360 [ 1137.117082] ? __fget_light+0x199/0x1f0 [ 1137.121055] ? sockfd_lookup_light+0xb2/0x160 [ 1137.125557] __sys_sendmsg+0xa3/0x120 [ 1137.129356] ? SyS_shutdown+0x160/0x160 [ 1137.133328] ? wait_for_completion_io+0x10/0x10 [ 1137.138006] ? SyS_read+0x210/0x210 [ 1137.141633] ? SyS_clock_settime+0x1a0/0x1a0 [ 1137.146060] SyS_sendmsg+0x27/0x40 [ 1137.149602] ? __sys_sendmsg+0x120/0x120 [ 1137.153667] do_syscall_64+0x1d5/0x640 [ 1137.157559] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1137.162748] RIP: 0033:0x45cb29 [ 1137.165946] RSP: 002b:00007f2a7345dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1137.173639] RAX: ffffffffffffffda RBX: 00000000004fef00 RCX: 000000000045cb29 [ 1137.180907] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000003 [ 1137.188278] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1137.195535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 17:46:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) [ 1137.202815] R13: 000000000000095f R14: 00000000004d6478 R15: 00007f2a7345e6d4 17:46:55 executing program 3 (fault-call:1 fault-nth:4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) 17:46:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) [ 1137.354255] FAULT_INJECTION: forcing a failure. [ 1137.354255] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.418745] CPU: 1 PID: 2970 Comm: syz-executor.3 Not tainted 4.14.184-syzkaller #0 [ 1137.426583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1137.435930] Call Trace: [ 1137.438522] dump_stack+0x1b2/0x283 [ 1137.442157] should_fail.cold+0x10a/0x154 [ 1137.446323] should_failslab+0xd6/0x130 [ 1137.450315] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1137.455437] __kmalloc_node_track_caller+0x38/0x70 [ 1137.460370] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1137.465089] __alloc_skb+0xca/0x4c0 [ 1137.468718] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1137.473604] ? nfnetlink_rcv_msg+0x4b7/0xc00 [ 1137.478033] netlink_ack+0x218/0x970 [ 1137.481751] ? netlink_sendmsg+0xbb0/0xbb0 [ 1137.485993] netlink_rcv_skb+0x2ba/0x370 [ 1137.490048] ? nfnetlink_net_exit_batch+0x150/0x150 [ 1137.495062] ? netlink_ack+0x970/0x970 [ 1137.498958] ? ns_capable_common+0x127/0x150 [ 1137.503368] nfnetlink_rcv+0x1ab/0x1650 [ 1137.507352] ? check_preemption_disabled+0x35/0x240 [ 1137.512371] ? perf_trace_lock+0x109/0x4b0 [ 1137.516607] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1137.521537] ? nfnl_err_del+0x150/0x150 [ 1137.525511] ? netlink_deliver_tap+0x90/0x860 [ 1137.530012] ? rcu_is_watching+0x11/0xb0 [ 1137.534074] ? lock_downgrade+0x6e0/0x6e0 [ 1137.538226] netlink_unicast+0x437/0x610 [ 1137.542290] ? netlink_sendskb+0x50/0x50 [ 1137.546354] netlink_sendmsg+0x64a/0xbb0 [ 1137.550441] ? nlmsg_notify+0x160/0x160 [ 1137.554416] ? move_addr_to_kernel.part.0+0xf0/0xf0 [ 1137.559449] ? security_socket_sendmsg+0x83/0xb0 [ 1137.564204] ? nlmsg_notify+0x160/0x160 [ 1137.568182] sock_sendmsg+0xb5/0x100 [ 1137.571897] ___sys_sendmsg+0x70a/0x840 [ 1137.575875] ? copy_msghdr_from_user+0x380/0x380 [ 1137.580652] ? perf_trace_lock_acquire+0x4b0/0x4b0 [ 1137.585572] ? lock_downgrade+0x6e0/0x6e0 [ 1137.589722] ? check_preemption_disabled+0x35/0x240 [ 1137.594761] ? lock_acquire+0x170/0x3f0 [ 1137.598734] ? lock_downgrade+0x6e0/0x6e0 [ 1137.602892] ? __fget+0x226/0x360 [ 1137.606353] ? __fget_light+0x199/0x1f0 [ 1137.610328] ? sockfd_lookup_light+0xb2/0x160 [ 1137.614826] __sys_sendmsg+0xa3/0x120 [ 1137.618627] ? SyS_shutdown+0x160/0x160 [ 1137.622600] ? wait_for_completion_io+0x10/0x10 [ 1137.627278] ? SyS_read+0x210/0x210 [ 1137.630904] ? SyS_clock_settime+0x1a0/0x1a0 [ 1137.635311] SyS_sendmsg+0x27/0x40 [ 1137.638847] ? __sys_sendmsg+0x120/0x120 [ 1137.642907] do_syscall_64+0x1d5/0x640 [ 1137.646800] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1137.651988] RIP: 0033:0x45cb29 [ 1137.655176] RSP: 002b:00007f2a7345dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1137.662879] RAX: ffffffffffffffda RBX: 00000000004fef00 RCX: 000000000045cb29 [ 1137.670141] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000003 [ 1137.677409] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1137.684674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1137.691940] R13: 000000000000095f R14: 00000000004d6478 R15: 00007f2a7345e6d4 17:46:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0x0, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5607, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) 17:46:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r1, 0x9, 0x0) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x2ed7f42a) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c6530207b235e2b2020737461747573002073746174757300207374617475730020737461747573000af934c170a0ab5abfc522c81f1bef8fe754db582dd7a5666654c4cfd3705b956618afb0f4ea1a97b2572e695c04ded708c8daaea9fc1ad43965f5751d039fde5e2528e47b447d3fb4ceac183084eeef3cfdc5a4f75e17d833df674a7aaf5d58cb24fae85456b8f312d6921c1724f098106afc10a4de050e5c4973f218f17044e17a805be0af2740022e645e0cbbe697131595a36096323dde76a5e98df96b764e662d2978fc535e0d4f181b6b8f8f6cc0214b197cc8089a60f83f87214e449b7c8879e05390e04e1a45bc741c3c721b6ac44a92"], 0x107) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)={0x2d, 0x7f, "f0cf19947bbfb2011746f514e9a7fafb57e715ec47861f40f0647cf7062adb57be58814373"}, 0x400000) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 17:46:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) [ 1137.854532] ip_tables: iptables: counters copy to user failed while replacing table 17:46:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:56 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000100)='./file0\x00', 0xd669b3cbaa4c0602) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10003) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x41, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) 17:46:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r2, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000d7, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r1, 0x0, 0x20000000000000d8) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x15c, 0x17, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x13c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x15c}, 0x1, 0x0, 0x0, 0x10}, 0x4005) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x48, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1f8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xbb}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4018041}, 0x0) 17:46:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) 17:46:56 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0x1, 0x9, 0x2000000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x400000000, 0x80}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) 17:46:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000030801030000000043eaa95d6900000000000480000000"], 0x28}}, 0x8000) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/35, 0x23) 17:46:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0x0, 0x45a0}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) [ 1138.675517] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1138.697937] QAT: Invalid ioctl [ 1138.739201] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1138.759702] ip_tables: iptables: counters copy to user failed while replacing table 17:46:57 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000100)=0x9c, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xf, r0, 0x40000000009, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:57 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) read$alg(r2, &(0x7f0000000040)=""/82, 0x52) ioctl$TCFLSH(r1, 0x540b, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x4402, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r4, 0x540b, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x200020) ioctl$TIOCSIG(r5, 0x40045436, 0x1e) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)=0x0) r7 = getpgrp(0x0) tgkill(r6, r7, 0x17) 17:46:57 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0xa, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1b, 0x0, 0x2000003, 0x100, 0x0, 0x0, 0x0, 