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"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "2cf3b893fc3804cbcbc6f9b24d856b65c10ff983fec34741"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b03}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x2280}, 0x1, 0x0, 0x0, 0x4084}, 0x8000)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x23c, r7, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, [], 0x1}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1f, @mcast2, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "11015ed5f59940ee7ab75f3257bb6d05e86277fa54bb2ab2545b8270"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x58, 0x3, "6ba1c6ceb8411c596e47cbb15cb28b20af9742c69f29654e5b31841d566c424538fb13679b617ae139443f261d1364aa02769afd2943904bc4730ba5bd39ee2eced5d93e0ce1b063fafb7212fbb5f2d4cbef3956"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "55b7c4856408753d09b0664b749479c5f007d40d6a06d629d05b97161d"}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff2d1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x301}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000005)
r8 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r9, &(0x7f00000017c0), 0x333, 0x0)

02:43:18 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev={0xac, 0x14, 0x14, 0x2}, @remote}, @timestamp}}}, 0x100c)

02:43:18 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000450010020040000000329078ac141400ac2314bb0d00907800"/50], 0x100c)

02:43:18 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r3)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r4)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x8, 0x200040)
r8 = dup(r7)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
openat$cgroup_ro(r8, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0)

[ 1813.216030] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1813.216314] Bluetooth: hci0: command 0xfc11 tx timeout
02:43:18 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2}}, 0x0)
recvmsg(r1, 0x0, 0x0)

02:43:18 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0xf901], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1813.309956] xt_nfacct: accounting object `syz1' does not exists
[ 1813.329379] xt_nfacct: accounting object `syz1' does not exists
02:43:18 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2}}, 0x0)
recvmsg(r1, 0x0, 0x0)

02:43:18 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x40000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:18 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2}}, 0x0)
recvmsg(r1, 0x0, 0x0)

[ 1813.372447] xt_nfacct: accounting object `syz1' does not exists
02:43:18 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x1000000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:18 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

[ 1813.433911] xt_nfacct: accounting object `syz1' does not exists
02:43:18 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x2000000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1813.489637] xt_nfacct: accounting object `syz1' does not exists
[ 1813.664605] sp0: Synchronizing with TNC
02:43:18 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

02:43:19 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x3000000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:19 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

02:43:19 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x40, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x101)
r2 = dup3(r0, r1, 0x80000)
setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0x81}, 0x4)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r4, &(0x7f00000017c0), 0x333, 0x0)

02:43:19 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00')
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
r5 = socket(0x10, 0x6, 0x80000000)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002500)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffa888}}}]}}]}, 0x58}}, 0x0)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x15}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4840}, 0xc0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r6, 0x400455c8, 0x9)
fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x1a, 0x1, 0x7, "038d5535a8a2fd8d84e0610e2e8d2a00", "8d96c77112"}, 0x1a, 0x1)

02:43:19 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev={0xac, 0x14, 0x14, 0x3}, @remote}, @timestamp}}}, 0x100c)

02:43:19 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x6000000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1814.186870] nfacct_mt_checkentry: 2 callbacks suppressed
[ 1814.186877] xt_nfacct: accounting object `syz1' does not exists
02:43:19 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)}, 0x0)

02:43:19 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x10020000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:19 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002500)=ANY=[@ANYBLOB="5800000024000b0f000000000000002000000000", @ANYRES32=r4, @ANYBLOB="00090000ffffffff0000000008000100746266006c000200280001000000004da322827e24a0000000000000000000000200070000000088a8ffffed80065d7c"], 0x58}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x23}}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4, 0x5, 0x9, 0x500, 0x9, 0x10000a0, r4})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r6 = dup(0xffffffffffffffff)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r8}, &(0x7f0000000080)=0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r8, 0xfffffffe}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000000)=r8, 0x4)
r9 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r9, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @void, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @remote}, @timestamp}}}, 0x28)

[ 1814.285078] xt_nfacct: accounting object `syz1' does not exists
[ 1814.306804] xt_nfacct: accounting object `syz1' does not exists
02:43:19 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)}, 0x0)

02:43:19 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x1e020000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1814.369926] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1814.387085] xt_nfacct: accounting object `syz1' does not exists
02:43:19 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x20030000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:19 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)}, 0x0)

[ 1814.451043] xt_nfacct: accounting object `syz1' does not exists
02:43:19 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x3e020000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1814.534962] xt_nfacct: accounting object `syz1' does not exists
[ 1814.604641] xt_nfacct: accounting object `syz1' does not exists
02:43:19 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/6})
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r4, &(0x7f00000017c0), 0x333, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VT_ACTIVATE(r6, 0x5606, 0x9)

[ 1814.663210] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1815.050851] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1816.415754] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1816.415807] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:43:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)

02:43:23 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{0x0}], 0x1}, 0x0)

02:43:23 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000040))

02:43:23 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x3f000000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:23 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev={0xac, 0x14, 0x14, 0x4}, @remote}, @timestamp}}}, 0x100c)

02:43:23 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x8, 0xa200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000200)={0x14, r3, 0x721}, 0x14}}, 0x0)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800526b64c3046c3dfb7f844b1878f8e9a81dd23eb1d261ec120092379c14d9d77e2007cd0ddc81e8310101a68ca900"/57, @ANYRES16=r3, @ANYBLOB="02002abd7000fddbdf250300000014000200"/34], 0x28}, 0x1, 0x0, 0x0, 0x4000044}, 0x400)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @remote}, @timestamp}}}, 0x100c)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x25)
fcntl$setown(r0, 0x8, r5)

[ 1818.495627] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1818.495633] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:43:23 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{0x0}], 0x1}, 0x0)

02:43:23 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x40000000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1818.576399] xt_nfacct: accounting object `syz1' does not exists
[ 1818.591770] xt_nfacct: accounting object `syz1' does not exists
[ 1818.632351] Bluetooth: hci0: Frame reassembly failed (-84)
02:43:23 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{0x0}], 0x1}, 0x0)

02:43:23 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x4c010000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1818.694931] xt_nfacct: accounting object `syz1' does not exists
02:43:23 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:43:23 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x5c030000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1820.655515] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:43:27 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xc)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:43:27 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:43:27 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x6a030000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:27 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000017c0), 0x111, 0x0)

02:43:27 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x4, 0xa, 0x43da3cc500da0830, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan1\x00'}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8041)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x101)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'vcan0\x00', {0x7, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x114)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000000))

02:43:27 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev={0xac, 0x14, 0x14, 0x6}, @remote}, @timestamp}}}, 0x100c)

[ 1822.735412] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1822.735440] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:43:27 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x7e010000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1822.813648] nfacct_mt_checkentry: 5 callbacks suppressed
[ 1822.813655] xt_nfacct: accounting object `syz1' does not exists
[ 1822.838149] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1822.844866] xt_nfacct: accounting object `syz1' does not exists
02:43:27 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

[ 1822.890849] xt_nfacct: accounting object `syz1' does not exists
[ 1822.907295] xt_nfacct: accounting object `syz1' does not exists
02:43:27 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x80010000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:27 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000080)=""/216)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:43:27 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x2}}, 0x0)

02:43:27 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x80020000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1823.013426] xt_nfacct: accounting object `syz1' does not exists
02:43:28 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
accept(r0, 0x0, 0x0)

[ 1823.075280] Bluetooth: hci0: Frame reassembly failed (-84)
02:43:28 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x90020000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:28 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)

[ 1823.138939] xt_nfacct: accounting object `syz1' does not exists
[ 1823.211906] xt_nfacct: accounting object `syz1' does not exists
02:43:28 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x9c010000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:28 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x800)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000000c0)=0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @remote}, @timestamp}}}, 0x100c)

02:43:28 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev={0xac, 0x14, 0x14, 0x7}, @remote}, @timestamp}}}, 0x100c)

02:43:28 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)

02:43:28 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
clock_gettime(0x7, &(0x7f0000000040))
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14)
recvmmsg(r2, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}, 0x4}], 0x1, 0x12001, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_cache\x00')
preadv(r5, &(0x7f00000017c0), 0x333, 0x0)

02:43:28 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0x9d030000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1823.616835] xt_nfacct: accounting object `syz1' does not exists
[ 1823.632586] xt_nfacct: accounting object `syz1' does not exists
[ 1825.135153] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1825.140507] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1825.158334] Bluetooth: hci0: Frame reassembly failed (-84)
02:43:32 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)

02:43:32 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0xa6020000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:32 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@polexpire={0x134, 0x1b, 0x400, 0x70bd25, 0x25dfdbff, {{{@in=@dev={0xac, 0x14, 0x14, 0x3d}, @in=@dev={0xac, 0x14, 0x14, 0x20}, 0x4e24, 0x0, 0x4e21, 0x4, 0x2, 0x60, 0x0, 0x62, 0x0, r4}, {0x3, 0x401, 0x1, 0x1, 0x5, 0x9, 0xe553, 0x9}, {0x1d, 0x0, 0x0, 0x101}, 0x9, 0x6e6bbd, 0x3, 0x1, 0x2}, 0x80}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd27, 0x4}}, @replay_esn_val={0x34, 0x17, {0x6, 0x70bd28, 0x70bd28, 0x70bd25, 0x70bd28, 0x4, [0x7, 0x9, 0x360, 0x6, 0x7, 0x0]}}, @lifetime_val={0x24, 0x9, {0x0, 0xe40, 0x788, 0x81}}, @mark={0xc, 0x15, {0x350759, 0x7f62}}]}, 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x0)
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)

02:43:32 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @remote}, @address_request={0x11, 0x0, 0x0, 0x4}}}}, 0x26)

02:43:32 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev={0xac, 0x14, 0x14, 0x8}, @remote}, @timestamp}}}, 0x100c)

[ 1827.215008] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1827.215015] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:43:32 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
r1 = semget$private(0x0, 0x4000000009, 0x6d9)
semop(r1, &(0x7f0000000380)=[{}, {0x7}, {0x1}, {0x3}], 0x180)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000080)={0x1, 0x1, 0x2, 0x20, 0x3f, 0x100000001})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x300, 0x0)
ioctl$NS_GET_PARENT(r2, 0xb702, 0x0)
semop(r1, &(0x7f0000000000)=[{0x2, 0x1f, 0xc00}, {0x5, 0x1}, {0x7, 0x8, 0x1800}, {0x0, 0xb62e, 0x1000}], 0x4)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000000c0)=0x2)

02:43:32 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0xb8020000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:32 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)

[ 1827.314691] xt_nfacct: accounting object `syz1' does not exists
02:43:32 executing program 1:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)

[ 1827.401747] Bluetooth: hci0: Frame reassembly failed (-84)
02:43:32 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0xb8030000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:32 executing program 1:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)

02:43:32 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0xd2030000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:32 executing program 1:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)

02:43:32 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0xe0010000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:32 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x504080)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r4)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
connect$rose(r6, &(0x7f00000002c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
getsockname(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000180)=0x80)
sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040004}, 0x48040)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
preadv(r7, &(0x7f00000017c0), 0x333, 0x0)

02:43:33 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
read$fb(r2, &(0x7f00000000c0)=""/119, 0x77)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000000000000000450010020000000000329078ac141400ac1414bb0d2bca7800080000000000000000000000000000d4d1c11f6ad24af84c212b5eace4336a4a652c58ff09af82641dbfdea154bae4fb127267d320167fd08794a5ad81668ce21eaf11bfd99372921dcfb174ef261ccf3919ec77c1bcf0bc91eb037a014b7603a1c7120000"], 0x100c)

02:43:33 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)

[ 1829.454837] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1829.454904] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1829.490195] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1829.500301] Bluetooth: hci0: Frame reassembly failed (-84)
02:43:36 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0)
ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x2, 0x20})
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:43:36 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0xf4000000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:36 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000040))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r4, &(0x7f00000017c0), 0x333, 0x0)

02:43:36 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev={0xac, 0x14, 0x14, 0x9}, @remote}, @timestamp}}}, 0x100c)

02:43:36 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)

02:43:36 executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
clock_gettime(0x0, &(0x7f0000000100)={<r5=>0x0, <r6=>0x0})
utimensat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{0x0, 0xea60}, {r5, r6/1000+60000}}, 0x0)
write$tun(r1, &(0x7f0000000280)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x1c, 0x4, 0x1, 0x0, 0x101, 0x67, 0x20, 0x8, 0x2e, 0x5c, @multicast1, @multicast2, {[@noop, @ssrr={0x89, 0x13, 0x47, [@multicast2, @broadcast, @multicast2, @broadcast]}, @rr={0x7, 0xf, 0x8c, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @timestamp={0x44, 0x14, 0xd6, 0x0, 0x5, [0x40, 0xffffffff, 0x101, 0xfffffffd]}, @timestamp_prespec={0x44, 0x24, 0xe8, 0x3, 0x2, [{@multicast1, 0x20}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x401}, {@broadcast}]}]}}, "3bab4e3d705e"}}}}, 0x9c)

[ 1831.534745] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1831.534802] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:43:36 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x0, 0xf9010000], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:36 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)

[ 1831.630402] nfacct_mt_checkentry: 9 callbacks suppressed
[ 1831.630409] xt_nfacct: accounting object `syz1' does not exists
[ 1831.660553] xt_nfacct: accounting object `syz1' does not exists
02:43:36 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x4}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1831.713377] xt_nfacct: accounting object `syz1' does not exists
[ 1831.731008] xt_nfacct: accounting object `syz1' does not exists
02:43:36 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)

02:43:36 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x6}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1831.786135] xt_nfacct: accounting object `syz1' does not exists
02:43:36 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)

[ 1831.883713] xt_nfacct: accounting object `syz1' does not exists
[ 1831.897996] xt_nfacct: accounting object `syz1' does not exists
[ 1833.694561] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1833.694567] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:43:40 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:43:40 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x4e}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:40 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)

02:43:40 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x848040, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)

02:43:40 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
dup(r1)
write$tun(r0, &(0x7f00000000c0)={@void, @val={0x3}, @mpls={[{0x332, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x7f}, {0x3, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x8512, 0x0, 0x1}, {0x4}], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @remote}, @timestamp}}}, 0x56)

02:43:40 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev={0xac, 0x14, 0x14, 0x6b}, @remote}, @timestamp}}}, 0x100c)

[ 1835.774710] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1835.839690] xt_nfacct: accounting object `syz1' does not exists
02:43:40 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:40 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)

[ 1835.882080] xt_nfacct: accounting object `syz1' does not exists
02:43:40 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x2]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:40 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)

[ 1835.943644] xt_nfacct: accounting object `syz1' does not exists
02:43:40 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x3]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:41 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)

[ 1837.934283] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1837.934299] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1837.965482] Bluetooth: hci0: Frame reassembly failed (-84)
02:43:44 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

02:43:44 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x6]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:44 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_pts(r1, 0x440000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000100))
recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}, 0xda5}], 0x1, 0x41, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$kcm(0x29, 0x1, 0x0)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$UI_BEGIN_FF_UPLOAD(r6, 0xc06855c8, &(0x7f0000000180)={0x0, 0x6, {0x56, 0x400, 0x101, {0x2, 0x6}, {0x0, 0x73b}, @period={0x6, 0x1, 0x401, 0x67b, 0x2, {0xffff, 0x1f, 0xfb0, 0x1}, 0x3, &(0x7f0000000140)=[0xc7a, 0x707, 0x7]}}, {0x53, 0x1000, 0x9, {0x3ff, 0xbbd9}, {0x3ff, 0x5}, @rumble={0x20, 0x120}}})
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0)

02:43:44 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @void, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @remote}, @timestamp}}}, 0x28)

02:43:44 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @remote}, @timestamp}}}, 0x100c)

[ 1840.014124] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1840.014150] Bluetooth: hci0: command 0xfc11 tx timeout
02:43:45 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r4}, &(0x7f0000000080)=0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r4, 0xfffffffe}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x4}, 0x8)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)

02:43:45 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0xf4]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1840.075367] nfacct_mt_checkentry: 5 callbacks suppressed
[ 1840.075375] xt_nfacct: accounting object `syz1' does not exists
[ 1840.105753] xt_nfacct: accounting object `syz1' does not exists
02:43:45 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2d42, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x230000, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x5)
ioctl$KDADDIO(r0, 0x400455c8, 0x4)

02:43:45 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

02:43:45 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:45 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

[ 1840.182083] xt_nfacct: accounting object `syz1' does not exists
02:43:45 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x2]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1840.236236] xt_nfacct: accounting object `syz1' does not exists
[ 1840.267305] xt_nfacct: accounting object `syz1' does not exists
02:43:45 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0)

[ 1840.282685] xt_nfacct: accounting object `syz1' does not exists
02:43:45 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x3]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1840.311458] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1840.317434] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1840.372775] xt_nfacct: accounting object `syz1' does not exists
02:43:45 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp6\x00')
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)
getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

02:43:45 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0)

02:43:45 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote={0xac, 0x2}}, @timestamp}}}, 0x100c)

02:43:45 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x6]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:45 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9f02)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r3, &(0x7f00000017c0), 0x333, 0x0)

[ 1840.960524] xt_nfacct: accounting object `syz1' does not exists
[ 1842.344118] Bluetooth: hci0: command 0x1003 tx timeout
[ 1842.349605] Bluetooth: hci0: sending frame failed (-49)
[ 1844.414041] Bluetooth: hci0: command 0x1001 tx timeout
[ 1844.419436] Bluetooth: hci0: sending frame failed (-49)
[ 1846.493673] Bluetooth: hci0: command 0x1009 tx timeout
02:43:55 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0)

02:43:55 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00')
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000f80)=ANY=[@ANYBLOB="0000000028cf25ff58fc95468d310bf437755780ad677191100aa4e0b4b22a86e49f4cd698fb40f472d9e8953b38bc8a7974893ec14723f06c8474fb903ce7411c42c54e82f36cc12dfa2de8e7fcace1d692819e9941e54c8f7af6c939b54d3450c860549d4b9200230cbfcde4c6d8cee29ebf11eb3a895e919b59ff7b14db7eae4a767ca533b37c44", @ANYRES16=r2, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x40002}, 0x80)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000fbdbdf2501040000080001007063690011000200303030303a30303a3100"/66], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x18)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000450010020000000000329078ac141400ac3414bb0d00907800"/50], 0x100c)

02:43:55 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0xf4]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:55 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x3, 0x0, &(0x7f0000000040)=""/189, &(0x7f0000000100)=""/75, &(0x7f0000000180)=""/174, 0x4})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r4, &(0x7f00000017c0), 0x333, 0x0)

02:43:55 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote={0xac, 0x13}}, @timestamp}}}, 0x100c)

02:43:55 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:55 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d", 0x8)

[ 1850.745710] xt_nfacct: accounting object `syz1' does not exists
[ 1850.777523] xt_nfacct: accounting object `syz1' does not exists
02:43:55 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x2]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:55 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d", 0x8)

[ 1850.828720] xt_nfacct: accounting object `syz1' does not exists
[ 1850.842475] xt_nfacct: accounting object `syz1' does not exists
02:43:55 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d", 0x8)

02:43:55 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x3]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1850.929734] xt_nfacct: accounting object `syz1' does not exists
[ 1850.953903] xt_nfacct: accounting object `syz1' does not exists
02:43:55 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)

02:43:55 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x6]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1851.014923] xt_nfacct: accounting object `syz1' does not exists
[ 1851.095799] xt_nfacct: accounting object `syz1' does not exists
[ 1851.120895] xt_nfacct: accounting object `syz1' does not exists
02:43:56 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f00000000c0)={@void, @val={0x3}, @mpls={[{0x94}, {0x3}, {0x3a83, 0x0, 0x1}, {0x5, 0x0, 0x1}], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @remote}, @timestamp}}}, 0x3c)

02:43:56 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)

02:43:56 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="60000000010100012cbd7000fddbdf25a07aa8d9000000000800010002000000080001000100000008000100020000000800010000000000087934756100000000010002000000080001000000642462e9ee0a50de00"/96], 0x60}, 0x1, 0x0, 0x0, 0x58004}, 0x1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x51}, 0x80)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000200)={0x5, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e20, @local}}}, 0x108)
r8 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = accept$alg(r8, 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000080)={0xf000000, 0x1000, 0x200, r9, 0x0, &(0x7f0000000000)={0x98090a, 0x6, [], @value64=0xdd}})
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:43:56 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0xf4]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:56 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000180)={0x6, [[0x80, 0xff, 0x5, 0x5d, 0x3, 0x0, 0x0, 0x5], [0xffff65d8, 0x8, 0x8, 0x8000, 0x7, 0x2, 0x9d, 0xfffffff8], [0x8, 0x22, 0x7, 0xc6, 0x3ff, 0x10000, 0x8001, 0x1]], [], [{0x20b4, 0x7, 0x1, 0x0, 0x1, 0x1}, {0xaa, 0xfffffffd, 0x1, 0x1, 0x1, 0x1}, {0x5, 0x3, 0x1}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x0, 0xfff, 0x0, 0x1}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x1}, {0xa5b, 0x4, 0x0, 0x1}, {0x3f, 0xba, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x81, 0x1, 0x1}, {0xe2c, 0xb6dd, 0x1}, {0x1000, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x1ff, 0x800, 0x1, 0x1, 0x0, 0x1}], [], 0x7f})
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x18, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0xa00000000000000}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xe}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x60}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r5 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r6, &(0x7f00000017c0), 0x333, 0x0)

02:43:56 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote={0xac, 0x14, 0x2}}, @timestamp}}}, 0x100c)

02:43:56 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)

02:43:56 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1851.605722] xt_nfacct: accounting object `syz1' does not exists
02:43:56 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:56 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54", 0xe)

02:43:56 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:56 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54", 0xe)

[ 1851.943521] Bluetooth: hci0: Frame reassembly failed (-84)
02:43:57 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000450400280000bf0000329078ac141400ac1414bb0d00907800"/50], 0x32)

02:43:57 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x6]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:58 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
getsockopt$inet_dccp_buf(r4, 0x21, 0xf, &(0x7f0000000040)=""/76, &(0x7f00000000c0)=0x4c)

02:43:58 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54", 0xe)

[ 1853.933187] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1853.933254] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:43:58 executing program 2:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x3)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x8202, 0x0)
r4 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r4)
fcntl$lock(r3, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff7ffffffd, 0x803f, r4})
write$tun(0xffffffffffffffff, &(0x7f0000000240)={@void, @val={0x3, 0x4, 0x0, 0x0, 0xfff}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @private=0xa010100}, @timestamp}}}, 0x32)

02:43:58 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote={0xac, 0x14, 0x13}}, @timestamp}}}, 0x100c)

02:43:58 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf4]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:58 executing program 4:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x8}, 0x10)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$KDADDIO(r7, 0x400455c8, 0x8)

02:43:59 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7", 0xf)

02:43:59 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:59 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7", 0xf)

02:43:59 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x25)
r4 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r4)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = fcntl$getown(r6, 0x9)
r8 = syz_open_procfs(r7, &(0x7f0000000080)='net/sockstat\x00')
preadv(r8, &(0x7f00000017c0), 0x333, 0x0)
ioctl$TIOCEXCL(r0, 0x540c)

02:43:59 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x2]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:59 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7", 0xf)

02:43:59 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:43:59 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:43:59 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
prctl$PR_SVE_SET_VL(0x32, 0xc3a9)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x40)
getsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f00000000c0)=""/79, &(0x7f0000000140)=0x4f)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000000))

02:44:00 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c)

02:44:00 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x6]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:00 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

[ 1855.140234] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1855.146376] Bluetooth: hci0: Frame reassembly failed (-84)
02:44:00 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @remote}, @timestamp}}}, 0x100c)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[], 0x101)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f00000000c0)=0x1, 0x4)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000))

02:44:00 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:00 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf4]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:00 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:00 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:00 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:00 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:00 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

[ 1857.132962] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1857.143204] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:44:04 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:04 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:04 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x2}}}}, 0x100c)

02:44:04 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ip6erspan0\x00', 0x420000015001})
r3 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)=ANY=[], 0x100c)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
setsockopt$netrom_NETROM_T4(r5, 0x103, 0x6, &(0x7f0000000000)=0x4, 0x4)

02:44:04 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}, {{&(0x7f0000000040)=@isdn, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/18}, {&(0x7f0000000140)=""/222}, {&(0x7f0000000240)=""/216}]}, 0x200}, {{&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)=""/49}, {&(0x7f0000000440)=""/22}]}, 0xdc3}], 0x40002e5, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x10)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000240)={<r3=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000280)={r3, 0x2})
ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000680)={r3, 0x1, &(0x7f0000000580)=[0x1], &(0x7f00000005c0)=[0x4], 0x20, 0x1, 0x7, &(0x7f0000000600)=[0x4], &(0x7f0000000640)=[0x40, 0x9, 0x1, 0x100, 0x8, 0x5, 0x0, 0x7fff, 0x54]})
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000740))
preadv(r6, &(0x7f00000017c0), 0x333, 0x0)

02:44:04 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x13)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

[ 1859.212818] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1859.219494] Bluetooth: hci0: command tx timeout
02:44:04 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:44:04 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1859.283236] nfacct_mt_checkentry: 23 callbacks suppressed
[ 1859.283244] xt_nfacct: accounting object `syz1' does not exists
[ 1859.306137] xt_nfacct: accounting object `syz1' does not exists
02:44:04 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:04 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf4]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1859.407083] xt_nfacct: accounting object `syz1' does not exists
[ 1859.426351] xt_nfacct: accounting object `syz1' does not exists
02:44:04 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

[ 1859.484834] Bluetooth: hci0: Frame reassembly failed (-84)
02:44:04 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:04 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1859.578087] xt_nfacct: accounting object `syz1' does not exists
02:44:04 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

[ 1859.664086] xt_nfacct: accounting object `syz1' does not exists
02:44:04 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x3}}}}, 0x100c)

02:44:04 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:04 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:04 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f00000000c0)={0x14, 0x30, &(0x7f0000000000)="094ebf7ff4e98c40ce60972597b490a985f1e02d2f8970298997501f", {0x0, 0x0, 0x41415270, 0x0, 0x401, 0x80000000, 0x2, 0x9}})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
socket$netlink(0x10, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x21a080, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1)
close(r4)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x3c, 0x2})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000000180)={0x9, 0x0, 0x0, {0x0, @sdr={0x3247504d, 0x8}}})
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000075000/0x4000)=nil], &(0x7f000026bfec), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')

[ 1860.030042] xt_nfacct: accounting object `syz1' does not exists
02:44:06 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000000)={0xc223, 0x2})

02:44:06 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x2, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x9)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TIOCMIWAIT(r4, 0x545c, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r5, &(0x7f00000017c0), 0x333, 0x0)

02:44:06 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:06 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:06 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000280)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x3e, 0x4, 0x0, 0x0, 0x10c, 0x0, 0x0, 0x0, 0x32, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x400}]}, @timestamp_prespec={0x44, 0x4c, 0xa0, 0x3, 0xa, [{@remote, 0x9}, {@loopback, 0x6}, {@empty, 0x10001}, {@broadcast, 0x80000001}, {@multicast1, 0x7f}, {@broadcast, 0x20}, {@local, 0x3}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x41a7}]}, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x0, 0x9, "ec59dc9c31f7ab"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x1a, 0x3, 0x5, [{@remote, 0x7fff}]}, @timestamp={0x44, 0x14, 0x26, 0x0, 0x3, [0xaa, 0x8, 0x7, 0x10001]}, @lsrr={0x83, 0x13, 0x62, [@empty, @broadcast, @local, @multicast1]}, @lsrr={0x83, 0x7, 0xf0, [@broadcast]}, @timestamp_addr={0x44, 0x3c, 0x63, 0x1, 0x6, [{@remote, 0x1}, {@remote, 0xc2}, {@loopback, 0xfffffffc}, {@private=0xa010101, 0x8}, {@rand_addr=0x64010102, 0xffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@private=0xa010100, 0x6}]}]}}, @timestamp}}}, 0x116)

02:44:06 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x4}}}}, 0x100c)

[ 1861.542651] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1861.542672] Bluetooth: hci0: command 0xfc11 tx timeout
02:44:06 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:06 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1861.667787] xt_nfacct: accounting object `syz1' does not exists
[ 1861.714712] Bluetooth: hci0: Frame reassembly failed (-84)
02:44:06 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:06 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:06 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

[ 1861.773413] xt_nfacct: accounting object `syz1' does not exists
[ 1861.795273] xt_nfacct: accounting object `syz1' does not exists
02:44:06 executing program 1:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r0 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:08 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000001c0)={0x81, "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"})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xc}}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0xd4)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:44:08 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:08 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wg1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000000000000000000329078ac141400ac00000000000000009855a92a90e31fc7a3eb0000000000000000000800000096005593433cf529b7bb94a95fc7a8efe89b0298c942287b12af5d55c48292239ebe00"/99], 0x100c)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x11000, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r3)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f00000001c0)=r2)

02:44:08 executing program 1:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r0 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:08 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x59)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r5, &(0x7f00000017c0), 0x333, 0x0)

02:44:08 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x6}}}}, 0x100c)

[ 1863.772462] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1863.772493] Bluetooth: hci0: command 0xfc11 tx timeout
02:44:08 executing program 1:
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r0 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:08 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:08 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:08 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:09 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:09 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

[ 1865.932307] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1865.932327] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1865.964896] Bluetooth: hci0: Frame reassembly failed (-84)
02:44:12 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:12 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:12 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)