0x2}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000100)=0x7fff, 0x4) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000031578c0003080103000000000091192f972e58a200000000"], 0x28}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) sendmmsg(r0, &(0x7f0000001980)=[{{&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000180)="1f3cff0ec58317bbaa955ec3abddba2be5e0dfec1bff16536398a5879e8ef0551946f8f2a334125d01fa6fc78da1544ba2dab0433ee4f6473d11a9562295e0905e3b70f07c3f8d12c13f9a9a628cd8e378457123408636df1ac00e131b9299f629bb9ca000a51fc2eac0ab09eefd21c706b64b848338a441b3508db77766e7437369541b31ceea83e2de2c25a835eedb4354c431ac5f43de917f717ebb501bf55a30e501a928fe0df93e29ec78143093fee8aa4a8c64edd20da3cd2f46626643729065dbad7953ef609b422de824229223d18daf9ec62477b37da2925d1097", 0xdf}, {&(0x7f0000000280)="4132c7174ebacb524f87545539e8c3a0d493f2592826093716de0927aadf2ec52ccc7f2e46b636516c7977b5c4249d5bfdc906ddbafa1b6c3678055bf9e4d8ba0573342e0581f66c415313b63c3c5e71ea1d67ddc47fdb6390a8837dc8ccc401e4aa9214dcc15e3b4afd9ee4ddcce599fbb94e90ee62db4efd38248d8562e43a4b331979cbe74f9939a1155a5aba", 0x8e}, {&(0x7f0000000340)="9731223a4b8daf31006905388692ecf9d690aca46ad9f6d327031da6f2eb2bf4e70e06d59500bdabfd8ff7a97d3dec22f852c4c990d226f997e7072f9b1aa3dd01f53b1c6a711c62a80a3868b84f0193991882d7ab15f3fddb8dcc1942af3206bceff0633cbf7a459f974e64e1bb7bc32eebc1d685c70a6fd9a12e3098fd2548db56eb28027fb24f", 0x88}, {&(0x7f0000000400)="99bcaf11d16ce1890a7369e8668e0e6af17f2bb56f5a5dd2e375d6bc61b05b8be71cb0335aa570c42b24d640497eee1a269ef54ace9a0bf25f7ab267b85cf6da817402d1b5cad0f2eb5a06903ce21d8729f4efbf6d0e573b6911fb65749a7be2c3fd09e4a7c03c664c98f83a12a816deb96a42c326663230cd2e80f520d72f05b07300469c2bcb447f3b45fd76bfa2be50da61423037bb87f3e27c824cf5bde4ae052e5c1c71279b1897d49b580e8a68db22c2ae10637f88a3e4", 0xba}, {&(0x7f00000000c0)="142a80fd5856b743dea615fd072b1c2651a52c006f6e9b8517d2bdc48bfba2ab7442740f8dab034e388bda73451aeb9feed58629a8357fad6f8d", 0x3a}, {&(0x7f0000000500)="0538892a29bd248bc8e226f20355f82141a89ec7a0324e97a5595b5dd1cf5c18163717adf074ad631090911cd4b1c1441119ea4ad47e1d0bed3de3f86b943cdea278d2a78e8600772c377d95b25aad2acd01ee0cb130c24415d765a823f919f4921d6e4609c76657", 0x68}, {&(0x7f0000000580)="ed3c9df19f6367deec4f3f06605807aeae9df76067042eb317040fc3922548375b9537b1c49ac148348d6c420fe5eb6404088fc35b9fd5a6f93c6a8b15db45ecc24b9749521dc67febd99bb0939f29156b0115fdf4e5d2d47c9c0fcabf5d0ee12add4a70f37d8a814f6f853a4b02de4e7500e0608bb65c1c8f56deb2925b687216c377279d81cecaae92e8", 0x8b}, {&(0x7f0000000640)="a0eb5c3f616f7403c6e92ee67f0367955778ff3356bf718efed0703158593e2fa6e31b2d20c0693ea450a80009eb9e9838f274e0a87a710c1412a47909b65d96174d810d37ee80be57b98298395fd986b16bceb9411903e9115274d5bf1efd9c7412d380da5c2cdc1c8df0c74aec7156e64346322e6c82ddf8ab7db0fa47920d2877e9c01f13c85cc5183a77375cb794b2ac1e73c81b37a74eada2322badb8dcf3e3434ef5b2632b531d3f0e0fe144e09bb634f6f4eacaeb", 0xb8}, {&(0x7f0000000700)="80665f7ad4495344fdb5a944b79260fbcd9c98ba7847e952d14dadf52ff87aea5a55790d838474135aab78f0e89e62b1551ff93b929f0a1ab9801ca5892c1bbf4da6b914d48b9f2d9eb659a320cec3879340ee9556d51113f857f844105bd47396c1a1c516a6bbf788d73a1152c913faf12fb1aff673848a302b27eb8664f5f6d400785a391e4fc532a4347614b789541988966261e44fd95b817d096c5d458e08c2e294593420f9fd59aa1e3b723c7b31f94ae7e0c266152979fc9dd47be42d2315e291", 0xc4}], 0x9, &(0x7f00000008c0)=[{0x108, 0x107, 0x1, "5e5e58229f444b9a816325e1460fecb895424af477ab17b3afa7bdaf79f53b2833a2daef5988959dfb1f8064195fcf6fd154f61c4543da2e0fe97ce75a22c28be6be1896603790e2ef540dac967eb03ad4fdf0c126f5874a31b5b224e20f7ff91ee79e55bae00a4b0c6f13b131d2ef1d972ede27f6a312aa7cdbbc7b2f265829d8bc9559c14eebc5e709776aa0b99d2243d48dbf6c401328f54cde16e4d771836180ffd3f7d09841f8cab79cd41882802c7ab48e45e8856b91b6dd48a3f34bd48792d4c3ac34123c5942b644de661b3d80834f034d408e3acbf580cf568b2b0d0b2977ecd133544fbdcb391d0be36ed48a"}], 0x108}}, {{&(0x7f0000000a00)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000100)="e4360fb47bc9bd2725bd91005397cc991fa6a8bcf46f702052828802217c9ac9a82517", 0x23}, {&(0x7f0000000a80)="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", 0xfb}, {&(0x7f0000000b80)="1dd9bf4a7cd300916f7f", 0xa}, {&(0x7f0000000bc0)="6a07acc8fd1b5a44be03ebee030b7d1fc5452e1101b51856826d97fc77811f2e3dfdee0e5d2174a3054f1e4bbb1c2fc9311b2b9b6a8658e479131a98f7e1b0898a2ae180094e85f718f72418d6f50dac754d81c61d1ace9a2a1f7ed4b4c79fe0b253f5f855bdb859a9f0122e21bbf67f8d7ca1eaf1153ce83bf57bd857877bd65b37acbf72c93009421588105de510c850ae9cc4be63525737b2ce9ae527eea206d1578f03f6ab0a1ee244b26e30bd8c19ae23f529ae4e9fbad30d68023ea5893d31b9d5466528892e331125eab3154d84", 0xd1}, {&(0x7f0000000cc0)="37ee3f09b4f6426bf11bb38700173ac974d597baa0763b1e0d9382f08077832d99ce2bbfb30ba74cf3713c5e332b8d0d6b1a4e8447c88161c50aed36dd947f98993170aa02893c08fae67952aafec0bbd6df4a4e4066a8d9219b66553ef178b7cc8546323405a3b618543bd671ed109a0c8ad8db6d7b359633c189d6a0f9f3dce150b3dfc4cb87f31ac4c008f3a68ccfc94b233e94521c1cc6bfeeb93df5fed258e233c0f4", 0xa5}, {&(0x7f0000000d80)="c2f98eb3520648e2f83b0cecddf2a64e9d277d626de7c9502db732806fab7289e2e227bb6f27722efdbb925255a74d35695608eda1e3e1d06c2f90b29f65a9dce762d77b156d3f01a12ffaef0de69416329dc5df443b7d8d7f0577895f1aaee7b6b9e6dc4bf27131ed431a83c49daa976a778a550068248d62d4779e42d7b5458270d4747e1cdf", 0x87}], 0x6}}, {{&(0x7f0000000ec0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000f40)="b222cb5334", 0x5}, {&(0x7f0000000f80)="5d068f2ddae6aed49d4062ed9c34d1a73f3901ba17d8e52dadcd25ed09ab15d0480f3d944c04a8df11d14fde10243b1aaed73806e4137c0bea5a5607abdbffebb4585c93f4de4dc2f0f83b9572e3b0ba8aff98e4854e22b88d85e1a1a6ab2c4e949ee6ed2bb72b035cf4cd853810128872a4f1c2c0cf7ea2b36851208600f88b9e2f4eb0088c4f67d29eb3af4b7793c3487ef08e9c09f0ee8f48cb56bc71d47c02fc0937ba4196dc368d24883aa3b194ca98dde164f8b6573117de1736e489bfeb9eae732116f1faf057af0eba9fe8", 0xcf}, {&(0x7f0000001080)="c781368ae7b63095409b513692378fbf5919902757f727840ddf9680868a24753ffcee22a1110892de135bc86219706afae2a8ca42204b184a558267c97cba101bddb14894530c8c806ca192763d995aec88bb2f13aea28365e08e80e633dddb922d15c487d679dffd0e911ccc870d1f14973910a08a7604a8db4e745c60b0bf469370885de65b2268e597fc20b9b57179ea8e840edd8e6ccf2fe20c54057030043b2b1d2fe3cfe13b00b93eb3c9a0c6e0c734aee019af3d402c8d01358ebf5fb9245101802c482352927317", 0xcc}, {&(0x7f0000001180)="0c3ff8824295c0b7db6c0aeb0e8df043c1eac274b040693419c0e57d765a3956c42691346b40994f6c24cbf4288ad85c131b10e108df4127a78a2f7d6511710eeef482f15efc15b4eb2792f0f984c7a1e6c847bb740828645615c07efc296371874cbb115b61a3b3378dcd21415c794c0e30da26e348d09f508fd4b49c16b03373f6f828a4bac6414fa603303e3d0ea810e442882353a11077fa032365352cb64eb006ac31a36b67ed80f264438af8dc6789ad21841553ad4257dd93a543ba6640ec21791f5cfb26be0f041969a35ff2b72b90c374b1bcabb45ad9dbf7dc", 0xde}, {&(0x7f0000001280)="c4513fd4fc40b41fc04b24f55961a0d9ccc4dbb0b9ca730645eb088dedeae71bf2ad039fc3712484b8c47623d2898676f0c547a4fa2346997d12b6175c218e29af167a9fb39d5d029ef9f690ffccdd4886e661b20ef301a08daacbedb42807aac4239d3070b2dfdb56d5a710295af0fe7d918ce14c8c5e7f42e303c57586c3aa1d838852503fb589df50633090f4fb4f69b1b3c8b392bb924ec3b2ab004818fa8151f017dd38274e5e4a739cc8", 0xad}], 0x5}}, {{&(0x7f00000013c0)=@ll={0x11, 0x19, r3, 0x1, 0x9, 0x6, @dev={[], 0x25}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001440)}, {&(0x7f0000001480)="cbb4e48b8c2ef6ab1166cdda480668cff8cf9d98f605e67a1c5dc433e2d68ec918611ce0640c52b0dc5f1de30016903359bba170968396948ac68ec570277428989505e60670971070a65390029e8b0ea2ed2a27ab8e106e9582a6a4683f6e7d2126b3be998d38b82d2a5ff06ee7be785c15d1af25595683ed34d9b28d6feef76bc898570668d619210cfa5c221659a451c56b9933da2e4d956f25d1b9052c674507176f026c0468a72c9191f78431536ee746a0dd991a22304439ae8b88765fe7276ac46c30b0c416c0a4d6e72ac11b02b3f6c8bd5e13c1551cf22b", 0xdc}, {&(0x7f0000001580)="85d1b4746d28dede3f3164762c29967924aba5a8f683754c561de2a1258cb991f1935e479db90649cb032853ed54e7faa88e5d37691fb53ed4425660608d5b29273e2c796e076051154638bcb86939d56c38ba0b69fc9923e65f442009af3afb43749b6cc207cb015efaf07998e6df7b37900dc964cbf7a91c51c2f1fbbba03b5a2879956264279d", 0x88}, {&(0x7f0000001640)="39f0ade766804b6403d8a2bb484854b8fb95ffd9ff474645b7b0ceaec35251ef9f45aff1cc97d799eb79d9ffa10da9e7799e4909223afe0e8727df56726bcd75865ea2a11caf9ab620dacd3118bb03fefaa2a1d25bddca742517d973f0f1c992bb3239f861676514261c8a50c06cafb0fe1f5ab28c57b5cd89902d65f32ef234cd7b6242b6da2e2496ce5b2a061401c69790aa35", 