02:44:12 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
io_setup(0x401, &(0x7f00000001c0)=<r3=>0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r4)
io_cancel(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x4, r4, &(0x7f0000000200)="9562a5cd528bf588e01970d17ebf501011012f2b65ecfd2da12ae746cafe3b1a8333549f1adf19aa035363ae4c3b2b8473db7e53d52cadcc76f7364dc343249c09f0af95134f173bbbc9d0a79109620bd81c0c3ae70f462c3e2c75c272b053387c7a5180b56466e0317a498592665fde3c95342a7985dfa934748f7717f9843adb9a7924081f62806e9b837b44c0b6a9e2181d08c2a24bb1fd0f36af5dd00b00d77729c449418abe6738f56bdd6b837da098ed33a130fcb66257424d72501913053f4599ecbe6477eb27860761773041bafd18a4a107926cce131733396fd14cecf6e074370dd052808d1dcb199610bbe0dae73647f3018f", 0xf8, 0x0, 0x0, 0x1}, &(0x7f0000000340))
r5 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0xa00000, 0x3, 0x36, <r6=>0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9909d8, 0xffffffff, [], @string}})
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x5, @empty, 0x1000}, @in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e21, @rand_addr=0x64010100}], 0x3c)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})

02:44:12 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x7}}}}, 0x100c)

02:44:12 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000000140))
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000000c0)={0x980000, 0x800, 0x0, <r5=>0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa00905, 0x5, [], @p_u16=&(0x7f0000000000)=0x7f}})
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x8)

[ 1868.012168] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1868.012205] Bluetooth: hci0: command 0xfc11 tx timeout
02:44:13 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

[ 1868.088100] nfacct_mt_checkentry: 10 callbacks suppressed
[ 1868.088108] xt_nfacct: accounting object `syz1' does not exists
[ 1868.124996] xt_nfacct: accounting object `syz1' does not exists
02:44:13 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1868.139174] Bluetooth: hci0: Frame reassembly failed (-84)
02:44:13 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:13 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:13 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

[ 1868.211306] xt_nfacct: accounting object `syz1' does not exists
02:44:13 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:13 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

[ 1868.259376] xt_nfacct: accounting object `syz1' does not exists
02:44:13 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1868.305520] xt_nfacct: accounting object `syz1' does not exists
[ 1868.359825] xt_nfacct: accounting object `syz1' does not exists
02:44:13 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}, 0x200}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)

02:44:13 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x40, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x208000, 0x0)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r3, &(0x7f0000000040), 0x0, 0x0)

02:44:13 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x8}}}}, 0x100c)

02:44:15 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:15 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x22000, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000100)=@netrom)
openat$cgroup_freezer_state(r2, &(0x7f00000000c0)='freezer.state\x00', 0x2, 0x0)
write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x3dc3}, @val, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @remote}, @timestamp}}}, 0x36)

02:44:15 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0x8, 0xcee, [{0x85f4, 0x0, 0x1}, {0x2, 0x0, 0x40}, {0x4, 0x0, 0xfffffffffffffef5}, {0x7, 0x0, 0x7ff}, {0xb3, 0x0, 0x3}, {0x7fff, 0x0, 0x8000}, {0x2890ad42, 0x0, 0x6}, {0x4, 0x0, 0x80}]})
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')

02:44:15 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x48840, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f00000000c0))
ioctl$TIOCGICOUNT(r1, 0x545d, 0x0)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100))
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
ioctl$KDADDIO(r4, 0x400455c8, 0x9)
ioctl$TCFLSH(r4, 0x540b, 0x1)

02:44:15 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x9}}}}, 0x100c)

[ 1870.171998] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1870.172020] Bluetooth: hci0: command 0xfc11 tx timeout
02:44:15 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

[ 1870.244195] xt_nfacct: accounting object `syz1' does not exists
[ 1870.263723] xt_nfacct: accounting object `syz1' does not exists
02:44:15 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1870.296747] xt_nfacct: accounting object `syz1' does not exists
[ 1870.308095] xt_nfacct: accounting object `syz1' does not exists
02:44:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:15 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:15 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:15 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:15 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x6b}}}}, 0x100c)

02:44:15 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:15 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:15 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ustat(0x9, &(0x7f0000000040))
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080)=0x8, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r4, &(0x7f00000017c0), 0x333, 0x0)

02:44:15 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d", 0x8)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:16 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:16 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d", 0x8)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:16 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d", 0x8)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:16 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:16 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0xff}}}}, 0x100c)

02:44:16 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:16 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:16 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_dccp_buf(r2, 0x21, 0xd, &(0x7f0000000080)="90ff996b4da2d8808fa801c0a7b0e2e1c9d586bbb57c1b12e784679429", 0x1d)
syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time_for_children\x00')
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r5, &(0x7f00000017c0), 0x333, 0x0)

02:44:16 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0xc44f53985935779f, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400040, 0x18)
ioctl$RTC_PIE_ON(r1, 0x7005)
r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x3, 0x2000)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002500)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffa888}}}]}}]}, 0x58}}, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002500)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffa888}}}]}}]}, 0x58}}, 0x0)
r6 = socket(0x11, 0x800000003, 0x0)
bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002500)=ANY=[@ANYBLOB="5800000024000b0f000000000000130000000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100746266002c00020028000100000000000000000000000000000200000000000088a8ffff00"/64], 0x58}}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x31c, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x3f, 0x8, 0x1, 0xdef7}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x74d8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x31c}, 0x1, 0x0, 0x0, 0x90}, 0x5)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:44:16 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:16 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1871.864643] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1871.888724] sch_tbf: burst 0 is lower than device lo mtu (65550) !
02:44:16 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:16 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:16 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54", 0xe)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:16 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:17 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54", 0xe)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

[ 1872.300703] sch_tbf: burst 0 is lower than device lo mtu (65550) !
02:44:17 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c)

02:44:17 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54", 0xe)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:17 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:17 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x3})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:44:17 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000017c0), 0x263, 0x0)

02:44:17 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280)='ethtool\x00')
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000805}, 0x1)
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @remote}, @timestamp}}}, 0x100c)

02:44:17 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1872.463519] Bluetooth: hci0: Frame reassembly failed (-84)
02:44:17 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7", 0xf)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:17 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={<r5=>0x0, r4, 0x0, 0xb, &(0x7f0000000000)='syzkaller1\x00'}, 0x30)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000280)={{0x1, 0x6, 0x74, 0x3ff, '\x00', 0x3}, 0x1, 0x100, 0x8, r5, 0x3, 0x9, 'syz0\x00', &(0x7f0000000100)=['/dev/net/tun\x00', 'syzkaller1\x00', '/dev/net/tun\x00'], 0x25, [], [0xaf7, 0x4, 0x20, 0x6]})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @remote}, @timestamp}}}, 0x100c)

02:44:17 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x101)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r3, &(0x7f00000017c0), 0x333, 0x0)
socket$tipc(0x1e, 0x5, 0x0)

02:44:17 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:17 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7", 0xf)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:18 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x2}}}}, 0x100c)

02:44:18 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:18 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7", 0xf)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

[ 1873.109574] nfacct_mt_checkentry: 32 callbacks suppressed
[ 1873.109582] xt_nfacct: accounting object `syz1' does not exists
[ 1873.134981] xt_nfacct: accounting object `syz1' does not exists
[ 1874.491751] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1874.497123] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:44:21 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x425e, 0x40c100)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000080)={0x5c80, 0x4, [{0x2}, {0xa}, {0x8, 0x1}, {0xd, 0x1}]})
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:44:21 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
socket$netlink(0x10, 0x3, 0x0)
r1 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/diskstats\x00', 0x0, 0x0)
ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002500)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffa888}}}]}}]}, 0x58}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', <r6=>r4, 0x80, 0x1, 0x8000, 0x86, {{0x13, 0x4, 0x0, 0x35, 0x4c, 0x66, 0x0, 0x56, 0x2f, 0x0, @broadcast, @local, {[@noop, @cipso={0x86, 0x14, 0x1, [{0x1, 0xe, "b1ce286ba9a1fa1c7014acaa"}]}, @ssrr={0x89, 0x23, 0x13, [@private=0xa010101, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000380)={'gretap0\x00', r6, 0x40, 0x8000, 0x9, 0x7fffffff, {{0x2d, 0x4, 0x3, 0x2f, 0xb4, 0x67, 0x0, 0x9, 0x2f, 0x0, @loopback, @remote, {[@cipso={0x86, 0x2d, 0x3, [{0x0, 0xe, "c8bb744fd7d45ebcce8e6077"}, {0x7, 0x7, "a78039d1ba"}, {0x6, 0x12, "106db9c8de65a683c76bb753cc395be2"}]}, @ra={0x94, 0x4}, @generic={0x88, 0x2}, @timestamp_prespec={0x44, 0x44, 0x35, 0x3, 0x9, [{@multicast2, 0x6}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x9}, {@remote, 0x7}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@empty, 0x3f}, {@local, 0x1ff}]}, @rr={0x7, 0x17, 0xf4, [@empty, @remote, @multicast2, @local, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0x23, [@empty]}, @end]}}}}})
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
getsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000000000)=0x8000, &(0x7f00000000c0)=0x2)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000000000000f7ff440010020006000000329078ac140900ac1414bb4d00907800"/50], 0x100c)

02:44:21 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xb0902, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$TIOCSTI(r0, 0x5412, 0x7fff)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001ff)
write$FUSE_BMAP(r2, &(0x7f0000000180)={0x18, 0x0, 0x8, {0x5}}, 0x18)
r3 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r4, &(0x7f00000017c0), 0x333, 0x0)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000040)={{0x0, 0x1ff, 0x9b72, 0xffef}, 'syz1\x00', 0x7})
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x9)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x5)
ioctl$VIDIOC_S_JPEGCOMP(r6, 0x408c563e, &(0x7f00000000c0)={0xb22, 0xc, 0x3c, "ae00d0519c1e6040f375a6ab18a836b5c455f37b6777959c35e405f9609ed54955ecf64cd65fbe42e50400812e689e312bf6250aa200", 0x1c, "1ae93c2a9265a06c9f541fe4311bb589e9ba65fa5c0889d3d67a17223412649d34a344a4200f0803a03cbd8f02e4e200", 0x80})

02:44:21 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:21 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:21 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x3}}}}, 0x100c)

[ 1876.571637] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1876.571643] Bluetooth: hci0: command 0xfc11 tx timeout
02:44:21 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:21 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4]}}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:21 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

[ 1876.647824] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1876.663879] xt_nfacct: accounting object `syz1' does not exists
[ 1876.671720] xt_nfacct: accounting object `syz1' does not exists
02:44:21 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:21 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1876.768943] xt_nfacct: accounting object `syz1' does not exists
[ 1876.781187] xt_nfacct: accounting object `syz1' does not exists
02:44:21 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

[ 1876.846417] xt_nfacct: accounting object `syz1' does not exists
[ 1877.001094] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1878.731434] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1878.731469] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:44:25 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000000)=0x2, 0x4)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:44:25 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x2]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:25 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000180)=0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000000c0)={{0xf7, 0x5}, {0x2, 0x9}, 0x6, 0x1, 0x6})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000000))
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000110100000000450010020000000000329078ac14143374e7ddbb0d00907800"/50], 0x100c)
clock_gettime(0x0, &(0x7f0000000200)={<r6=>0x0, <r7=>0x0})
futimesat(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={{r6, r7/1000+60000}, {0x0, 0xea60}})

02:44:25 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:25 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x48100, 0x0)
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r4)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
io_submit(0x0, 0x4, &(0x7f00000005c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000140)="54f0823638ac47533f3ead48044d0f48e098de4efdb1281408b49b3a7dc0190f9d9249a7f7ad3ee8caba49f61a6e8a6357e230b696800aef175624aee2edf14ac613c3135eafb67af8caf5ea7f29a22db4f0b24147df28f4c526b847b87748f94ad4db36b485ff5054fceb5ce059458959b1ad85bda982f9fc3e619c8971d0c7c448f00ae29bc2cddd3b986e52da8f8fda3220c378dcaf4195b8c81ce1aa03865e15c9ace076b163172a4775abaeaf479ae285d35b45ae5de5e28b46d3796079e125a1f0c70cd17f53e065b9", 0xcc, 0x1ff00000000, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000280)="64cfe670aba2e549884be1f945e98a92778ae57be5ed5cea5f316cfb7e5a30c6c2042fa7e8bc318e920c7c841ac79b2210faf71be09ae08be8dfafba060d721b1d61ff44121fb5182ae531beedcb574e4a7272d3ca96c8b6f7183ff130b3d774bb3d2952e42ebdcf5417a74ad01877bb2bd588bc1ebba3b3fef3038014a60fd7c2b88e6d0b2eea053cd6fd2e1c3022b859a9182a5df6af677c4e841c0c9fb55f6fec16d5a24f4276b62144127a798ae4aadf73536e02b505a57c2f4f9a4696", 0xbf, 0x1, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x4225, r4, &(0x7f0000000380)="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", 0xfb, 0x6, 0x0, 0x0, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0xbff7, r7, &(0x7f00000004c0)="0c22d73321d08c5944e2771429630fb17be5c7f154eaeae6fd943fb3dcb552bf1bf5a9ee2d2abcc9abd8793cabbc17d4c2da682fe521b8fbc8fef2683282699d16f3a3a7d8bcac618c69f3c17e50c4aebc09eba77487ab8377b2c1b8e1e8d5cc0628605a486a9b44910284124d83e044f7363d2ef156ca2a834f3be31d78b4d337ec11f5d03124703a4863fbd2a76f", 0x8f, 0x6, 0x0, 0x0, r9}])
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)

02:44:25 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x4}}}}, 0x100c)

[ 1880.811261] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1880.811316] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:44:25 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x3]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1880.879643] xt_nfacct: accounting object `syz1' does not exists
[ 1880.889128] xt_nfacct: accounting object `syz1' does not exists
02:44:25 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:25 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
accept4(r1, 0x0, &(0x7f0000000000), 0x80000)
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @remote}, @timestamp}}}, 0x100c)

02:44:25 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x4]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1880.983291] xt_nfacct: accounting object `syz1' does not exists
02:44:25 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:26 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x6]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1881.063345] xt_nfacct: accounting object `syz1' does not exists
[ 1881.106505] xt_nfacct: accounting object `syz1' does not exists
[ 1882.971140] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:44:30 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:30 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0xf4]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:30 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x25)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000040)={0x1f})
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r3, &(0x7f00000017c0), 0x333, 0x0)

02:44:30 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a000100482e32343500000094f7df5b"], 0x8c}}, 0x0)

02:44:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x101000, 0x0)
write$rfkill(r5, &(0x7f0000000280)={0x0, 0x23, 0x1, 0x0, 0x1}, 0x8)
r6 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000200))
ioctl$KDADDIO(r3, 0x400455c8, 0x9)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x19)

02:44:30 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x6}}}}, 0x100c)

[ 1885.051144] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1885.054130] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:44:30 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

[ 1885.134442] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1885.151066] xt_nfacct: accounting object `syz1' does not exists
02:44:30 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x14c]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:30 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000091408002bbd7000fddbdf2508000100010000ec070001000200000008000100020000000800010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20008080)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r4, &(0x7f00000017c0), 0x333, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0xfff)

02:44:30 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a000100482e32343500000094f7df5b"], 0x8c}}, 0x0)

02:44:30 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:30 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x17e]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1885.286927] xt_nfacct: accounting object `syz1' does not exists
[ 1885.294946] xt_nfacct: accounting object `syz1' does not exists
02:44:30 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:30 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x180]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1885.369588] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1885.396333] xt_nfacct: accounting object `syz1' does not exists
02:44:30 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a000100482e32343500000094f7df5b"], 0x8c}}, 0x0)

02:44:30 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x19c]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1885.524017] xt_nfacct: accounting object `syz1' does not exists
[ 1885.542785] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1885.975077] Bluetooth: hci1: sending frame failed (-49)
[ 1887.370861] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1887.381546] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:44:32 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a000100482e32343500000094f7df5b"], 0x8c}}, 0x0)

02:44:32 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:32 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x1e0]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:32 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r0, 0x2007fff)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
r2 = dup(r1)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000080)='./bus\x00', 0x200, 0x1)
ioctl$TIOCL_SETVESABLANK(r7, 0x541c, &(0x7f0000000040))
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r8, &(0x7f00000017c0), 0x333, 0x0)

02:44:33 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x7}}}}, 0x100c)

[ 1888.020805] Bluetooth: hci1: command 0xfc11 tx timeout
[ 1888.026199] Bluetooth: hci1: Entering manufacturer mode failed (-110)
02:44:33 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
statx(r2, &(0x7f0000000100)='./file0\x00', 0x4000, 0x1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r5)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, 0x0)
setuid(r7)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r8, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10)
sendto$inet(r8, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x8000a0ffffffff, 0x0, 0xf0000000000e814)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r9=>0x0}, &(0x7f00000000c0)=0xc)
lchown(&(0x7f0000000040)='./file0\x00', r7, r9)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000240)={0x158, 0x0, 0x4, [{{0x2, 0x0, 0xfffffffffffffffe, 0x3, 0x3, 0xfff, {0x2, 0x6, 0x7fffffff, 0x5, 0x1, 0x24, 0x3, 0xff, 0x2, 0xe05, 0x8, 0x0, r3, 0x5, 0x8001}}, {0x6, 0x4, 0x1, 0x68, ']'}}, {{0x3, 0x3, 0x3, 0x1, 0x7fffffff, 0x9, {0x6, 0x32, 0xb4dd, 0x3, 0x3, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, r5, r9, 0x2, 0x7}}, {0x6, 0x3, 0xa, 0xfffffffa, '/dev/ptmx\x00'}}]}, 0x158)

[ 1888.118250] nfacct_mt_checkentry: 3 callbacks suppressed
[ 1888.118257] xt_nfacct: accounting object `syz1' does not exists
[ 1888.132858] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1888.153957] xt_nfacct: accounting object `syz1' does not exists
02:44:33 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x1f9]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:33 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

[ 1888.178430] audit: type=1804 audit(1595126673.103:113): pid=20323 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir120774550/syzkaller.NKZaki/1070/bus" dev="sda1" ino=18070 res=1
[ 1888.209143] Bluetooth: hci0: Frame reassembly failed (-84)
02:44:33 executing program 2:
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a000100482e32343500000094f7df5b"], 0x8c}}, 0x0)

02:44:33 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:33 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x210]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:33 executing program 2:
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a000100482e32343500000094f7df5b"], 0x8c}}, 0x0)

[ 1888.354011] xt_nfacct: accounting object `syz1' does not exists
[ 1888.377935] xt_nfacct: accounting object `syz1' does not exists
02:44:33 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x1c}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:33 executing program 2:
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a000100482e32343500000094f7df5b"], 0x8c}}, 0x0)

02:44:33 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x21e]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1888.509985] xt_nfacct: accounting object `syz1' does not exists
[ 1888.639633] xt_nfacct: accounting object `syz1' does not exists
[ 1888.920073] audit: type=1804 audit(1595126673.843:114): pid=20339 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120774550/syzkaller.NKZaki/1070/bus" dev="sda1" ino=18070 res=1
[ 1888.971441] audit: type=1804 audit(1595126673.853:115): pid=20344 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir120774550/syzkaller.NKZaki/1070/bus" dev="sda1" ino=18070 res=1
[ 1889.053381] audit: type=1800 audit(1595126673.983:116): pid=20339 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=18070 res=0
02:44:34 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
recvmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/76, 0x4c}, {&(0x7f0000000140)=""/110, 0x6e}], 0x3, &(0x7f0000000200)=""/21, 0x15}, 0x40000100)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vsock\x00', 0x2001, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000ac0)=0x1000, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r6, &(0x7f00000017c0), 0x333, 0x0)

[ 1889.110573] audit: type=1800 audit(1595126673.983:117): pid=20344 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=18070 res=0
02:44:34 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x8}}}}, 0x100c)

02:44:35 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x4002, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000000)={0x3, 0x3f, 0x1f, 0x1f, 0x6f})
write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x2, {0x20, 0x0, 0x4}}, 0x14)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2000, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f00000000c0))

02:44:35 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x23e]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:35 executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a000100482e32343500000094f7df5b"], 0x8c}}, 0x0)

02:44:35 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x1c}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:35 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x9}}}}, 0x100c)

02:44:35 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x14, r4, 0x405, 0x0, 0x0, {0x7e, 0x0, 0x6800}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r4, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0x805)
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)

[ 1890.250630] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1890.260858] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1890.341939] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1890.380021] xt_nfacct: accounting object `syz1' does not exists
02:44:35 executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a000100482e32343500000094f7df5b"], 0x8c}}, 0x0)

02:44:35 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x1c}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:35 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x280]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1890.394688] xt_nfacct: accounting object `syz1' does not exists
02:44:35 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x28}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:35 executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a000100482e32343500000094f7df5b"], 0x8c}}, 0x0)

[ 1890.487940] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
02:44:35 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x290]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1890.529073] xt_nfacct: accounting object `syz1' does not exists
[ 1890.616294] xt_nfacct: accounting object `syz1' does not exists
02:44:35 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xa, "d99497", "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"}}, 0x110)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:44:35 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x28}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:35 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0)

02:44:35 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x2a6]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1890.876029] Bluetooth: hci0: Frame reassembly failed (-84)
02:44:36 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x6b}}}}, 0x100c)

02:44:36 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/200, 0xc8}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f00000001c0)=""/82, 0x52}], 0x3, &(0x7f0000000280)=""/49, 0x31}, 0x4}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000400)=""/11, 0xb}, {&(0x7f0000000440)=""/108, 0x6c}, {&(0x7f00000004c0)=""/20, 0x14}, {&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000600)=""/159, 0x9f}, {&(0x7f00000006c0)=""/227, 0xe3}], 0x8}, 0x9}], 0x2, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r3, &(0x7f00000017c0), 0x333, 0x0)

02:44:36 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x28}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:36 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x2b8]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:36 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0)

02:44:36 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x300]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:36 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0)

02:44:36 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

[ 1892.890455] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1892.890461] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1892.913395] Bluetooth: hci0: Frame reassembly failed (-84)
02:44:39 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:39 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x320]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:39 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

02:44:39 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
write$P9_RLOPEN(r4, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x8, 0x0, 0x6}, 0x9}}, 0x18)

02:44:39 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x300}}}}, 0x100c)

[ 1894.970277] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1894.970292] Bluetooth: hci0: command 0xfc11 tx timeout
02:44:40 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

02:44:40 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x35c]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:40 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0)

02:44:40 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r1 = semget$private(0x0, 0x4000000009, 0x0)
semop(r1, &(0x7f0000000380)=[{}, {0x7}, {0x1}, {0x3}], 0x180)
semctl$GETZCNT(r1, 0x1, 0xf, &(0x7f0000000080)=""/210)
ioctl$KDADDIO(r0, 0x400455c8, 0x6)

[ 1895.094059] nfacct_mt_checkentry: 6 callbacks suppressed
[ 1895.094066] xt_nfacct: accounting object `syz1' does not exists
[ 1895.107445] xt_nfacct: accounting object `syz1' does not exists
02:44:40 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

02:44:40 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, 0x0, 0x0)

02:44:40 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000002c0)={0x3, 0x0, [{}, {}, {}]})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00')
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002500)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffa888}}}]}}]}, 0x58}}, 0x0)
r7 = socket(0x11, 0x800000003, 0x0)
bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002500)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffa888}}}]}}]}, 0x58}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', <r10=>r8, 0x2f, 0x2, 0x81, 0x93, 0x0, @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1, 0x10, 0x2, 0x3}})
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

[ 1895.199669] xt_nfacct: accounting object `syz1' does not exists
[ 1895.236872] xt_nfacct: accounting object `syz1' does not exists
02:44:40 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x36a]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:40 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8c}}, 0x0)

02:44:40 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, 0x0, 0x0)

[ 1895.357140] xt_nfacct: accounting object `syz1' does not exists
02:44:40 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x39d]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1895.541131] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1895.546857] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1895.557790] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1895.570095] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1895.603335] xt_nfacct: accounting object `syz1' does not exists
02:44:40 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x600}}}}, 0x100c)

02:44:40 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8c}}, 0x0)

02:44:40 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, 0x0, 0x0)

02:44:40 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x3b8]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:40 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, 0x0)
setuid(r1)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x8000a0ffffffff, 0x0, 0xf0000000000e814)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r3=>0x0}, &(0x7f00000000c0)=0xc)
lchown(&(0x7f0000000040)='./file0\x00', r1, r3)
r4 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r4)
r5 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r5)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, r3, 0x20, 0x6}, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0xfff, 0x672, 0x609, 0x0, 0x1, 0x9, r4, r5})
r6 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r7, &(0x7f00000017c0), 0x333, 0x0)

02:44:40 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8c}}, 0x0)

02:44:40 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x3d2]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1895.854336] xt_nfacct: accounting object `syz1' does not exists
[ 1895.927985] xt_nfacct: accounting object `syz1' does not exists
02:44:42 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x600]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:42 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

02:44:42 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x8c}}, 0x0)

02:44:42 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = dup(0xffffffffffffffff)
r5 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r6}, &(0x7f0000000080)=0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r6, 0xfffffffe}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=<r7=>r6, @ANYBLOB="000000000000000000000000875ce3de728c9f4e50b0ff420e26df671fc398922fb93b8b05797987604309444f25d16c72cce7e4afdfe29ec5c2"], &(0x7f0000000080)=0x10)
getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r7, 0x0, 0x2, 0xb5e3}, &(0x7f0000000100)=0x10)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r8, &(0x7f00000017c0), 0x333, 0x0)

02:44:42 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:44:42 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x700}}}}, 0x100c)

[ 1897.530067] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1897.540732] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:44:42 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x8c}}, 0x0)

02:44:42 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

02:44:42 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x143000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0)
r2 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r2)
ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=r2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$rose(r4, 0x104, 0x3, &(0x7f00000000c0)=0xe9fb, 0x4)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:44:42 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x1002]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1897.633877] xt_nfacct: accounting object `syz1' does not exists
[ 1897.671793] xt_nfacct: accounting object `syz1' does not exists
02:44:42 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

02:44:42 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x8c}}, 0x0)

02:44:42 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x1e02]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:42 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)}, 0x0)

02:44:42 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x8c}}, 0x0)

[ 1897.804987] Bluetooth: hci0: Frame reassembly failed (-84)
02:44:42 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@any, 0x8})
syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14)
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)
pipe2(&(0x7f00000000c0), 0x0)

02:44:42 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x2003]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:43 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x900}}}}, 0x100c)

02:44:43 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)}, 0x0)

02:44:43 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x8c}}, 0x0)

[ 1899.849950] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1899.849996] Bluetooth: hci0: command 0xfc11 tx timeout
02:44:46 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_pts(r2, 0x80240)
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r4)
syz_open_procfs(r4, &(0x7f0000000000)='net/hci\x00')
lchown(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300))
r5 = getuid()
mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='fuseblk\x00', 0xba8a8, &(0x7f00000007c0)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX, @ANYRES32, @ANYRES16=r4, @ANYBLOB=',group_id=', @ANYRES32, @ANYBLOB="6aa732a2653d3078303030303003003030303030323830302c726f6f74636f6e746578743d846f6f742c666f776e65723d000000", @ANYBLOB="737323c159f79fa3b4b94bcb84419404d8be980c99c4665b06e7084c520399d42a0e089ccc35e0d3ba9051c128efb76021defa14d9f130a02a9fd6620800193ebd82d3b619fa7e10771d85454be61dd844b08f9d6599f7b42b010e5f50898d1e7cd3e394008327a5d3a606471ea7a0fe657e475430004aa2", @ANYRESDEC, @ANYRESDEC=r5, @ANYRESHEX, @ANYRESDEC=0xee01, @ANYBLOB="2c61750069742c00192861656b213eefe67fd6da7a6bda1800044f280be36ad80eaf1fca475aad0e5fbf79c5d1a0002b5af3835f7c495b2bfd9820cad3fd92ca4bbc699a0fd6d1372e1c995e4283f6eebaae82bfbed70768fede563ad70112426e0e8e15fc9cc7d9a55ccfc0c2ff7835a93639af47e3328361a117a8a80600768de59ce062b046d66791a7da131cf2df73653fdb519e7c7cf46e118e574c5a56262a18ea05ba3de78a8a16c6fcea214c711cfd70d8ddf0c91453b01b6ba938bc98a517c4b78e5fd4db72a424b2e682ead5739fb0b9b4e0e7488e8b492d2a9ff14620dd9b442d733a077d3ebe3eb3e522e7927246661e79f0", @ANYRES64=0x0])
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
preadv(r7, &(0x7f0000000100)=[{&(0x7f0000000040)=""/180, 0xb4}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000480)=""/249, 0xf9}], 0x4, 0x0)

02:44:46 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x3e02]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:46 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)}, 0x0)

02:44:46 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x8c}}, 0x0)

02:44:46 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0xfea}}}}, 0x100c)

[ 1901.929805] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1901.929830] Bluetooth: hci0: command 0xfc11 tx timeout
02:44:46 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0x400, &(0x7f0000000080))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, <r2=>0x0}, 0x0)
setuid(r2)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10)
sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x8000a0ffffffff, 0x0, 0xf0000000000e814)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r4=>0x0}, &(0x7f00000000c0)=0xc)
lchown(&(0x7f0000000040)='./file0\x00', r2, r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r6)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0))
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x158)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:44:46 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{0x0}], 0x1}, 0x0)

02:44:47 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc020000"], 0x8c}}, 0x0)

02:44:47 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x3f00]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1902.015084] nfacct_mt_checkentry: 6 callbacks suppressed
[ 1902.015092] xt_nfacct: accounting object `syz1' does not exists
[ 1902.049271] xt_nfacct: accounting object `syz1' does not exists
02:44:47 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{0x0}], 0x1}, 0x0)

[ 1902.107874] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1902.118506] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1902.134755] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1902.146712] xt_nfacct: accounting object `syz1' does not exists
02:44:47 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x4000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:47 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1defe3238a62b6b1a4722df7f1"}]}, 0x30}}, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{0x0}], 0x1}, 0x0)

[ 1902.161820] xt_nfacct: accounting object `syz1' does not exists
[ 1902.209480] xt_nfacct: accounting object `syz1' does not exists
02:44:47 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc020000"], 0x8c}}, 0x0)