0x94}, {&(0x7f0000001700)="cc4c3e2bf30a8345ae124a5eac30e4ee7ac9f57823652db373ddfd8283ab50fec463a1a73aa6a6d3f13d43ecf6d1ef22a53fcd0230ee731203fcff20f4e2fa3abac4b4db8fef63ee3a83963e9a1615c17e95167b167fe746d6243cef21bc46ec75995693c2a3bb831e9d3a01246f3329c5128b674ba1b90af4c71cc73bb17fe1684568e4f46b25a8719cfcab8f0c5803e8b54e3364434e18dfb5106c", 0x9c}, {&(0x7f00000017c0)="2cdc80f2ea701012b3fd787b3dd417c527293632b6f0c507ee7419ee9d101e3dd54d75b96706e946e562ee69895f4bb8f39c234a7130f7dd26a24448a228efcd2ffe6c2c85606ae178aa0d2036b357dd1d2167bc6b5cb3899e170587808fa9fce2469399", 0x64}, {&(0x7f0000001840)="ad4193588f14dc88e2f4e36d2ad746153bc77e5d9ed3d40b170b583e362529e87bed5749c428449eae04f58c2000bafcfcc3c51c43ed757ba3a4971268ace1701fd7892f259599188ea0e3b1472927e60c468f5f0f4fcf8caa73081b4f1cc5e2821099c47924eac94aa423deb80bd197e511e37f2b952b4bae5fa33319ecb861e8f1c6ad31569da7e939edd2420108dbcb69", 0x92}], 0x7}}], 0x4, 0x4000) 17:46:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0x5, 0x1ff, 0x6, 0x1f, 0x8}) ioctl$TCXONC(r0, 0x5607, 0x2) 17:46:57 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0xfffffffffffffffe) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x0, "611bfc9146d52a1e3cfacd273404d0238a080271d98b09c30c9e32a21177a34b9dcc9000f819bc8d56ce707248333179853bf61abc467e3aa81474b7d870fb9c", "fdeeb4ac8921556c8b4120513bfc4db1fb5c3186d5e3c2c5b9f2806d3cce6d0452a5cdaf10c2cd72a9b235147bbcb4e58dbd692d53b073847990e68325cbd609", "0f7db44d4f48ed3ef3e793686b56ff95d3f556be73b939c528b16ee4735bebf4", [0xffffffffffffffff, 0x1ae]}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f0000000840)=[{&(0x7f0000000100)=""/28, 0x1c}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000000440)=""/255, 0xff}, {&(0x7f0000000540)=""/125, 0x7d}, {&(0x7f00000005c0)=""/241, 0xf1}, {&(0x7f0000000140)=""/23, 0x17}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000000740)=""/78, 0x4e}, {&(0x7f00000007c0)=""/79, 0x4f}], 0x1091, 0xffffffffffffffff) 17:46:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000030801030000e1ffffff0000000000fe0500024000000000050003ff8700000004000480"], 0x28}}, 0x0) 17:46:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) mq_notify(r2, &(0x7f0000000000)={0x0, 0x2, 0x2, @tid=r3}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) 17:46:57 executing program 2 (fault-call:6 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000413b7d04700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000005400000000000000000000000000380074696d650000000000000000000000000000000000000000000000f1000000000000ffffffff4f970000000001000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000cf000000000000380071756f74610000000000000028372b75893eda63000000000000000000000100000000000000470d0000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000edffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:58 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0x1, 0x9, 0x7, 0x0, 0x0, 0x0, 0x61}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) sendfile(r2, r1, 0x0, 0x20000000000000d8) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000000)=0x80000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) [ 1139.595502] ip_tables: iptables: counters copy to user failed while replacing table 17:46:58 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) uselib(&(0x7f0000000280)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) r3 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x100, 0x0, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x20000010) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:tzdata_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x74}, 0x1, 0x0, 0x0, 0xc810}, 0x4010) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000480)={{0x0, 0x1, 0x7, 0x0, 0x1000}}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x1c1000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000000801010000000000000000030000060a26d2adf55f89aa050003002f000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r4, r8, 0x0, 0x800000080004105) 17:46:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) 17:46:58 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r1, 0x9, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x40010023, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c6530207374617475730020402d2a7d2340ac2040202e2f6363726f75702f73797a30002008217d402d3f2d0ae147fbcd9e742bd5ce8d414b323de38973ecdc91039c42933e4fa6de6badf77b385b0a6129c6f013a81126f2815b172e15b27ab454b150f421add39193897fbb7cfefdcf5097fb79a822df3862642d05ef21a40ed9770b4f0a269ecfbbc9a38e3a36"], 0xa6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) 17:46:58 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x102, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r6, r5, 0x0, 0x20000000000000d8) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000100)=0x7f, 0x1) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000040)={0x101, 0x2, 0x4, 0x10, 0x7, {r3, r4/1000+60000}, {0x5, 0x0, 0x0, 0x0, 0x1, 0x3f, "a7bfe75a"}, 0x1, 0x2, @fd, 0x6, 0x0, r2}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000000c0)={r9}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r9}, &(0x7f00000001c0)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) 17:46:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5607, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r2, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006) 17:46:58 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) socket$phonet(0x23, 0x2, 0x1) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) sendfile(r1, r4, 0x0, 0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {0x0, r7, r5}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xffffff41, @ipv4={[], [], @empty}, 0xfffffeff}, {0xa, 0x4e20, 0x1, @local, 0x7}, r7, 0x6}}, 0x48) setreuid(0x0, r2) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r8, r9, 0x0, 0x800000080004105) 17:46:58 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x5}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x9, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000100)=0xeda4) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x5, 0x0, 0x3, 0x0, 0x4, 0x8}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000380)=""/148, 0x94}, {&(0x7f0000000200)=""/111, 0x6f}], 0x2, 0x800000000) 17:46:58 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17:46:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1ff, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "7aad91a86d1a2e20", "6ca770914c69436dc5b0bb630484e39ae649c6c03028cf43baa27d602b7c19fc", "0c022357", "f5b3b393a0f338bb"}, 0x38) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r6, 0xf9745970d560674f}, 0x14}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100210}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xc0, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0xc0}}, 0x40010) 17:46:58 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x12, 0xffffffffffffffff, 0x3) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r1, r2, 0x0, 0x800000080004105) [ 1140.437107] ip_tables: iptables: counters copy to user failed while replacing table 17:46:59 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x566d}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x10000000009, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x3, 0x5, 0xfffffffd}, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000140)={0x9}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x80040, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x3, 'batadv0\x00', {0xc46e}, 0x40}) 17:46:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, r4, 0xf01, 0x0, 0x0, {0x4}}, 0xff92}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x100, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x11}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6427}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x99d}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) 17:46:59 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000280)={{0x5, 0x6, 0x80000000, 0x400, '\x00', 0x8000}, 0x6, 0x4, 0x81, r2, 0x6, 0xfffffffe, 'syz0\x00', &(0x7f0000000100)=['$(]\\\x00', '-+\'\x00', 