02:44:47 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x4c01]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:47 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f0000001140)=[{&(0x7f0000000040)=""/117, 0x75}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/102, 0x66}], 0x3, 0x80000000000000)

02:44:47 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "1a9e8b0b10abfa1f", "f6d3933a611d019cdb075d50458aa1771f100d41a89eec48c21f064d686f368a", "bf599772", "73b278a5beb5532e"}, 0x38)
recvmmsg(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3f00, 0x0)

[ 1902.449245] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1902.457048] xt_nfacct: accounting object `syz1' does not exists
[ 1902.479927] xt_nfacct: accounting object `syz1' does not exists
[ 1902.490344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1902.507578] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
02:44:47 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x6b00}}}}, 0x100c)

02:44:47 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x25)
syz_open_procfs(r1, &(0x7f0000000000)='auxv\x00')
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:44:47 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1}, 0x14)

02:44:47 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x5c03]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:47 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc020000"], 0x8c}}, 0x0)

02:44:47 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)

02:44:47 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x6a03]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1902.786267] xt_nfacct: accounting object `syz1' does not exists
02:44:47 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}}, 0x8080)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x3, 0x12, 0x1e, 0x18, "4793d99ebd9a62996538b3b1dc8c2ccc9b87a6aa46fce015149281918bb641da16d626c4a4abd22725b23b9680bf84c2fb860b259e55bca281981d4c26adb79b", "6e6e736a18beb3ba052799cff916f7b66cdf01ec1dc02a92fa19f15bb2645563", [0x0, 0x3ff]})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:44:47 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00')
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r1, 0xc91add0bf88807dd, 0x0, 0x0, {0x34}}, 0x14}}, 0x0)

02:44:47 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x40010000, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)

[ 1902.826422] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1902.853739] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
02:44:47 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x7e01]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1902.890450] xt_nfacct: accounting object `syz1' does not exists
[ 1902.913556] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
02:44:47 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c000280"], 0x8c}}, 0x0)

[ 1903.003664] xt_nfacct: accounting object `syz1' does not exists
[ 1903.043692] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1903.054218] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
02:44:48 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0xea0f}}}}, 0x100c)

02:44:48 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x8002]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:48 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0x3b0, 0x2e0, 0x3b0, 0x3b0, 0x2e0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:etc_runtime_t:s0\x00'}}}, {{@ipv6={@loopback, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0)

02:44:48 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c000280"], 0x8c}}, 0x0)

02:44:48 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x200, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb9a1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x75d946b0, @mcast2, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffffff8, @mcast2, 0xfff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfb, @loopback, 0x7ff}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010100}}}}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x31}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1380}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r4 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r5, &(0x7f00000017c0), 0x333, 0x0)

02:44:48 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00')
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r1, 0xc91add0bf88807dd, 0x0, 0x0, {0x17}}, 0x14}}, 0x0)

02:44:48 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c000280"], 0x8c}}, 0x0)

[ 1903.487942] xt_SECMARK: invalid mode: 0
02:44:50 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c000280050001000000000008000740000000001000"], 0x8c}}, 0x0)

02:44:50 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x9002]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:50 executing program 1:
mq_open(&(0x7f0000000100)='$$#!\x00', 0x3, 0x0, 0x0)

02:44:50 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00')
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r4, 0x301, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0)
r7 = socket(0x11, 0x800000003, 0x0)
bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002500)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffa888}}}]}}]}, 0x58}}, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x1c}}, 0x8000)
r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r10, &(0x7f00000017c0), 0x333, 0x0)

02:44:50 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000), 0x0)

02:44:50 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0xffff}}}}, 0x100c)

[ 1905.049581] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1905.059717] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:44:50 executing program 1:
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700)='devlink\x00')
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x14, r1, 0xc91add0bf88807dd, 0x0, 0x0, {0x26}}, 0x14}}, 0x0)

02:44:50 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c000280050001000000000008000740000000001000"], 0x8c}}, 0x0)

02:44:50 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x9c01]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1905.160449] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1905.182614] Bluetooth: hci0: Frame reassembly failed (-84)
02:44:50 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x101000, 0x0)
write$rfkill(r5, &(0x7f0000000280)={0x0, 0x23, 0x1, 0x0, 0x1}, 0x8)
r6 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000200))
ioctl$KDADDIO(r3, 0x400455c8, 0x9)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x19)

02:44:50 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c000280050001000000000008000740000000001000"], 0x8c}}, 0x0)

02:44:50 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x9d03]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:50 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a000100482e32"], 0x8c}}, 0x0)

02:44:50 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0xa602]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:50 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c000280050001000000000008000740000000001000"], 0x8c}}, 0x0)

[ 1905.510898] Bluetooth: hci1: Frame reassembly failed (-84)
02:44:50 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0xb802]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1905.614849] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1907.209413] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1907.209459] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1907.529590] Bluetooth: hci1: command 0xfc11 tx timeout
[ 1907.534960] Bluetooth: hci1: Entering manufacturer mode failed (-110)
02:44:54 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x100, 0x6000)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x2, 'team0\x00', {0x4800000}, 0x5})
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00')
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x20048815}, 0x4800)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r6, &(0x7f00000017c0), 0x333, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
write$P9_RMKDIR(r8, &(0x7f00000000c0)={0x14, 0x49, 0x1, {0x0, 0x0, 0x1}}, 0x14)

02:44:54 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c000280050001000000000008000740000000001000"], 0x8c}}, 0x0)

02:44:54 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0xb803]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:54 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c)

02:44:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x101000, 0x0)
write$rfkill(r5, &(0x7f0000000280)={0x0, 0x23, 0x1, 0x0, 0x1}, 0x8)
r6 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000200))
ioctl$KDADDIO(r3, 0x400455c8, 0x9)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x19)

02:44:54 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000001100), &(0x7f0000001140))
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000100)="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")
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
recvfrom$l2tp(r4, &(0x7f0000000080)=""/13, 0xd, 0x20, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)

[ 1909.289288] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1909.289315] Bluetooth: hci0: command 0xfc11 tx timeout
02:44:54 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0xd203]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1909.373842] nla_parse: 13 callbacks suppressed
[ 1909.373851] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1909.392043] nfacct_mt_checkentry: 11 callbacks suppressed
[ 1909.392050] xt_nfacct: accounting object `syz1' does not exists
02:44:54 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c000280050001000000000008000740000000001000"], 0x8c}}, 0x0)

02:44:54 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 1909.494247] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1909.497477] xt_nfacct: accounting object `syz1' does not exists
[ 1909.518110] xt_nfacct: accounting object `syz1' does not exists
02:44:54 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0xe001]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1909.552310] Bluetooth: hci1: Frame reassembly failed (-84)
02:44:54 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0xf400]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:54 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0xf901]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1909.614864] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1909.653043] xt_nfacct: accounting object `syz1' does not exists
[ 1909.718790] xt_nfacct: accounting object `syz1' does not exists
02:44:54 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000040))
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)

02:44:54 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005"], 0x8c}}, 0x0)

02:44:54 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x40000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1909.880832] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1909.899418] xt_nfacct: accounting object `syz1' does not exists
[ 1909.900575] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1909.925119] xt_nfacct: accounting object `syz1' does not exists
02:44:55 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005"], 0x8c}}, 0x0)

[ 1910.165188] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1910.181949] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1911.449085] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:44:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x101000, 0x0)
write$rfkill(r5, &(0x7f0000000280)={0x0, 0x23, 0x1, 0x0, 0x1}, 0x8)
r6 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000200))
ioctl$KDADDIO(r3, 0x400455c8, 0x9)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x19)

02:44:56 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x1000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:56 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg$sock(r3, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="c374942be223b894dfc44489825162a9ec108fe773f278ce080104a1e3b1587899215bab18255d53dd98452cdd2128c139d4908d8a519ae3f494167d203cb1da2d67e7e736f3fe4ff6fedca7acd0f2d1e9c4f8acfcdab72afe15d985", 0x5c}, {&(0x7f00000000c0)="9bb9a4ca6b1238e5a3eddfcc619140508edecfaab253ef6b58f656e9ff00e621b36576a824b48e7108beda16bf0a413a6c1b453a79e984e1aee4f90fd47bf12031499466cbe8a358f1036006107b54800732ef368e4cf970b4dcc729c22facb87fe8d605", 0x64}, {&(0x7f0000000140)="30937d932ba5998ba7f018a1a1b4581ac20caa0651181d7002b9bd8bac2abf48d2d395e6d2d6159751213bca2fbcb23240519884c2c1fad242dc65b7323c36c13a71b2ba6ea6b53ad96d92a90274717f8eed0cf176d5a830a68f1a7376a42d817db8ac58e5e8002853d7f699122f1eaaa4d5f969c30c4151ec5fc71ccf3e3d13", 0x80}, {&(0x7f00000001c0)="e832811f39bb56a152d8d4dd47ed5a711d215d9a40b112e51362c3f37c4dc2af4dfceb708447425e7d20ecaa9293178a00c7e14b9fe1859dd5cb03ba07abf572dc7ca2d35c4939b585c10a834c254b7312efa5dda9452163967dc215952f81994189ff74b8fb9662d364dca4f0fc45550e4c834d83754e02372f1a45e759e885bc8a9712f480571cf36faa8098b24a0cc5ae080e69ca02cc63932ac68335ccac5bc7e131f1307f7be18ebd5f1fabddd939c7f5c28f66e8223aaa17ae682794a2610a7298e154d88194c5749b025af1", 0xcf}, {&(0x7f00000002c0)="dac07986632ee2af8676988f01cc90cbd24cbfba50e6ff9850646c2620a6a0d30e6ca4ef35a57fc080e71c07ac73c25578c26333607cda746949adf40b211b526471eb967ecb367ebbf896dccc1fb6a7a3affdea9e2374fad6b66b4a55c4b3eee09cc9fce164ba28391107e570afd02da40373611a592e63565454eba08a89599cdf853776a09c6df7fe829c1b4a50ba9c75cf7b2ee55c437a9dccbf2e9673c70460d854b53a2c3f76148a93", 0xac}, {&(0x7f0000000380)="6fddc39e11531eace9830ab03f503f6fbc8b7d33a7e6cdc5182339f2a071252285b9", 0x22}], 0x6, &(0x7f0000000440)=[@txtime={{0x18, 0x1, 0x3d, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x30}}], 0x1, 0x4010)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r4, &(0x7f00000017c0), 0x333, 0x0)

02:44:56 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x2}}}}, 0x100c)

02:44:56 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005"], 0x8c}}, 0x0)

02:44:56 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x2540, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

[ 1911.609183] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 1911.609300] Bluetooth: hci1: command 0xfc11 tx timeout
[ 1911.677625] xt_nfacct: accounting object `syz1' does not exists
[ 1911.695873] xt_nfacct: accounting object `syz1' does not exists
[ 1911.704191] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
02:44:56 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x2000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1911.719569] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
02:44:56 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a"], 0x8c}}, 0x0)

02:44:56 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x3000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1911.777661] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1911.792480] xt_nfacct: accounting object `syz1' does not exists
[ 1911.831198] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
02:44:56 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a"], 0x8c}}, 0x0)

02:44:56 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x6000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:56 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a"], 0x8c}}, 0x0)

[ 1913.848951] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1913.849002] Bluetooth: hci0: command 0xfc11 tx timeout
02:44:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x101000, 0x0)
write$rfkill(r5, &(0x7f0000000280)={0x0, 0x23, 0x1, 0x0, 0x1}, 0x8)
r6 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000200))
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x19)

02:44:58 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a00"], 0x8c}}, 0x0)

02:44:58 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x10020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:44:58 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2d0500, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getpeername$packet(r3, &(0x7f0000000040), &(0x7f00000000c0)=0x14)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r6, &(0x7f00000017c0), 0x333, 0x0)

02:44:58 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x3}}}}, 0x100c)

[ 1913.929052] Bluetooth: hci1: command 0xfc11 tx timeout
[ 1913.939117] Bluetooth: hci1: Entering manufacturer mode failed (-110)
02:45:00 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x112000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:45:00 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a00"], 0x8c}}, 0x0)

02:45:00 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x101000, 0x0)
write$rfkill(r5, &(0x7f0000000280)={0x0, 0x23, 0x1, 0x0, 0x1}, 0x8)
r6 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000200))
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x19)

02:45:00 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x1e020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:00 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000b80)=@ipx, 0x80, 0x0}}], 0x1, 0x12001, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r2)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000b00)=@broute={'broute\x00', 0x20, 0x6, 0xa64, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x18, 0x1, 'veth0_to_bond\x00', 'team_slave_0\x00', 'veth1_macvtap\x00', 'caif0\x00', @remote, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @remote, [0x0, 0xff, 0xcc4163f3b3d7ccd5, 0x0, 0xff], 0xde, 0x146, 0x176, [@mac={{'mac\x00', 0x0, 0x10}, {{@dev={[], 0x2d}, 0x1}}}, @mac={{'mac\x00', 0x0, 0x10}, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x1}}}], [@common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x362c}}}], @common=@STANDARD={'\x00', 0x8, {0x6}}}, {0x3, 0x2b, 0x8917, 'veth1_to_hsr\x00', 'veth0_to_team\x00', 'veth1_to_batadv\x00', 'geneve0\x00', @multicast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x196, 0x196, 0x2c6, [@comment={{'comment\x00', 0x0, 0x100}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x1, 'system_u:object_r:pinentry_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x0, 0x50, 0x88f8, 'team0\x00', 'macsec0\x00', 'ip6_vti0\x00', 'netdevsim0\x00', @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x11e, 0x196, 0x1c6, [@arp={{'arp\x00', 0x0, 0x38}, {{0x300, 0x6, 0x2, @multicast1, 0x0, @remote, 0x0, @empty, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0xff, 0x0, 0x0, 0xff], 0x0, 0xa}}}, @helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'H.245\x00'}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x8000000, 0x5, 0x0, 0x0, 0x0, "b61be62f4e3a38b8c6243fa3ec68ff4130e8011f29b87fde663091a7c65d0838af7a7956e0080f2fb61fcdf0370e44376557dba7da7436f69269612eb210c649"}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x5, 0x60, 0x3, 'veth1_macvtap\x00', 'netdevsim0\x00', '\x00', 'ip_vti0\x00', @multicast, [0x0, 0xff, 0x0, 0x0, 0xff, 0x7f], @remote, [0x0, 0xff, 0xff], 0x6e, 0xde, 0x126, [], [@common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}, @common=@dnat={'dnat\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}], @common=@ERROR={'ERROR\x00', 0x20, {"35e342d4b2d08a22b7a441e668d17d545a877a3d2aab8a0a43664ccd6149"}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x2, [{0x5, 0x0, 0x8, 'veth1_to_batadv\x00', 'veth1_to_bond\x00', 'veth1_to_bridge\x00', 'geneve0\x00', @dev={[], 0x12}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0xde, 0x126, 0x156, [@time={{'time\x00', 0x0, 0x18}, {{0x3, 0x7, 0x43a5, 0xc093, 0xffffffff, 0x5}}}, @pkttype={{'pkttype\x00', 0x0, 0x8}}], [@common=@ERROR={'ERROR\x00', 0x20, {"dd8dc3fe5e42dbae7ce67130625760552d257ebdc2658641f4ad013f2b2c"}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x5, 0x1, 0x80f3, 'veth0\x00', 'vlan0\x00', 'tunl0\x00', 'macvlan0\x00', @multicast, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xf6, 0x126, [], [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x10}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x19a, {0x100000001}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x7}}}}]}]}, 0xadc)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r3, &(0x7f00000017c0), 0x333, 0x0)

02:45:00 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x4}}}}, 0x100c)

[ 1915.928928] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1915.935641] Bluetooth: hci0: command tx timeout
02:45:01 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x20030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:01 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[], 0x101)
sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r3], 0x108}}, 0x840)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0xff)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x600000}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004080)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000340)={0x4, 0xed1a})

[ 1916.025475] nfacct_mt_checkentry: 6 callbacks suppressed
[ 1916.025482] xt_nfacct: accounting object `syz1' does not exists
[ 1916.034927] xt_nfacct: accounting object `syz1' does not exists
[ 1916.041639] nla_parse: 3 callbacks suppressed
[ 1916.041647] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
02:45:01 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a00"], 0x8c}}, 0x0)

02:45:01 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x3e020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1916.158420] xt_nfacct: accounting object `syz1' does not exists
[ 1916.165532] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1916.184849] xt_nfacct: accounting object `syz1' does not exists
02:45:01 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000440))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="0fae0dd0ee0f005a850f91d4360f0ff3b63ef0fe4e00660fe30a66b891d7e4700f23c00f21f8663503000a000f23f82e0f1c570f0f30", 0x36}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x5, 0x9, 0xa1, 0x9, 0x9})

02:45:01 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x3f000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1916.271153] xt_nfacct: accounting object `syz1' does not exists
02:45:01 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x40000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1916.319096] xt_nfacct: accounting object `syz1' does not exists
02:45:01 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x4c010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1916.403104] xt_nfacct: accounting object `syz1' does not exists
02:45:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x101000, 0x0)
write$rfkill(r5, &(0x7f0000000280)={0x0, 0x23, 0x1, 0x0, 0x1}, 0x8)
r6 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000200))
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x19)

[ 1916.485296] Bluetooth: hci0: Frame reassembly failed (-84)
02:45:01 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x5c030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1916.550001] xt_nfacct: accounting object `syz1' does not exists
[ 1916.559875] xt_nfacct: accounting object `syz1' does not exists
02:45:01 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x6a030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1916.646451] xt_nfacct: accounting object `syz1' does not exists
02:45:01 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x6}}}}, 0x100c)

02:45:01 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x10001)
r1 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x101)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2000, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xc0, &(0x7f0000001580)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r5}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, r3, 0x0, 0xa, &(0x7f00000000c0)='/dev/ptmx\x00', r5}, 0x30)

02:45:01 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x7e010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x101000, 0x0)
write$rfkill(r5, &(0x7f0000000280)={0x0, 0x23, 0x1, 0x0, 0x1}, 0x8)
r6 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KDADDIO(r3, 0x400455c8, 0x9)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x19)

02:45:02 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:45:03 executing program 2:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x3d2], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:03 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x80010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:03 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
creat(&(0x7f0000000100)='./file0\x00', 0x84)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x3)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000000)={0x0, 0xd, 0x200, 0x3, 0x72, 0x9, &(0x7f0000000080)="a1366cc4dd203884104a9c00a4a3f724c48642bebc82615cc6d7b78a7fbc9edad2c2d66c8e1070e31af9a62c3f11fbe15498f299fe55cc455aa88924d287f56dcbd0764880fae6c2cd89024eceb581c0cb63092f8fb322359db74dcd93b8feb3592a91a89b1dee665ef53cb22104187dd4f3"})

02:45:03 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x7}}}}, 0x100c)

02:45:03 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002500)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffa888}}}]}}]}, 0x58}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r2=>0x0, 0x4, 0x7, 0x3f, 0x10001, 0x14, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x34}}, @mcast1, 0x7, 0x78d1, 0x100, 0x73c}})
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002500)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffa888}}}]}}]}, 0x58}}, 0x0)
r6 = socket(0x11, 0x800000003, 0x0)
bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002500)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffa888}}}]}}]}, 0x58}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x759e2e1655060818}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1e4, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe8, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x68, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd498e6cd82aa5804}]}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8040}, 0x890)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r9, &(0x7f00000017c0), 0x333, 0x0)

[ 1918.488617] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1918.488641] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:45:03 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x80020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:03 executing program 2:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x3d2], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1918.614992] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1918.637438] sch_tbf: burst 0 is lower than device lo mtu (65550) !
02:45:03 executing program 2:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [0x0, 0x0, 0x3d2], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:03 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x90020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:03 executing program 2:
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000040)={0x3, 'syz1\x00'})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x68000000, &(0x7f0000000480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000140)=0x31, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x1001, @local}, 0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x40000000000002c, 0x0)

[ 1919.002228] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1919.014002] sch_tbf: burst 0 is lower than device lo mtu (65550) !
02:45:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x101000, 0x0)
write$rfkill(r5, &(0x7f0000000280)={0x0, 0x23, 0x1, 0x0, 0x1}, 0x8)
dup(r4)
ioctl$KDADDIO(r3, 0x400455c8, 0x9)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x19)

02:45:04 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x9c010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:04 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x20140, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:45:04 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f0000001480), 0x0, 0x4)

[ 1919.138658] Bluetooth: hci1: Entering manufacturer mode failed (-110)
02:45:04 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x9d030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1919.433824] Bluetooth: hci1: Frame reassembly failed (-84)
02:45:04 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x8}}}}, 0x100c)

02:45:04 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0xa6020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:04 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x6, 0x1000, 0xee, &(0x7f0000000040)="c9d20af8be76bdb99f01a893424125b2036f5f7757a73d852c50a0c3c8bdad9c6aace57340d31231779e958b9fcf8822831fb5b5cf719818fb8862b6213a1cae012fdd8b5de38d733f32226e330a9c91dfdea496ef3231c7d3e735da258a82396c8b85290d05a5c0b3423556fa306ba324c40cee820cc3e3ac3046cfe43ed95e523ede724a08629cc5f9d28722d7e072979e710a35440d9d864218f6cef9c4025f9193e8565b578a57e32f6bf47f67601901fd00baddac993f6ff51fa56e1371d60bc0fdc77d2139ba00edaac9d1e60216c9d2ce875a07553cec5a609bccca783289c40ab33548b49c9f8d8ba74a", 0x34, 0x0, &(0x7f0000000140)="4f4271a068a181754c8853949d4b268fabf1cebc9504a70b1e555bbb4d7a788ca173e156cae5f847e38e97a1bed38011d6b9a01a"})
preadv(r1, &(0x7f00000017c0), 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000200)=0x3)

02:45:04 executing program 2:
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000040)={0x3, 'syz1\x00'})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x68000000, &(0x7f0000000480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000140)=0x31, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x1001, @local}, 0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x40000000000002c, 0x0)

02:45:04 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0xb8020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:04 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00')
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r5)
r6 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
write$binfmt_misc(r6, &(0x7f0000000200)=ANY=[], 0x101)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x2}, @decrefs={0x40046307, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x8, 0x1000000, 0x2e}, @fd={0x66642a85, 0x0, r8}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x3}, @request_death={0x400c630e, 0x3}, @register_looper, @release={0x40046306, 0x1b8}], 0x2d, 0x0, &(0x7f0000000200)="3016ec7f797837e289f5c404a58965acf91278578f60d912df353153e1d8e26437e3b4d9aa895b27c02d97d17b"})

02:45:04 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0xb8030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1921.368445] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:45:06 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xc}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x44}}, 0x4040)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r5, &(0x7f00000017c0), 0x333, 0x0)

02:45:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf)
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x101000, 0x0)
write$rfkill(r4, &(0x7f0000000280)={0x0, 0x23, 0x1, 0x0, 0x1}, 0x8)
ioctl$KDADDIO(r3, 0x400455c8, 0x9)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x19)

[ 1921.448430] Bluetooth: hci1: command 0xfc11 tx timeout
[ 1921.458440] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 1921.511870] Bluetooth: hci1: Frame reassembly failed (-84)
02:45:08 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x6, &(0x7f0000000400)=[{&(0x7f00000000c0)="46199ac1b7101ebdb21444135dc7de91ed5cb2b10d2e88661f9fbdf3086610b4fd39523031830610668a3b8ab0e7619293b889652269ea5c0d5a11bccc5a78ca78945461669b40321a70b08f73ceae91d83bd111c873d225c3bbae787846e70a8b363179ca54b0ff3ec91ec8", 0x6c, 0x4}, {&(0x7f0000000140)="b32d2e8b00f07d4e11ff2c9c078130aa397e201934c288b44ce55b284e0ac2a25974bcb94c223cb130c1f1c97530bd1b1e374b80939d4c16e124e60f533f82865ee8b9c413bd2c8ed794d43b34336afd17c0083e422b280f8069d2e9f954b9ea73cfad84c9b8035061ea6bf65a936505fbb0b8da9267220ebf10", 0x7a, 0x80000000000}, {&(0x7f00000001c0)="38369378b71e6c8d9b2e9a3921aa61c0b024cdce95a7b2f0729c1676a09688e5f9aed9ab4a0cedf7334e72ec18241932", 0x30, 0x4d}, {&(0x7f0000000200)="800da8a2a06aa89f83f076cd4157a42c8868f6bd0f35381476e9fe84c0783e4fc73fa9599be9def66efc699fef1e015193b093c30f843fc884a58e45c48e3a3d76885a06f12ff1dd36189f84599356425a20a1c1615cc11b0f410780548df21bca184525068fe6e7cbf6cb0cc730caf5da44257d1eb9596b53e2d312abba84539583b17ac45c9d298b6521e5124c46ab42e9fc2653a98d7115a3e5790a58e5c2c07cc149a0731e1746174f4d6eb8a1c01bc1d94a0d77f01993c0c3ed21c5247a3dac14b8ac260d340ca03c4360827d3bfb969303f6aa2d644dbe12c81d1d3e875e4f60248a824e1fce6fabe6", 0xec, 0xffffffffffffffe0}, {&(0x7f0000000300)="15c6601c5f29c3d9f8a316a5b6b3d0b4e634df7e93a4d31611de7894b390d80fb27e3e0812531da3b579e1edde8c6216962af610f4", 0x35, 0x5}, {&(0x7f0000000340)="f6ba78599cf23b815a307e800c5d0344bdc24c76a3de8578aef456788c738fa7b9de0c02967b19c0c887e6eb270eccbf420aacbe6a1c2ccb0d61f91f0586702c7ee06639aa57975b6a99bb580806c6eb0d9950447d151acb5a19f9b646ba850e4d052ac39a66485316b84424233c26f5172ab153990bc026a2111611da156dfafae163d536a7cb93", 0x88, 0xdd}], 0x1850000, &(0x7f00000004c0)={[{@umask={'umask', 0x3d, 0x8}}], [{@obj_role={'obj_role', 0x3d, '!})'}}]})

02:45:08 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x9}}}}, 0x100c)

02:45:08 executing program 2:
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000040)={0x3, 'syz1\x00'})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x68000000, &(0x7f0000000480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000140)=0x31, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x1001, @local}, 0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x40000000000002c, 0x0)

02:45:08 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0xd2030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:08 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x57, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r3)
ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @default, r3})
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r4, &(0x7f00000017c0), 0x333, 0x0)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x27, 0x3, 0xc, 0x4})

[ 1923.448319] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:45:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x101000, 0x0)
ioctl$KDADDIO(r3, 0x400455c8, 0x9)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x19)

02:45:08 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0xe0010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1923.528401] Bluetooth: hci1: command 0xfc11 tx timeout
[ 1923.533813] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 1923.544310] nfacct_mt_checkentry: 24 callbacks suppressed
[ 1923.544318] xt_nfacct: accounting object `syz1' does not exists
[ 1923.629081] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1923.740938] xt_nfacct: accounting object `syz1' does not exists
[ 1923.754594] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1923.760433] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1923.774765] xt_nfacct: accounting object `syz1' does not exists
02:45:08 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0xf4000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:08 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0xf9010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1923.866116] xt_nfacct: accounting object `syz1' does not exists
02:45:08 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1923.924867] xt_nfacct: accounting object `syz1' does not exists
02:45:09 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x5, 0x15, "8f99472a1e811dbf9f922c4a83b2b697810d6e"})
r3 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r5)
r6 = socket(0x11, 0x800000003, 0x0)
bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002500)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffa888}}}]}}]}, 0x58}}, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@rand_addr=0x64010102, @multicast2, r7}, 0xc)
preadv(r4, &(0x7f00000017c0), 0x333, 0x0)

02:45:09 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x2]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1924.071967] xt_nfacct: accounting object `syz1' does not exists
[ 1924.174573] xt_nfacct: accounting object `syz1' does not exists
[ 1924.189768] xt_nfacct: accounting object `syz1' does not exists
[ 1924.376640] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1924.390833] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1925.688231] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1925.688262] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1925.719254] Bluetooth: hci0: sending frame failed (-49)
[ 1925.778111] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 1925.778204] Bluetooth: hci1: command 0xfc11 tx timeout
02:45:12 executing program 2:
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000040)={0x3, 'syz1\x00'})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x68000000, &(0x7f0000000480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000140)=0x31, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x1001, @local}, 0x1)
connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x40000000000002c, 0x0)

02:45:12 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x3]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:12 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7f)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)

02:45:12 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x6b}}}}, 0x100c)

02:45:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$KDADDIO(r3, 0x400455c8, 0x9)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x19)

[ 1927.768029] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1927.768078] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1927.847109] xt_nfacct: accounting object `syz1' does not exists
02:45:12 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000000c0)={0xa00000, 0x3, 0x80, r1, 0x0, &(0x7f0000000080)={0x1e5185e, 0x100, [], @p_u8=&(0x7f0000000000)=0x3}})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x6)
r5 = dup(0xffffffffffffffff)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r7}, &(0x7f0000000080)=0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f00000001c0)={r7, 0xfffffffe}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x5, 0x4, 0x7, 0x7fff, r7}, &(0x7f0000000140)=0x10)
r8 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
preadv(r8, &(0x7f0000000440)=[{&(0x7f0000000200)=""/194, 0xc2}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/87, 0x57}], 0x4, 0xfffffffffffffffc)
getrlimit(0x8, &(0x7f0000000180))
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

[ 1927.893097] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1927.900923] xt_nfacct: accounting object `syz1' does not exists
02:45:12 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000080)=""/155, 0x9b}], 0x2)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r3, &(0x7f00000017c0), 0x333, 0x0)

02:45:12 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x4]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:12 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x6]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:13 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0xf4]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:13 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x14c]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:13 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x17e]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:13 executing program 2:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x3]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:13 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0xe}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x1b)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:45:13 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x180]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:13 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x300}}}}, 0x100c)

02:45:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r3, 0x400455c8, 0x9)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x19)