'fuse\x00', 'rootmode', 'net/tcp6\x00', 'q/)/\x00'], 0x24, [], [0x9, 0x26, 0x100, 0x81]}) r5 = fcntl$getown(r1, 0x9) r6 = syz_open_procfs(r5, &(0x7f0000000240)='net/tcp6\x00') sendfile(r1, r6, 0x0, 0x800000080004105) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000140)={0x1, @sdr={0x41416770, 0x8}}) 17:46:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r2, &(0x7f0000000000)=[{0x4, 0x6, 0x25, 0xb3, @tick=0x10000, {0x6, 0x81}, {0x6, 0xe0}, @note={0x1, 0x64, 0x2, 0x5b, 0xc6}}, {0x80, 0x5, 0x8f, 0x3, @tick=0x9, {0x7f, 0xfa}, {0xd3, 0x3}, @addr={0x1, 0x2}}], 0x38) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) 17:46:59 executing program 3: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000e80)='F', 0x1, r1) keyctl$unlink(0x9, r0, r1) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/214, 0xd6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) 17:46:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$rds(0x15, 0x5, 0x0) finit_module(r2, &(0x7f0000000100)='^\x00', 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) epoll_create1(0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000000)={r3, 0x3a, 0xffe0, "9169ad60fb1e866aecb37d550379d77855dde373106f2b96eeba12dc63e62b8f8fe2158a7eeb038a037f2d771999f023a9e35dfd1a8e120d264f16df01c1fe5e0be66e92f9ea9accfa523071ce7b"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x5607, 0x2) 17:46:59 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f00000001c0)={0x2, 0x2, @stop_pts=0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_pwait(r2, &(0x7f0000000140)=[{}, {}, {}], 0x3, 0x97b9, &(0x7f0000000180)={[0x100]}, 0x8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r5, r6, 0x0, 0x800000080004105) 17:46:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000003080103000000e6ce34c5bc95d0be00060002400000000094a2a93ea850f40a040004804134122afbca041f70f631c4941d72c34c412ec9db0be4dc9b462979d25b18819c08097bdd2f1bb7b22b13fe0118085fac519fb75659fa6dd7339f83fe6163b5a41e2140aa0d512998226fac"], 0x28}}, 0x0) 17:46:59 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x8, 0x1, 0x9, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ptrace$setregs(0xd, r0, 0xb, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000002c0)=""/247) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xb3ec}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) [ 1141.093168] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:46:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2}, 0x14) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:46:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x12, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000000)=0x1) 17:46:59 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 17:46:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x503802, 0x0) sendfile(r4, r3, 0x0, 0x20000000000000d8) sendto$unix(r3, &(0x7f0000001580)="24511530d9cca76fcf96c9efd3db53527557e7eaf73b8f270c1127131c8089ea6e60984b64becaa5a1a60f01f418bbe630a9048b395c", 0x36, 0x20000081, 0x0, 0x0) r5 = gettid() r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x20000000000000d8) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201a960", @ANYRES16=r8, @ANYBLOB="010027bd7000fcdbdf2503000000050005000100000005000300800000002c0001801400020067656e6576653100000000000000000014000200726f736530000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8004) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001980)={0x2ac, r8, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0x298, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xfb, 0x5, "b2afaa8b8b0e2d0bf32f4830e08e4fd4226508663e39a0bd8590695be4a4c007eb1c2349c9a74aab7231d307cfd9e56af488f152ea47b72219d35a0eeecaff11ee16b3827f53c791785254329c5148d3a2a5cacc6f35e73ab07863553edf5ecfd3ccc44005a9ad8eae4cefac443d9e5935b82d4dc25b97c44c85e469a992909320d43cfd18a447a156782f3becd23f9bfaad7853a46248b59d2c7a911575b1626881a8b8b9dd5e74c273f2521a8f72fdc93c54c6419df5f5fe2f4422be543fbf6df454a756af8277123b41cb672bbe4fe062db616e36d8425b2a521f7b2e378cc7220d3582681f833228dbc47641f4c092dd96074d9250"}, @ETHTOOL_A_BITSET_VALUE={0x8b, 0x4, "c3c7de11e7857c9586db9eee1c7fa821391c2734758401f2b822dae74c9346999ce38bee275af4708c81325d8cdee42dcabd7df7b85e01a6353f4ede401e9c641a4c283841c7dda62c977ca7adae79241a2381f456e4bd4d4166d95161170f860330d59a1d40444b71c1da83f9cca2ea80dd94ebfd090006c44bfc031b594c4c13d49c68aa5676"}, @ETHTOOL_A_BITSET_VALUE={0x82, 0x4, "7d3ec80a47f98a96882e3d87a833bde362c4551dca7bc2a6bc6c2ef5b95e4f464eb405d3c0f5b3d410009ef6286230a9ebafbdd6bfc3ded2d9e5a1bea5701af8bdae2dc59d49ecafd32f3ad61b13afc49fb402da962bcd9e39aa8334b601d1096993827b0dc6a81b4173b7a026602c26a2f9a1993c0d4f93441e9c163632"}, @ETHTOOL_A_BITSET_MASK={0x7a, 0x5, "5553b75ff6cd51538f2171d4a96f4a0afa148ec901f2ab1820d375f42a6630fb11d18dbdad87193b747f1b0e4b9b1a86c6f9c6d1c84633f04acd60e85affecadc80f74c454d54c57ec42b736c0f51c7211d5319ee270cc7b4c5a099a91f79ed6d7523ba3837f7eec2e466bec54b047aa88c8b00e47d2"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x44080}, 0x2008004) recvmsg$can_bcm(r2, &(0x7f00000018c0)={&(0x7f00000015c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001640)=""/168, 0xa8}, {&(0x7f0000001700)=""/63, 0x3f}, {&(0x7f0000001740)=""/37, 0x25}], 0x3, &(0x7f00000017c0)=""/234, 0xea}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001900)={'vcan0\x00', r9}) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)=""/260, 0x104}], 0x1, &(0x7f0000001500)=[{&(0x7f0000000180)=""/140, 0x8c}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/96, 0x60}, {&(0x7f00000012c0)=""/126, 0x7e}, {&(0x7f0000001340)=""/141, 0x8d}, {&(0x7f0000001400)=""/201, 0xc9}], 0x6, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:46:59 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x1411, 0x100, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4004000}, 0x2000c8c0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000191c0)=""/102377, 0x18fe9}) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) [ 1141.386090] ip_tables: iptables: counters copy to user failed while replacing table 17:46:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000030881030000000000000000000000000600024000000000050003000000000004000480"], 0x28}}, 0x0) 17:47:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_bt_hci(r2, 0x800448d4, &(0x7f0000000040)="64daa35a7c384cfbd40e45877fb7320c5413976139b9dd462e9e9b45ecdc1204fbad67839efeafbcc433ad11dd46") r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = dup2(r0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:47:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}}, 0x0) 17:47:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5607, 0x2) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000000)={0x1721, 0x2, 0x1, 0x9, 0x5, 0x4}) 17:47:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x145) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140200000102030b00000000000000000100000606000740000200000900060070707470000000000600e0c05af504e1bd8a084000000001060007400002000008000940000000006800038006000340000300001400018008000100ac1414bb080002007f0000011400018008000100ffffffff08000200e0000001060003400000000014000180083f00000000000000000200ac1414310c00028005000100210000000c000280050001003a00000064010a80b80002800c00028005000100880000000c00028005000100280000000c00028005000100210000001400018008000100ac1414bb08000200ffffffff2c00018014000300ff01000000000000000000000000000114000400fc02000000000000000000000000000006000340000100002c00018014000300fe88000000000000000000000000010114000400fe8800000000000000000000000000011400018008000100ac1414aa08000200ac1e0101060003400003000008000140000000004400028006000340000000000c00028005000100840000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000000000000001540002800600034000020000060003400003000014000180080001006401010108000200000000002c00018014000300ff01000000000000000000000000000114000400fe80000000000000000000000000003e0800014000000001"], 0x214}, 0x1, 0x0, 0x0, 0x4c080}, 0x4000040) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x14, r2, 0x0, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) 17:47:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setuid(r7) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) r9 = getegid() setxattr$system_posix_acl(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010005000000000002000000419aaa00", @ANYRES32=r6, @ANYBLOB="02000500", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="02000200", @ANYBLOB="040005000000000008000600", @ANYRES32=r9, @ANYBLOB], 0x4c, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r9) fchown(0xffffffffffffffff, 0x0, r9) write$cgroup_int(r4, &(0x7f0000000040)=0x800, 0x12) 17:47:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000308010300000000000000000000049d3b97716800000600024000000000050003000000000004000480"], 0x28}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r1, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000d7, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1142.129422] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 17:47:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) 17:47:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000080)={0x800, 0xffff, 0x6}) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:47:00 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@pcr={'pcr', 0x3d, 0x10}}]}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r1, r2, 0x0, 0x800000080004105) [ 1142.304711] ip_tables: iptables: counters copy to user failed while replacing table 17:47:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 17:47:00 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'osx.', ':\x00'}, &(0x7f00000001c0)='rootmode', 0x8, 0x3) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r1, r2, 0x0, 0x800000080004105) [ 1142.444522] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 17:47:01 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000140)={'veth1_to_bond\x00', {0x2, 0x4e20, @private=0xa010101}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r2, r3, 0x0, 0x800000080004105) 17:47:01 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) getpriority(0x2, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:47:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000308012207fb030000000000000000000000000675ff4000000000050003000000001e0a9504802e1d3d3fcd56d004a8aa9fb6647bc2bd22298ad32b3d8f5a000800200000000073694285576d88e4b1000000000000"], 0x28}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x101180, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000100)='children\x00') sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc0410402}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$TCFLSH(r1, 0x540b, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000380)="6c7cfa5d3718727b836f81268416aeaae355eb4c3e60324791133b40d315cc6c63bbf6e775c819fbfe553ddec26fc718ace539d9206bcffddb24f7a6bec580fe19a3a7aadecc35373105b2798fdd0dcd9fd19ee8d2aaa37de6fb28f05b4414092b33190acd6e5fb6d411d5ff0151f374e8cf09958de45f33fe954e35069d12de35a166") ioctl$TIOCSTI(r3, 0x5412, 0x0) [ 1142.786984] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1142.858041] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 17:47:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x2) 17:47:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) ptrace$setopts(0x4206, r3, 0x401, 0x10) 17:47:01 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$addseals(r1, 0x409, 0x4) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="eac33c57a8cf0c27644f86943189e650dcb72faf8b62178875a22f765ec2afce2adc501a4a022b151023f2441ceff51b8f341fe36ce3649a32cf9b13a8b80aa958e9d05e68da66247a34d0161cdbaa1241e32bdb1224f7d6af3dcccdecb84f1ab4c3cb0aa9bfc5b27a22111810c09dd7391bd38022b7af32af8b47575c92734f10e4b41a8639d69e53c265792b3bd27a8eb17603582ac660f4000000000000008106", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000140)={r5, 0x81}, 0x8) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030009e934586da8b02303030303030303031303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x20000000000000d8) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000002c0)={0x9a0000, 0x7, 0x53a, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x9b0907, 0x40, [], @p_u16=&(0x7f0000000240)=0xc30f}}) ioctl$FITHAW(r9, 0xc0045878) sendfile(r6, r7, 0x0, 0x800000080004105) 17:47:01 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x3, 0x3, 0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x4040) 17:47:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) 17:47:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0xa) [ 1143.239483] ip_tables: iptables: counters copy to user failed while replacing table 17:47:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x5, &(0x7f0000000080)={0x1, 0x4, 0x1f, 0xcdcc, r3}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0x8000}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) 17:47:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) dup2(r2, r3) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:47:01 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x5d1401, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r2, &(0x7f0000000440)="7030f6b044c2dcfcd31c78c11d637c26494589d54214b8e803fe33b1afc33303400b349f6470f3da4e2b02648fb36724930c88edf2dac0ac8d526231033d4195e6e827991cc07d4e46fdd70c641eb64d3fccfa14ededeb14709a4c03c64167c61325023d32ce6b55d1664da65043ccea24a745ba309c3efe783e57ff1ee42f699091927695d7f392562af658fc1cf81812980f632d125204b6516150f6b70a77b6944456bb5d25f5f76a71c9bc61e67523b81251aa6c47999c0851f6fc619a96fd4c72c5761ecdccaa642f0a6719638640c795495ee2e8532f74577373965386ab34c057498ed875b84ec703831e6fd89ca20142e7075fd92b53d5ed15dd85f86c2b8ad542766cf2fa48293e91e1db644613ccc8eb05d0847e344b211cb5c32f74ebaeb3da92e176158128026ea4e358a7a55a65fb189122a689db1ea0c868dec3a56ab4b63c8dbe6dc29b953cb79b4eaf8fe0edffd315cb3d8bd75289911940e7a402c28e33ead122e6d14b5324959f155df3e35155e596f2534eb01537e191b44fb9fca7b3d775ead65b7879f0eaeae99fa23a3f9029d19a6b77d5b7d77cee60c56da2dbb1bf15800090d74b29fdf50be710bd06022b242b0001016c984a6b2f3509a74671136d2d924073cf3b7429d3741464b3940973492ea0b3cfafda8d40730ea7cd00fe5aa3f9036ff133fd3a96f9c625021bcddd5c22f55b78dd75b64696583d7136d4647772f111315a03ec2f20dfeb3361dac0175f38895d470ff6758900d522f7cca46327b5937fb645dc34f33ce5e7be1a3ddf9feadf4bb645d708688fbdc7f43f806b5bd0031f8328c9bfc93c09e2f07704092895e4cfc9920b7ea53f24b0dbcfe8e7b64df4b505b76385707a44d6461ceecf5697800e8627d5ab4afc5753442f33c1f4b7de647d5c759d3c3dabd6685f65c84c075eb5bb85d1d21139befbbdde6fce7177dbf36d25bcbb5bda5b90c7c530afcd045718b2ef111a0d24438c7158fd8a79a7514439826e1275f03944856f8cab85925e57ffa405ba66eaa93ca726609e40879dcfc7c7ed2550d63bba1f05b5ab0449f927fcabb3cfdb5081832710c447ceecb1bd5f52986e59e802aab8d0716dc868ee72cbf10038a1e5560a002e8524476aa0a2c0ce4fbd0ad35fb80a4bfc18ba9a292ad33df111f54b8573c033d28ba7a26efeba8fe17909aa76c427ce6ad44049e5e1a47c95f4499e7e7f4fe3714c336626c6aa2dd91f4a6d2a29815f4d1d33d869aa79352c4f332454d6b7bd326ff7590524f1dfcf7a06aff86fe567d6bd9d1258a6cc5c1f1a08f1f4e86427cd2763e2441651093460b2ff389210881bfba5c4006c0dae0c61bd1d688f7a98e7168018577cad52056e0ef0769971074a50d82abd8925ca37becb7298ed1cfb5a6206fd0b4f42e98da55ca12a3a6678c1cb15153e744cb628b293f2b2ec7a3486b63cdb942325f1b69ae0985684af4c3cc548cf594a07ca82cd77012e74bd26fd03ad3b3829e7f5c5754d0699ea137477b3c5fa3a4f7d4e0ec2cbb2a05fb765eef51b2a8b5c270ed3ead81a4ea0409d90f580031b4b7370d678d1471cad988b46dcc5517b40e591abb5d435d1e05a10fbd184bcc46dd5a0a362201f8f22f625c375d2c75720ef5669208b190c13f0f59cd159d7a4bc6ac8e7370ac377edaf65d2328da132dccf951be85611d4e5606830f5bd48b10da85d87da9fd7af1462f970d1489a7a062471337cdb02f3aeab68673dae0127dea483fd4f6a6544bac9a5c93e08b78e3be59a6874fc7749014c81c3a76a65b3c6d413bb9fde1b9ce818d6473342f108ac9a0872838cef8379b2aae353bb94f44713360cc3bf2324c7ddacd6b66c9a1492cc76ddf8beb145b4e449d182950c9338cdecaf2b60f74240117412b73b62ca01176a745e99076cbf646c11f33f15518807daddae3a599e75b104e45ee232c07a9d0bdf2f60d4f1d57d09f80e45b4c44731e6ca4c9a2a3fd20edf34423b255e843b245ead357fd79a6ef33d7e0ffbf12a5ee0675e6b108dcc47c3814474c7d55f4b4b42f1e180879ebb1939127b7382d758648a6487d59124c8d1b4635ce30e5c3b817cd148ca013074b016a4a9b244f43c50c067a130d8ab6bddd85f96b42619bd73fe03ff63d529219f626751605d5a9705b47065f060ad281aa92789af7b04d009746e9e17aead7134d1ecf7435e165aa66a30a0f47efe1299c1636c1310a29918a41ab435bc96ce27fdafe02a23395d0335a86a569e61af3facd780a15bd5215b920ccd8b31a9b9d23f28cc79d717b83f1d07514bf3e7f3ea234ecfd4387679bd75be4790de4dc1edca2c2e3b7cc8441fd957308f49aefb7b0da54a7eddab3cf65b1753341552468593fa3d7674dcd34ae72a5fd5de8e005de959a89b57183932cb3f79b9b0cd69d8b802488f1348cf21c41338fe2e202901f6ff64f7b36768031a5e9a59b5eb34c4a339202051e3fddee49cf1d8edf8553725e96b01d3344aa5704b81ae43c9a008af32363b7090e1a5aa08c67650848ff4d1f008843d2cf0b2ee0b823ad5c015590f666f3bbc246157e414464d2b10a6e1061a87724a82878d23453294a3296779d76f6593f1b52597680f80f8f0853b986605666f6509d4c5773120b457ebe373e6163c33682fe9ddfa70286a744a7f00058219d526711f2ac3a9f6d4c5a592d63edee2c31c4bad868134e16b58bbfa98a436c742ce493e2118970976432ef8ccfea3b1deb6ab98ec22bc0f967527c7593dce5d08778c4747a98031cc9443fb1150286efa235ff316e00599182f62d24e369b34080ab053af5024e829d3ab2922103cb4283ee54d3250b489d92bc3cb6907df5e7fa58d075b8c191cc9725beb93b535e45c2c3115b104dc5c0e7a8b8d214d24fa0b9abbdc24968c884e150c9ec9074d648b5b95917b1776e0135e9e92c9bd6b4a7d97f8a5de292cde477e9fc1bd85b0cdcb6686d247f5c4750b3f0f073fd96e238bacaf28239a6872562212259dffb866c4cafc0f8936dd21806180058d9a6fc5b83838395e4b9887d617e57f51edfdc677eb8018895b639e74d3d73f533aaaf1f366b56451a0356a9e0126e3f7478560eb7c2b4d73ca83eea7d7f36da4a47e440db4d7072af8ef48413f2ef906810a48341f30cc644efbcb24b3882e1e5f20fda7719d1d68d528967865f1509c7b64d6b1d04ed02c0781b431d7ce2637c85bba91d37adca94aa3e99e2c72495e634455d35b78d7ee85ebeffb5873b8d4ec5dd13c746563e0f07e960ddce463462395b40d536adca038ce8ab76e3f0e95c96b4417f2c398abd9b1cf96fe93623502dd8c9b6094d78a7b1b04cb3fd3d6e6a6f1b2a100b02c43937673b9d5df18b67110a9931c8e54d32b61dfc3dbb106f68e083ca3f1baaffd95b817f74177d914f30aaa82dc9a901d7291e6b3e7bec7866c747010fa720e3bcf8df8429e3a5116c3a03de3a88b4dcd60212d5a243dbf4afdaef4c6f450f0c4a4eb374692ba6653bae1b2ad3d9db5019a215abd8cbe2fff899bdf6ea63f5a8f0e45d090ca455f6cfd42e319f21e239f9db793ee34608af4d342a7a4fb0f70e8c410f7f75fd09a25da7a39703d6b67fe6659395ec6f3cc862dc14ccd5fa2bf816eb7b8843e548508fd5b58f49b687c44e68996c66fae3299e1589ebebda7192dc420f85d6298611ed17d9482fd40f5e960628afb59c9fc6915615c312868f063a397e577262b678c1c8a4ddfd31562311fef84ed44620166db6b1b434ff8b2eb5fb4b0f4cf7a7b0d44f29397388235c67376cb7695d34096803d87427a8279b94950d96453a87b4d363940d696ccba030044983752a5792a85e72be992d1afe735d2774f6c49dbbe026372bec303da26a2c66c98c6974801c38099ebe576fc019a22f771a20b0f1cfd4f12cbefbec9b5f3adbaa36709999a16ee364acf576fc4d4075595151757d179342d23cf48823a6bb2b8cfebcd743ea31f87ed48449660eeaf9b788cbffa4e9076f56cfd2b070e7c3adb6b0c6d72e529fa02ca92b9d0516c7d01fcb7bf4badfeb7096f0d8ed421af7852cf2b89cf2a798b0f67fdd9e9408c4901b76da32860ae6a34b7a90057764f92933deadfff54e9edc7c24436f552afb6fc60d2a7a824fc8f786fae2b98eab9ea6b1f33dd0f4579890a865ad12e0f78430cca09f80943730cd9e8d7520cf4d54e1c1938298f213ee9db4087c3104d7a73fd6e176a5cea3a2e7b4777e7a4db4914965301734069c73f06647972016fdfb9bdad10a0ac3b0b6e02768675946e9381d5df2f6a917c916d600c3efdfa9843ebef58ddb8205c3a54d2dfd51c24d0e502627ad2d46154806dfb2274c00d2725a3f84a8a52202f1f56ccc48bfe463081486c2737bcbf83e970e59cab58bb15534ccba6b16cd970270c14f5e9b6586e08006c355c41b41ff0a65c057e7d779832a670b2a0c6aeaaa4b3fc4dd364d74f9ac6a7c8aa3a295621fb37945a6981c62d0717d1916fe8fdb042e2632ac17bdcdc457c6b0f05418a7c9a4e3617c8595d0ab147ceb795fbe0c20d0c07c650ba8f72033e669406611ea5cf3d0151c7b5af8cbac54344a0b5abac8cc8ae55e9f4303cfe6142d018d137565672ca4029d20490fa0865cd7d81855c5ad63fe7ae3975e5aa30528151362d7993b07df8ff2fdebe6ce52987abb7c8b6d144f7d9f800fadcdc2242fe56e3a643663d65b085045aa35d52cfc3ad9364b8f32bbe264ee7afed923bbfe2d253e4afb942b23a87ffe15379b90e3246d8bdd3fc3cd45b740eaec20eef33b04a06f05f5d57e34c597a2d765e96824db4132e541ec92c4d01b8e24aea765c7f140452ca2ba0459169c4c6fe353e3487a488bacd176735c06277fe000973233e045411f8b20c741cfb13e859de42332b5bb34041860a5bc4ebe908d65c81735887bf756cd27509e1b09147d874baac09bd661088d987e701a83d05421ff7b02244f49f98744e0de54b3ca3e6385f34ea793ccdc7cec620f5d8148ceefc193c42dcc2fb0e66e0311015beb1b8f275394a8a94aa39527c88cf04f3042cdb861e5216cdf5b19111ccbaea467b6dda4a39ad5a411ed4beaeb54c55614d6e39b0534304175aa3be57a43027bec669ab3f4c5f8f0e5f52b22fc828cff593622958e978c4c3692b33097ad2550c5199b267cdebd1a74144313c2cff71295f2fd8d86956af08949b4f413dec5a28de85433500ae9f4424a997ef2c44d89a460e6b5c76f04727712ab3b4138d7b77cb4accaf259018757c1e0ca8f52a75691ce9c6149e75df7ba4e69e8b88d83b831bae470f213907326429691f496eb9002b0d803c64e63314880cc06ee250836f6a0c59f189200a41a4e27ad779ce602719e962a46f392b03b9681505dde84e361e3e36cad0d23ebc85081a6ea782cba430b5f6580940aca9397a7754cd4f85b480bff21ecabe08c27981793f66b6ae1a8279cf1d1b527e9298744788eedf1f5af147779e7dd0c48973b57afd3e536a9da37199fec09d96bc87f2033027c757adb4004852df95308c793b6f2ae273d34fe92ebcf46524cf77eba88196edb203cbccbc81a89c17ea14c087c70d678cd40a1670c10217d20283f4ddeb492ab343b9edbfc8798fbdc904fb6d66880f879b2a3ad93aff5f709708d4da75eff44ea4a2df7a7f486152890dcfc2b0cad989911ecd0525a38e363e5afc8fc9aeb1b3337fff604cb4c4096eede19f74f52e44c7816f73807d308e751b3957efeff374e14881f72b96cfcaec6c45407270c9c8d2560c7b", &(0x7f0000000180)=""/35}, 0x20) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x2) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="66643dd576a8f7991430de15dc44c3ae82ca83212694409dbecad8343117cf78a6969162e6cece484b89d51f38b48c22c2849ad4ff0cba800d18cdc36ac723497859bf4524e56debef8f4c8cfbf488ec8a05f9a1c41f25a791da83f4610992a2bb61e3da59816aa417dd28210649867281dc5614a31aa7c85dbd54c8dc2c11f7afcf7076e27c4b77072903d50cc3c33419240955914823ac46d71b85ac0583afd92cbfbf45a4b77ae4910e57c937b54d9d1b6e7fb3fa46e2aaf8089d28753d49efccdcc0c616be1cfe25c5e308638b3eddf72633e0c9d19fa50c4a6ddf0abc00bf86a37a7cfc76e49ee576336d5c28eb4ddcd484b55fd131e40771a704fb63a8bff43aae879ba96f000000000000000000", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) connect(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4000000000000d7, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r6 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0xffff, 0x20801) ioctl$SIOCX25SCUDMATCHLEN(r6, 0x89e7, &(0x7f0000000240)={0x3d}) dup2(r3, r5) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r4, r7, 0x0, 0x800000080004105) 17:47:02 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030303030303030303168ee3c15d8ee829b65e719f0303030302c757365f410725f69643d6c0491a824def13a692033d49e90bc571571ae6cccaad0a1551a32e19af6c224a385fa1e77fdb71bd02323f9e61a8969d780bfbb11356feea4d5cd334b36e7e767231e3e7453786b916a91b2f6fb77596341d57497536d67b6ccc3a534c3c4197670caa1f34b3c51d2ec760c478150dd273b4dd6f87d24f3f65c79d78044ec6331ee3514382482d0feb8288fb0fd03ac4136014452fe9d5fb5068deb092107a0ce51016f318632908a8533092fecfefc14cb61632f84aa5afede", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',\x00', @ANYRESDEC=r2]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$FUSE_POLL(r0, &(0x7f0000000140)={0x18, 0x0, 0x4, {0x3f}}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r3, r4, 0x0, 0x800000080004105) 17:47:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='\'@.^\x00'}, 0x10) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@md5={0x1, "a7cedbdbfa3640ba61875678a47aca04"}, 0x11, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) 17:47:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f0000000040)) gettid() r4 = gettid() process_vm_writev(r4, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:47:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5607, 0x2) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r2 = fcntl$getown(r1, 0x9) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) setpriority(0x2, r2, 0x7) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x40) 17:47:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) 17:47:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0xf) 17:47:02 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000140)=0x5, 0x4) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) recvmmsg(r4, &(0x7f0000002f40)=[{{&(0x7f0000000180)=@isdn, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)=""/248, 0xf8}, {&(0x7f0000000300)=""/180, 0xb4}, {&(0x7f0000000440)=""/180, 0xb4}, {&(0x7f0000000500)=""/103, 0x67}, {&(0x7f0000000580)=""/36, 0x24}, {&(0x7f00000005c0)=""/13, 0xd}, {&(0x7f0000000600)=""/119, 0x77}, {&(0x7f0000000680)=""/205, 0xcd}], 0x8}, 0x81}, {{&(0x7f0000000800)=@qipcrtr, 0x80, &(0x7f0000000980)=[{&(0x7f0000000880)=""/220, 0xdc}], 