02:45:14 executing program 2:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x3]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:14 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x19c]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:14 executing program 4:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9)

02:45:14 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000040)={0x1})
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r4, &(0x7f00000017c0), 0x333, 0x0)

02:45:14 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x600}}}}, 0x100c)

[ 1929.927835] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1929.927922] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:45:14 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x1e0]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:14 executing program 2:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [0x0, 0x0, 0x0, 0x9c01], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1929.979200] nfacct_mt_checkentry: 13 callbacks suppressed
[ 1929.979208] xt_nfacct: accounting object `syz1' does not exists
[ 1929.994826] xt_nfacct: accounting object `syz1' does not exists
[ 1930.009421] xt_nfacct: accounting object `syz1' does not exists
02:45:15 executing program 2:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [0x0, 0x4c010000], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:15 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x25)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0xa2b, 0x6, 0x20, 0x3ff, 0x5, r3})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

[ 1930.054816] xt_nfacct: accounting object `syz1' does not exists
02:45:15 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002c, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6}])
io_destroy(r3)

02:45:15 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x1f9]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1930.116228] xt_nfacct: accounting object `syz1' does not exists
[ 1930.139947] xt_nfacct: accounting object `syz1' does not exists
[ 1930.146398] xt_nfacct: accounting object `syz1' does not exists
[ 1930.211818] xt_nfacct: accounting object `syz1' does not exists
02:45:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r3, 0x400455c8, 0x9)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x19)

02:45:17 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x210]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:17 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002c, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6}])
io_destroy(r3)

02:45:17 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r4, &(0x7f00000017c0), 0x333, 0x0)

02:45:17 executing program 4:
msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:45:17 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x700}}}}, 0x100c)

[ 1932.087677] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1932.087773] Bluetooth: hci0: command 0xfc11 tx timeout
02:45:17 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x21e]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1932.166524] xt_nfacct: accounting object `syz1' does not exists
02:45:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r3, 0x400455c8, 0x9)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x19)

02:45:17 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002c, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6}])
io_destroy(r3)

02:45:17 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x23e]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1932.264787] xt_nfacct: accounting object `syz1' does not exists
02:45:17 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x280]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:17 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x290]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:17 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x2a6]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:17 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002c, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:17 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x2b8]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:17 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)

02:45:19 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x101201, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000080))

02:45:19 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x300]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r3, 0x400455c8, 0x9)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x19)

02:45:19 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002c, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:19 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x40010000, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
openat$cgroup_subtree(r4, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)

02:45:19 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x900}}}}, 0x100c)

[ 1934.247517] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1934.247574] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:45:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x19)

02:45:19 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x320]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1934.378197] Bluetooth: hci0: Frame reassembly failed (-84)
02:45:19 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002c, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:19 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x35c]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:19 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002c, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:19 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x36a]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:21 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:45:21 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002c, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x8, &(0x7f00000002c0)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:21 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x39d]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x19)

02:45:21 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003980)=[{{&(0x7f0000000140)=@tipc, 0x80, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/194, 0xc2}, {&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000340)=""/3, 0x3}, {&(0x7f0000000380)=""/34, 0x22}, {&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f0000002900)=""/216, 0xd8}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001640)=""/124, 0x7c}, 0xfffffff7}, {{&(0x7f00000016c0)=@un=@abs, 0xfffffffffffffe03, &(0x7f0000002d80)=[{&(0x7f0000002a40)=""/82, 0x52}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/176, 0xb0}, {&(0x7f0000002880)=""/124, 0x7c}, {&(0x7f0000003bc0)=""/208, 0xd0}, {&(0x7f0000002a00)=""/48, 0x30}, {&(0x7f0000003b00)=""/184, 0xb8}, {&(0x7f0000002b00)=""/225, 0xe1}, {&(0x7f0000002c00)=""/182, 0xb6}, {&(0x7f0000002cc0)=""/170, 0xaa}], 0xa}, 0x29}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000003ac0)=""/43, 0x2b}, {&(0x7f0000002e80)=""/121, 0x79}, {&(0x7f0000001740)=""/114, 0x6d}, {&(0x7f0000002f80)=""/206, 0xce}, {&(0x7f0000003080)=""/148, 0x94}], 0x5, &(0x7f00000031c0)=""/237, 0xed}}, {{&(0x7f00000032c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003340)=""/71, 0x47}], 0x1, &(0x7f0000003400)=""/113, 0x71}}, {{&(0x7f0000003480)=@ipx, 0x80, &(0x7f0000003880)=[{&(0x7f0000003500)=""/8, 0x8}, {&(0x7f0000003540)=""/124, 0x7c}, {&(0x7f00000035c0)=""/242, 0xf2}, {&(0x7f00000036c0)=""/208, 0xd0}, {&(0x7f00000037c0)=""/142, 0x8e}], 0x5, &(0x7f0000003900)=""/104, 0x68}, 0xffff}], 0x5, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = dup(0xffffffffffffffff)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r3, &(0x7f00000017c0), 0x333, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000040)={0x1, r3, 0x1})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x101, 0x6, 0x4, 0x2000, 0x81, {0x0, 0x2710}, {0x2, 0xc, 0x3f, 0x1f, 0x3, 0x1, "05555a6e"}, 0x6, 0x4, @fd=r5, 0x7f, 0x0, r7})

02:45:21 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xfea}}}}, 0x100c)

[ 1936.407436] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1936.407495] Bluetooth: hci0: command 0xfc11 tx timeout
02:45:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="99fdffff130a05000000000000800000050000070900010073797a31000000000900020073797a300000000008000340000000020000010073797a30000000000c00064000000000000000020800034000000002"], 0x7a}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x19)

[ 1936.493998] nfacct_mt_checkentry: 17 callbacks suppressed
[ 1936.494006] xt_nfacct: accounting object `syz1' does not exists
[ 1936.520371] xt_nfacct: accounting object `syz1' does not exists
02:45:21 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x3b8]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1936.551419] sp0: Synchronizing with TNC
02:45:21 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x3d2]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:21 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002c, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x8, &(0x7f00000002c0)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 1936.593137] xt_nfacct: accounting object `syz1' does not exists
[ 1936.640223] xt_nfacct: accounting object `syz1' does not exists
[ 1936.656589] xt_nfacct: accounting object `syz1' does not exists
02:45:21 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x600]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:21 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x1002]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1936.731856] xt_nfacct: accounting object `syz1' does not exists
[ 1936.766748] xt_nfacct: accounting object `syz1' does not exists
[ 1936.963040] sp0: Synchronizing with TNC
02:45:21 executing program 4:
getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'os2.', '/dev/ptmx\x00'}, &(0x7f0000000100)=""/48, 0x30)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:45:21 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x1e02]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:21 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002c, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x8, &(0x7f00000002c0)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000180))
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r3, 0x400455c8, 0x9)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x19)

02:45:21 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x3, 0xfffffff6, 0x93, 0x4, 0x3, "eeadf671eccc289f1b3ae67d3af56d4ff31e76"})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r3, &(0x7f00000017c0), 0x333, 0x0)

02:45:21 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x6b00}}}}, 0x100c)

02:45:22 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x2003]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1937.112854] xt_nfacct: accounting object `syz1' does not exists
[ 1937.127748] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1937.134303] xt_nfacct: accounting object `syz1' does not exists
02:45:22 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002c, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:22 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x3e02]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1937.252036] xt_nfacct: accounting object `syz1' does not exists
02:45:22 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002c, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:22 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x3f00]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:22 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x4000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1939.207253] Bluetooth: hci1: command 0xfc11 tx timeout
[ 1939.207288] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1939.212748] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 1939.219247] Bluetooth: hci0: command tx timeout
02:45:24 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x40000000000007)

02:45:24 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002c, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:24 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x4c01]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:24 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f0000000040)={0x6, 0x2, [{0x4, 0x0, 0xff}, {0x8f6c, 0x0, 0x4}, {0x0, 0x0, 0x6}, {0x4, 0x0, 0xf5ad}, {0x7, 0x0, 0x401}, {0x3, 0x0, 0x7}]})

02:45:24 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xea0f}}}}, 0x100c)

02:45:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$vsock_stream(0x28, 0x1, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

02:45:24 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x5c03]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1939.371603] Bluetooth: hci0: Frame reassembly failed (-84)
02:45:24 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:24 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x6a03]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:24 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:24 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x7e01]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:24 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x8002]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:24 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x9002]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:24 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x9c01]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:24 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:24 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(0xffffffffffffffff)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r5}, &(0x7f0000000080)=0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r5, 0xfffffffe}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={r5, 0x7ff}, &(0x7f0000000080)=0x8)
r6 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r7, &(0x7f00000017c0), 0x333, 0x0)

02:45:25 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xffff}}}}, 0x100c)

02:45:26 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

02:45:26 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x9d03]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:26 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:26 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0x101)
recvmmsg(r0, &(0x7f0000003140), 0x0, 0x143, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = gettid()
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x25)
ptrace$setopts(0x4206, r4, 0xffffffff, 0x0)
tkill(r3, 0x25)
r5 = syz_open_procfs(r3, &(0x7f0000000180)='net/protocols\x00')
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = dup(r6)
setns(r7, 0x0)
preadv(r5, &(0x7f00000017c0), 0x333, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0xf, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x2c}}, 0x20040000)

02:45:26 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c)

[ 1941.447074] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1941.447182] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:45:26 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0xa602]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1941.581433] nfacct_mt_checkentry: 19 callbacks suppressed
[ 1941.581441] xt_nfacct: accounting object `syz1' does not exists
[ 1941.602484] xt_nfacct: accounting object `syz1' does not exists
[ 1941.619751] Bluetooth: hci0: Frame reassembly failed (-84)
02:45:26 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x80000001, 0x1f, 0x8, 0x1})
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)

02:45:26 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:26 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0xb802]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1941.688667] xt_nfacct: accounting object `syz1' does not exists
[ 1941.717118] xt_nfacct: accounting object `syz1' does not exists
02:45:26 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0xb803]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1941.806799] xt_nfacct: accounting object `syz1' does not exists
[ 1941.823510] xt_nfacct: accounting object `syz1' does not exists
02:45:26 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:26 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0xd203]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1941.937614] xt_nfacct: accounting object `syz1' does not exists
[ 1942.034869] xt_nfacct: accounting object `syz1' does not exists
02:45:28 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0xe001]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:28 executing program 2:
socket$packet(0x11, 0x2, 0x300)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:28 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x21a882, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x25)
r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/netfilter\x00')
preadv(r3, &(0x7f00000017c0), 0x333, 0x0)

02:45:28 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0)
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000001080)={{0x0, 0x0, 0x80}})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000003100)={0x0, 0x80000, <r6=>r5})
fcntl$addseals(r6, 0x409, 0x3)
ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000080))
ioctl$IMGETCOUNT(r5, 0x80044943, &(0x7f0000003140))
ioctl$KDADDIO(r1, 0x400455c8, 0x9)

02:45:28 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

02:45:28 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0x100c)

[ 1943.686881] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1943.686934] Bluetooth: hci0: command 0xfc11 tx timeout
02:45:28 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0xf400]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1943.814254] xt_nfacct: accounting object `syz1' does not exists
02:45:28 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:28 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0xf901]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1943.943371] xt_nfacct: accounting object `syz1' does not exists
02:45:28 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:29 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x40000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:29 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x1000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:29 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:29 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x2000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:29 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x3000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1945.846714] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1945.846720] Bluetooth: hci1: command 0xfc11 tx timeout
[ 1945.846747] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1945.853539] Bluetooth: hci1: Entering manufacturer mode failed (-110)
02:45:32 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x6000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:32 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:32 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x3}}}}, 0x100c)

02:45:32 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x400680, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
r2 = gettid()
ptrace$peekuser(0x3, r2, 0x9)
ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040), 0x4)
preadv(r3, &(0x7f00000017c0), 0x333, 0x0)

02:45:32 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x290143, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = geteuid()
ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000080)={0x3, @bcast, r3})
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:45:32 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

[ 1947.926614] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1947.926620] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1948.013135] nfacct_mt_checkentry: 10 callbacks suppressed
[ 1948.013144] xt_nfacct: accounting object `syz1' does not exists
[ 1948.036654] xt_nfacct: accounting object `syz1' does not exists
02:45:33 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getpeername$tipc(r2, &(0x7f0000000000)=@id, &(0x7f0000000080)=0x10)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
sendfile(r0, r2, &(0x7f00000000c0)=0x9, 0x2)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:45:33 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x10020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1948.060462] Bluetooth: hci0: Frame reassembly failed (-84)
02:45:33 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xffffffffffffffab, 0x0}}], 0x1, 0x40010001, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x4}, 0xfffffffffffffffe)
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)

02:45:33 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:33 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x1e020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1948.147899] xt_nfacct: accounting object `syz1' does not exists
02:45:33 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x20030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1948.209206] xt_nfacct: accounting object `syz1' does not exists
02:45:33 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 1948.268851] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1948.276287] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1948.301223] xt_nfacct: accounting object `syz1' does not exists
02:45:33 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x3e020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1948.317511] xt_nfacct: accounting object `syz1' does not exists
[ 1948.393768] xt_nfacct: accounting object `syz1' does not exists
02:45:33 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x4}}}}, 0x100c)

02:45:33 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x3f000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:33 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 1948.814284] xt_nfacct: accounting object `syz1' does not exists
[ 1948.822409] xt_nfacct: accounting object `syz1' does not exists
02:45:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

[ 1950.086410] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1950.086416] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1950.139140] Bluetooth: hci0: Frame reassembly failed (-84)
02:45:35 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x90080, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:45:35 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = dup(0xffffffffffffffff)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r7}, &(0x7f0000000080)=0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r7, 0xfffffffe}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000040)={r7, 0x1, 0x7}, 0x10)

02:45:35 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x40000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:35 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:35 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x6}}}}, 0x100c)

[ 1950.326395] Bluetooth: hci1: command 0xfc11 tx timeout
[ 1950.326419] Bluetooth: hci1: Entering manufacturer mode failed (-110)
02:45:35 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x4c010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:35 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x9f5, 0x0, 0x5}]})
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

[ 1950.421389] xt_nfacct: accounting object `syz1' does not exists
02:45:35 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x5c030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:35 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:35 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x6a030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1950.601541] Bluetooth: hci1: sending frame failed (-49)
02:45:35 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:37 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:37 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x7e010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:37 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x80000, 0x0)

02:45:37 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x7}}}}, 0x100c)

02:45:37 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

[ 1952.166340] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1952.166345] Bluetooth: hci0: command 0xfc11 tx timeout
02:45:37 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x80010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:37 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x80020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1952.271529] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1952.656251] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 1952.662943] Bluetooth: hci1: command tx timeout
[ 1954.326190] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1954.326442] Bluetooth: hci0: command 0xfc11 tx timeout
02:45:39 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
msgget(0x2, 0x492)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8902, 0x0)
write$P9_RREAD(r1, &(0x7f0000000080)={0x13, 0x75, 0x2, {0x8, "a7d8dbd5646dfae3"}}, 0x13)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
prctl$PR_GET_FPEMU(0x9, &(0x7f00000000c0))
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:45:39 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:39 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x90020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:39 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe)