0x1, &(0x7f00000009c0)=""/251, 0xfb}, 0xc4}, {{&(0x7f0000000ac0)=@qipcrtr, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/214, 0xd6}, {&(0x7f0000000c40)=""/205, 0xcd}], 0x2, &(0x7f0000000d80)=""/4096, 0x1000}, 0x1f}, {{&(0x7f0000001d80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001e00)=""/30, 0x1e}, {&(0x7f0000001e40)=""/115, 0x73}, {&(0x7f0000001ec0)=""/94, 0x5e}, {&(0x7f0000001f40)=""/43, 0x2b}, {&(0x7f0000001f80)=""/140, 0x8c}], 0x5}, 0x7ff}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000020c0)=""/67, 0x43}, {&(0x7f0000002140)=""/235, 0xeb}, {&(0x7f0000002240)=""/1, 0x1}, {&(0x7f0000002280)=""/162, 0xa2}, {&(0x7f0000002340)=""/153, 0x99}, {&(0x7f0000002400)=""/190, 0xbe}, {&(0x7f00000024c0)=""/26, 0x1a}], 0x7, &(0x7f0000002580)=""/174, 0xae}, 0x6}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002640)=""/212, 0xd4}], 0x1, &(0x7f0000002780)=""/195, 0xc3}, 0x9}, {{&(0x7f0000002880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002900)=""/89, 0x59}, {&(0x7f0000002980)=""/83, 0x53}, {&(0x7f0000002a00)=""/169, 0xa9}, {&(0x7f0000002ac0)=""/20, 0x14}], 0x4, &(0x7f0000002b40)=""/239, 0xef}, 0x2}, {{&(0x7f0000002c40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002cc0)=""/111, 0x6f}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002d80)=""/151, 0x97}], 0x1, &(0x7f0000002e80)=""/184, 0xb8}, 0x8}], 0x9, 0x2000, &(0x7f0000003180)={0x77359400}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r3, r5, 0x0, 0x800000080004105) 17:47:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000030801030000000000000000000000000c0004800000000000000000000000000000000089b7f07a3e20d086"], 0x28}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000080)={0x800, 0x8, 0x9, 0x20, 0x8000, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) mq_notify(r2, &(0x7f0000000000)={0x0, 0x3b, 0x1, @tid=r5}) [ 1144.068048] ip_tables: iptables: counters copy to user failed while replacing table [ 1144.098336] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1144.138716] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:47:02 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYBLOB="ef5b6c542bd837bc8314be8f9c29970285c36a208857511c349e91848ea68547958489699d92bfbc602bd3f583bf9d2b5da331d1ab238258ac2d8000f053087d9bd8cfa9c33b347d01fb774c9a66acec4745f893d29fc4af5d41556680e8cccef4d720672c1d0a5f5374fe451ec14511243c0a3c9bd19c6a0bce6ffca1f02ee11f185f8bae39f20734c3bdc43311587b716c732e5e4129e7150afb11afed0d87709702115ccd758f17ab9c39b2be5f69bd48c05a0f8209f7ce6441808c3e7a26d4cf3d610505ca1938d8453900c4b7", @ANYBLOB="2c726f6f746d6f6c00000000000000003030303030301cc06430303030303031303030302c757365725fdc2327f6d28a9387805351e03fc8f58dd8d1941bed6c40f4b1da7be9c41caafd33d8f2cd2defd998dba065bae31d95b174dd52a9cb6054adad0542c76235c7b026ec36e750e985d5fb58f34eca0fc397e3011876e0edf706184a104554a3625c50b21f4627f92a7b02f88287c178a437cbaf04b0f8369ebd31877ffb284cf27ec0b9582f18e976ee65038d66f9b6facbd5efecdd68d7b76b61", @ANYRES16=r0, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="c88facb5ed6d5c012b61910f7aa260b1e76c6795da29172f37d78fa4987bf7029d1dfd43a4495ffa0ea0ec59c857f39fda1b272f51187b635dee8932c384da0c6fcc03b586d29e78ed0b006101477ce9a048aea6652fcf36050ee636d8ec23e628ad928e30c2a23e4538b51fd06ead2ec4631307b3bbabf380c0a8ae7983719f9d33fe6c4a9d860922909e9107346921bfe39439803f2faaa8d500"]) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r1, r2, 0x0, 0x800000080004105) recvmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f0000000140)=@ax25={{0x3, @bcast}, [@netrom, @bcast, @netrom, @bcast, @remote, @default, @rose, @default]}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)=""/248, 0xf8}, {&(0x7f00000002c0)=""/75, 0x4b}, {&(0x7f0000000340)=""/13, 0xd}, {&(0x7f0000000380)=""/65, 0x41}, {&(0x7f0000000400)=""/79, 0x4f}, {&(0x7f0000000480)=""/151, 0x97}, {&(0x7f0000000880)=""/200, 0xc8}, {&(0x7f0000000540)=""/125, 0x7d}], 0x8, &(0x7f0000000a00)=""/4096, 0x1000}, 0x1) 17:47:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="460000000300000085ce7cc14a3c4d6d94616236954f26c4000000801e000240fc82e07eb2dc225c0000000000000009000000000000004d74140d216b8b0054acc24c1e0c5f56ac763c1899aabbfe249a87cd871e870a85e90b5b0cd62c1100cc9226658970fab24741d2f4f5115f1781d45d3efebde80967566698d45ede45787a7ea5c98860df9eb3aff530bcb7524b3244f0ce"], 0x28}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc02, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'ip_vti0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x40) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=.%file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x4881) syz_open_dev$ptys(0xc, 0x3, 0x1) r3 = creat(0x0, 0x194) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000140)=0x9, 0x8) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f00000003c0)={0xf, 0x1000, {0x5, 0x80, 0x0, {0x8, 0x1f}, {0x1f, 0x9}, @rumble={0x8}}, {0x51, 0x5, 0x7ff, {0x891c, 0x1}, {0x401, 0x1000}, @cond=[{0xb2, 0xfffc, 0x101, 0x5, 0x2, 0x4}, {0x5, 0x400, 0x1f, 0x23ee, 0xd8, 0x100}]}}) 17:47:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000080)=0x3f) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400202) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xb}) write$P9_RAUTH(r3, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x20, 0x4, 0x1}}, 0x14) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x5) gettid() madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) [ 1144.309965] overlayfs: failed to resolve '.%file1': -2 17:47:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000840)=""/211, 0xd3}, {&(0x7f0000000940)=""/141, 0x8d}], 0x3}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000680)="ff5b93baf4715971ba778a4091bf32a5307d1aad95db841680c544d506ab1c3405176a92ebe5ce0025e269e33dba850c0edff31990e83f65d40e8aec1f8801132a4088456b3f9166215a20ce4113818fe8668752a06696602189d19eb27eeb7c7a8fe69d0e65a052a93b5c4cf71bc11c4bc0bc7fbc5637850e7cf553dc9683e2a77d09196b818171d8e2b85add4e45494bc588edfedd7bd8045fa963bdd79c6885fb32e67153a5050367a53907b55917d7f298c40364e253", 0xffffffe1) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x1, 0x1}, 0x0) r4 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r4, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b7ec5a99d58d22679", 0x46) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) sendfile(r4, r4, &(0x7f0000000200), 0xff8) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x8000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='Z\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup2(r6, r7) 17:47:02 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r1, r2, 0x0, 0x800000080004105) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x103080, 0x100) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000180)={0x0, 0x100000}) [ 1144.406607] overlayfs: failed to resolve '.%file1': -2 17:47:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x83, 0x0, &(0x7f0000000180)=0x1e) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) 17:47:03 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x800000, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id'}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r3, r4, 0x0, 0x800000080004105) 17:47:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r2, 0x540b, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0xe540, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x2, 0x2, 0x9, 0x9, 0x7, "5c66b00d299e1ae0"}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r4, 0x540b, 0x0) ioctl$TCXONC(r0, 0x5607, 0x2) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x60000, 0x0) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0x5, 0x8, 0x114, &(0x7f00000002c0)}) 17:47:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800002347000000000000000000000000000c000240000000000500030000000000040004800000"], 0x28}}, 0x0) 17:47:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, 0x0, 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) 17:47:03 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r1, r2, 0x0, 0x800000080004105) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) 17:47:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffd93, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x48075}, 0x20000000) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'ip6tnl0\x00'}) r4 = dup3(0xffffffffffffffff, r3, 0x80000) accept$netrom(r4, 0x0, &(0x7f0000000000)) [ 1145.037944] ip_tables: iptables: counters copy to user failed while replacing table 17:47:03 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 17:47:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000030801030000000000000000000000000600024000000000050003000004000480000000"], 0x28}}, 0x0) [ 1145.221832] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 17:47:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}], 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) 17:47:03 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2ce9ed9820005f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') sendfile(r1, r2, 0x0, 0x800000080004105) 17:47:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000478000/0x1000)=nil, 0x1000, 0x2, 0x28011, r1, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'bond_slave_0\x00', {0x2}, 0x1}) prctl$PR_SET_FP_MODE(0x2d, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x200001, 0x0) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000180)=0x5) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000200)={'veth0_to_hsr\x00', 0xffffffffffffff81}) fcntl$setflags(r3, 0x2, 0x0) 17:47:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x482, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={r7}, &(0x7f0000000100)=0x14) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="018d0000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f00000000c0)={r10}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000340)={r7, 0xa8d, 0x4, 0x4, 0x9e6, 0x3, 0x101, 0x7, {r10, @in6={{0xa, 0x4e23, 0x401, @private0, 0x8}}, 0x5, 0x8, 0x1, 0x20, 0x5}}, &(0x7f0000000400)=0xb0) 17:47:04 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="64643d645491e2110084110c0931a092f82b05", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000100)='mountstats\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x28, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8002001}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r6, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "aeedc34cd2"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x4084) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r7, r4, 0x0, 0x20000000000000d8) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r1) sendfile(r1, r3, 0x0, 0x800000080004105) 17:47:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x5607, 0x2) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) 17:47:04 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00eabfad86ea83722720116f63d40c1b9d99d2d501fbfdb5986a975a47b9ee6e9ed97bd89d924dd90d23df6db8488fb58c2e7e17738301053ae7a2cbda63b54afb7d923a8233aa517084dcf1c68a094ec62c7f8f4a4db961399d854e1534fb659ca2c2de569e8c3600af86"]) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) sendfile(r1, r2, 0x0, 0x800000080004105) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) ioctl$TCFLSH(r3, 0x540b, 0x4) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x10000) fchdir(r4) 17:47:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r2, 0x0, 0x20000000000000d8) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x3e9, 0x400, 0x70bd28, 0x25dfdbfd, {0x54, 0x1, 0x0, r4, 0xfffffe01, 0x2, 0x6, 0x9, 0x0, 0x4}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x8815}, 0x20000080) r5 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 17:47:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000413b7d04700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000005400000000000000000000000000380074696d650000000000000000000000000000000000000000000000f1000000000000ffffffff4f970000000001000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000cf000000000000380071756f74610000000000000028372b75893eda63000000000000000000000100000000000000470d0000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000edffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xdf2, 0x45a0}, 0x14) write$binfmt_misc(r4, 0x0, 0x4240a2a0) splice(r3, 0x0, r6, 0x0, 0x4ffe0, 0x0) [ 1146.193715] ip_tables: iptables: counters copy to user failed while replacing table 17:47:04 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd?', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') write$FUSE_LSEEK(r1, &(0x7f0000000180)={0x18, 0x0, 0x5, {0x116f}}, 0x18) sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004105) 17:47:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4200, r4, 0x8, 0x20) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 17:47:05 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_CLEAR_QUE(r4, 0xab05) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x20000, 0x0) bind$l2tp(r5, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0x64010101, 0x3}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004105) 17:47:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r2, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000d7, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080)=0x9, 0x4) r3 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) wait4(r4, &(0x7f0000000040), 0x80000000, 0x0) [ 1146.663694] divide error: 0000 [#1] PREEMPT SMP KASAN [ 1146.663699] Modules linked in: [ 1146.663709] CPU: 1 PID: 7300 Comm: kworker/1:3 Not tainted 4.14.184-syzkaller #0 [ 1146.663714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1146.663728] Workqueue: events console_callback [ 1146.663734] task: ffff88808da76140 task.stack: ffff888058828000 [ 1146.663744] RIP: 0010:fbcon_switch+0x1cb/0x1700 [ 1146.663748] RSP: 0018:ffff88805882fa88 EFLAGS: 00010246 [ 1146.663754] RAX: 0000000000008000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1146.663759] RDX: 0000000000000000 RSI: ffffffff8ad6ff40 RDI: ffff8880860097bc [ 1146.663764] RBP: ffff888219280040 R08: 0000000000000001 R09: 0000000000000000 [ 1146.663768] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888086009480 [ 1146.663773] R13: ffff88821924e880 R14: 0000000000000001 R15: ffff8880860098f8 [ 1146.663779] FS: 0000000000000000(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000 [ 1146.663784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1146.663788] CR2: 000000000078c000 CR3: 000000020c496000 CR4: 00000000001406e0 [ 1146.663798] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1146.663802] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1146.663805] Call Trace: [ 1146.663817] ? lock_downgrade+0x6e0/0x6e0 [ 1146.663827] ? fbcon_set_font+0x7c0/0x7c0 [ 1146.663835] ? kernfs_notify+0x98/0x160 [ 1146.663846] ? mark_held_locks+0xa6/0xf0 [ 1146.663856] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1146.663864] ? kernfs_put+0x24/0x480 [ 1146.663870] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1146.663878] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1146.663886] ? fbcon_set_origin+0x1c/0x40 [ 1146.663892] ? fbcon_scrolldelta+0x1080/0x1080 [ 1146.663902] redraw_screen+0x332/0x760 [ 1146.663910] ? fb_get_color_depth+0x5a/0x70 [ 1146.663917] ? set_palette+0x130/0x130 [ 1146.663923] ? get_color+0x1b8/0x3a0 [ 1146.663936] complete_change_console+0xf9/0x350 [ 1146.663946] change_console+0x156/0x270 [ 1146.663955] console_callback+0x32c/0x380 [ 1146.663963] ? poke_blanked_console+0x1d0/0x1d0 [ 1146.663974] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1146.663983] process_one_work+0x7c0/0x14c0 [ 1146.663995] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 1146.664001] ? worker_thread+0x163/0x1080 [ 1146.664009] ? _raw_spin_unlock_irq+0x24/0x90 [ 1146.664026] worker_thread+0x5d7/0x1080 [ 1146.664041] ? process_one_work+0x14c0/0x14c0 [ 1146.664050] kthread+0x30d/0x420 [ 1146.664058] ? kthread_create_on_node+0xd0/0xd0 [ 1146.664066] ret_from_fork+0x24/0x30 [ 1146.664077] Code: 0c a6 bc 07 83 c2 03 48 89 2d 42 a6 bc 07 48 89 2d bb a5 bc 07 38 ca 7c 08 84 c9 0f 85 9a 13 00 00 41 8b 9c 24 3c 03 00 00 31 d2 f3 83 f8 05 89 44 24 10 0f 8e b8 0a 00 00 e8 31 52 40 fe 8b [ 1146.664241] RIP: fbcon_switch+0x1cb/0x1700 RSP: ffff88805882fa88 [ 1146.664271] ---[ end trace 31cfeb1fe422dea3 ]--- [ 1146.664276] Kernel panic - not syncing: Fatal exception [ 1146.665299] Kernel Offset: disabled [ 1146.944290] Rebooting in 86400 seconds..