02:45:39 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x8}}}}, 0x100c)

02:45:39 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

[ 1954.726114] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 1954.726120] Bluetooth: hci1: command 0xfc11 tx timeout
[ 1954.810407] nfacct_mt_checkentry: 13 callbacks suppressed
[ 1954.810414] xt_nfacct: accounting object `syz1' does not exists
[ 1954.827411] Bluetooth: hci0: Frame reassembly failed (-84)
02:45:39 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000040)={0xd11, {{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x0, 0x3, [{{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x210)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r3, &(0x7f00000017c0), 0x333, 0x0)

02:45:39 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:39 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x9c010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1954.850838] xt_nfacct: accounting object `syz1' does not exists
02:45:39 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x9d030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1954.959506] xt_nfacct: accounting object `syz1' does not exists
02:45:39 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x0, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:40 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0xa6020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1955.057816] xt_nfacct: accounting object `syz1' does not exists
[ 1955.074409] xt_nfacct: accounting object `syz1' does not exists
[ 1955.143711] xt_nfacct: accounting object `syz1' does not exists
[ 1955.162064] xt_nfacct: accounting object `syz1' does not exists
[ 1956.886042] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1956.891429] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1956.965949] Bluetooth: hci1: command 0xfc11 tx timeout
[ 1956.965977] Bluetooth: hci1: Entering manufacturer mode failed (-110)
02:45:44 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0xb8020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:44 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x0, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:44 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x1, 0x40)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x9}, 0x1)
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r3, &(0x7f00000017c0), 0x333, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4f000000b77ad18627bc434094af14d3f326197ccad1c24bceba234db6a2135963c6ff6ed8ab3de8f29b6a9824e339f909cedc1094e4d1758c03f5072547f19ca3332e45dcc8a69f6ddbfd2b364f5f9f5ff9753562d22978acb032a75c424ec8444bc278a747cb134c241b21260442cb128a16542d5df6", @ANYRES16=r8, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014001f00ff000000000000000000ffffffffffff08000a000000000006000200000000001400200000000000000000000000ffff00001d0006001b0000da"], 0x64}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r8, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xe3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x4000)
r9 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r9, 0x408c5333, &(0x7f0000000040)={0x4, 0x80000001, 0x0, 'queue1\x00', 0x4})

02:45:44 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x9}}}}, 0x100c)

02:45:44 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

[ 1959.045827] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1959.045850] Bluetooth: hci0: command 0xfc11 tx timeout
02:45:44 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="792847f8ef22312f0a8d20eb400f77596e144f2ad6c87fc7c072825c0d00002fd369eaaf07f8e2574c862e3441abca60944ec4a28c367e14f5d71e45bd9cae8fa6036bae8adbbb8c996ca873d3401549d985b70a78af17d76e9a80c3e0f0bf1d355c4e4f8a92f69df0510eca4f9a8fcc0f9a87812ba65bee802df726bc38237922f37fb1d8ea3da20a2dbe912b35e3f025653eca499d0bd27893802fe68c9be1b902777b0e9acea28a87daffbb8c6ce5e2c9e4a61f6b829b8bbaddd3af62830161b41f", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000020000180060001000a00000008000500000000000a0006006c626c6372000000"], 0x34}, 0x1, 0xa00000000000000}, 0x0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, r3, 0x522, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff144a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x52}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9bfb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xff}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xec}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4080}, 0xc011)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r4, 0x400455c8, 0x9)

02:45:44 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0xb8030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1959.111218] xt_nfacct: accounting object `syz1' does not exists
[ 1959.133566] xt_nfacct: accounting object `syz1' does not exists
[ 1959.142406] Bluetooth: hci0: Frame reassembly failed (-84)
02:45:44 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x0, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:44 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0xd2030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1959.209564] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1959.249330] xt_nfacct: accounting object `syz1' does not exists
02:45:44 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0x80, 0x0}}], 0x1, 0x40000040, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)

02:45:44 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:44 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:44 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0xe0010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:44 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:44 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0xf4000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:44 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x6b}}}}, 0x100c)

02:45:46 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0xf9010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1961.205632] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:45:46 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x300}}}}, 0x100c)

02:45:46 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

02:45:46 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000040)=""/106}, {&(0x7f00000000c0)=""/232}, {&(0x7f00000004c0)=""/69, 0x8}, {&(0x7f0000000200)=""/177}, {&(0x7f00000002c0)=""/187, 0x14}, {&(0x7f0000000380)=""/180}], 0xb, 0x4)
r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000001b80)='asymmetric\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r2})
r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, r2)
r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000001b80)='asymmetric\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r4})
keyctl$reject(0x13, r3, 0x7fff, 0x7e, r4)

02:45:46 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0))
io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 1961.295656] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 1961.295708] Bluetooth: hci1: command 0xfc11 tx timeout
02:45:46 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:46 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18b9d2000000101400083b40023ea1c6893308004a0002000000"], 0x18}, 0x1, 0x0, 0x0, 0x4000005}, 0x400dc)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2)
syslog(0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
recvfrom$llc(r6, &(0x7f0000000100)=""/75, 0x4b, 0x10122, &(0x7f0000000180)={0x1a, 0x304, 0xff, 0xff, 0x20, 0x80, @dev={[], 0x21}}, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r7 = syz_open_procfs(0x0, &(0x7f0000000200)='timerslack_ns\x00')
preadv(r7, &(0x7f00000017c0), 0x333, 0x0)

02:45:46 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x2]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1961.399516] nfacct_mt_checkentry: 7 callbacks suppressed
[ 1961.399522] xt_nfacct: accounting object `syz1' does not exists
[ 1961.412489] Bluetooth: hci0: sending frame failed (-49)
[ 1961.425146] xt_nfacct: accounting object `syz1' does not exists
02:45:46 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0))
io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:45:46 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x3]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:46 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x4]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1961.499669] xt_nfacct: accounting object `syz1' does not exists
[ 1961.535354] xt_nfacct: accounting object `syz1' does not exists
02:45:46 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0))
io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 1961.593847] xt_nfacct: accounting object `syz1' does not exists
[ 1961.625719] xt_nfacct: accounting object `syz1' does not exists
02:45:46 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x6]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1961.740691] xt_nfacct: accounting object `syz1' does not exists
02:45:47 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x600}}}}, 0x100c)

02:45:48 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0xf4]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:48 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)

02:45:48 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x700}}}}, 0x100c)

02:45:48 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

02:45:48 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x25)
ptrace$pokeuser(0x6, r1, 0x2, 0x401)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(0x0)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x70, r4, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000804}, 0x0)
bind$rxrpc(r3, &(0x7f0000000240)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010101}}, 0x24)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="000026bd7000fcdbdf25010000001400060076657468315f6d6163767461700000002700070073797374656d5f753a6f626a6563745f723a64686370635f73746174655f743a733000002a00070073797374646d5e753a6f626a657b745f723a646d696465636f646d72657865635f743a73300000000500010004000000080004007f000001"], 0x8c}, 0x1, 0x0, 0x0, 0x880}, 0x240008d1)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:45:48 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0xff)
recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x10140, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00')
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000180)=@get={0x1, &(0x7f0000001480)=""/4096, 0xf698})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002500)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffa888}, 0x0, 0x2}}]}}]}, 0x58}}, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
r9 = dup(r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r10, &(0x7f00000017c0), 0x333, 0x0)

[ 1963.445594] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:45:48 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x14c]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:48 executing program 4:
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

[ 1963.508007] xt_nfacct: accounting object `syz1' does not exists
02:45:48 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)

[ 1963.566617] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1963.572438] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1963.604937] xt_nfacct: accounting object `syz1' does not exists
02:45:48 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x17e]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1963.631244] xt_nfacct: accounting object `syz1' does not exists
02:45:48 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x180]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:48 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)

02:45:48 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x19c]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:48 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x1e0]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:50 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

02:45:50 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000340))

02:45:50 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x1f9]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:50 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r3)
close(r3)
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)

02:45:50 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x900}}}}, 0x100c)

[ 1965.605348] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1965.605387] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1965.692786] Bluetooth: hci1: command 0xfc11 tx timeout
[ 1965.698178] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 1965.706872] Bluetooth: hci0: Frame reassembly failed (-84)
02:45:50 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x210]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:50 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000340))

02:45:50 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
accept4$unix(r1, &(0x7f00000000c0), &(0x7f0000000000)=0x6e, 0x800)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x680c0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)

02:45:50 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x21e]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:50 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000340))

02:45:50 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x23e]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:50 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x280]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:52 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

02:45:52 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000))
r1 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r1)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x8, &(0x7f0000000080)=""/131)

02:45:52 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x290]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:52 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[0x0])

02:45:52 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
r3 = dup(0xffffffffffffffff)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r5}, &(0x7f0000000080)=0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r5, 0xfffffffe}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r5, 0x10000}, 0x8)
preadv(r2, &(0x7f00000017c0), 0x333, 0x0)

02:45:52 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0xfea}}}}, 0x100c)

[ 1967.765203] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1967.765209] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:45:52 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x2a6]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1967.851945] nfacct_mt_checkentry: 16 callbacks suppressed
[ 1967.851952] xt_nfacct: accounting object `syz1' does not exists
[ 1967.864164] Bluetooth: hci1: Frame reassembly failed (-84)
02:45:52 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[0x0])

02:45:52 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x2b8]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1967.968590] xt_nfacct: accounting object `syz1' does not exists
02:45:52 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x300]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1968.011449] xt_nfacct: accounting object `syz1' does not exists
02:45:53 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x320]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:53 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[0x0])

[ 1968.056923] xt_nfacct: accounting object `syz1' does not exists
[ 1968.130544] xt_nfacct: accounting object `syz1' does not exists
[ 1968.142639] xt_nfacct: accounting object `syz1' does not exists
[ 1969.925113] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 1969.925194] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1969.932846] Bluetooth: hci1: command tx timeout
02:45:54 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 1969.968694] Bluetooth: hci0: Frame reassembly failed (-84)
02:45:56 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$KDSETLED(r0, 0x4b32, 0x81e9)
getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x20, 0x40, 0x81, 0x1, 0x0, 0x2, 0x48803, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, @perf_config_ext={0x0, 0x7ff}, 0x4004, 0x7e, 0x7f, 0x0, 0x5, 0x36e0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
write$6lowpan_control(r1, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:10 2', 0x1b)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0)

02:45:56 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x6b00}}}}, 0x100c)

02:45:56 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

02:45:56 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
socket(0x15, 0x5, 0x0)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x2716, &(0x7f0000019580)=""/102393, &(0x7f0000000000)=0x18ff9)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r3, &(0x7f00000017c0), 0x333, 0x0)

02:45:56 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x35c]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:56 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 1972.004992] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1972.011707] Bluetooth: hci0: command tx timeout
[ 1972.090145] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1972.106054] xt_nfacct: accounting object `syz1' does not exists
02:45:57 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x36a]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1972.142208] xt_nfacct: accounting object `syz1' does not exists
[ 1972.151466] Bluetooth: hci1: Frame reassembly failed (-84)
02:45:57 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x39d]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:57 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x3b8]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1972.208731] xt_nfacct: accounting object `syz1' does not exists
[ 1972.241235] xt_nfacct: accounting object `syz1' does not exists
02:45:57 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x3d2]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:57 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x600]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:45:57 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x1002]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1974.174740] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 1974.174772] Bluetooth: hci1: command 0xfc11 tx timeout
[ 1974.181568] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1974.189467] Bluetooth: hci0: command 0xfc11 tx timeout
02:46:01 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x28080, 0x0)
ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080))

02:46:01 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x1e02]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:01 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'memory'}, {0x2d, 'cpu'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}]}, 0x17)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
connect$x25(r4, &(0x7f00000000c0)={0x9, @remote={[], 0x0}}, 0x12)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r6, &(0x7f00000017c0), 0x333, 0x0)

02:46:01 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0xea0f}}}}, 0x100c)

02:46:01 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:46:01 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

[ 1976.244631] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1976.244657] Bluetooth: hci0: command 0xfc11 tx timeout
02:46:01 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x2003]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1976.323431] nfacct_mt_checkentry: 8 callbacks suppressed
[ 1976.323439] xt_nfacct: accounting object `syz1' does not exists
[ 1976.345403] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1976.351767] xt_nfacct: accounting object `syz1' does not exists
02:46:01 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x3e02]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1976.438512] xt_nfacct: accounting object `syz1' does not exists
02:46:01 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x3f00]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:01 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x4000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1976.498513] xt_nfacct: accounting object `syz1' does not exists
[ 1976.536781] xt_nfacct: accounting object `syz1' does not exists
02:46:01 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x4c01]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1976.613952] xt_nfacct: accounting object `syz1' does not exists
[ 1976.623504] xt_nfacct: accounting object `syz1' does not exists
02:46:01 executing program 3:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x1e0]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1976.679766] xt_nfacct: accounting object `syz1' does not exists
[ 1976.702826] xt_nfacct: accounting object `syz1' does not exists
[ 1978.404497] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 1978.404532] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1978.415608] Bluetooth: hci1: command tx timeout
[ 1978.421113] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:46:05 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x80000021)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:46:05 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x5c03]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:05 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

02:46:05 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}}, 0x100c)

02:46:05 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:46:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

[ 1980.484332] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1980.491008] Bluetooth: hci0: command tx timeout
02:46:05 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x6a03]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1980.560567] xt_nfacct: accounting object `syz1' does not exists
[ 1980.592389] Bluetooth: hci0: Frame reassembly failed (-84)
02:46:05 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000000))

02:46:05 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:46:05 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x7e01]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:05 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x8002]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:05 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:46:05 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x9002]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:05 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x9c01]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:07 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

02:46:07 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, 0x0}])

02:46:07 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x9d03]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1982.644206] Bluetooth: hci1: command 0xfc11 tx timeout
[ 1982.649597] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 1982.649614] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1982.659143] Bluetooth: hci0: command 0xfc11 tx timeout
02:46:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

02:46:07 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x40c400, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000300))
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00')
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000f80)=ANY=[@ANYBLOB="0000000028cf25ff58fc95468d310bf437755780ad677191100aa4e0b4b22a86e49f4cd698fb40f472d9e8953b38bc8a7974893ec14723f06c8474fb903ce7411c42c54e82f36cc12dfa2de8e7fcace1d692819e9941e54c8f7af6c939b54d3450c860549d4b9200230cbfcde4c6d8cee29ebf11eb3a895e919b59ff7b14db7eae4a767ca533b37c44", @ANYRES16=r4, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x40002}, 0x80)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x180, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0xc665}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8bdf}, {0x6, 0x16, 0xaf5}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x5}, {0x5}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3}, {0x5}}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:46:07 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}}, 0x100c)

[ 1982.731617] nfacct_mt_checkentry: 11 callbacks suppressed
[ 1982.731624] xt_nfacct: accounting object `syz1' does not exists
[ 1982.753277] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1982.774342] xt_nfacct: accounting object `syz1' does not exists
02:46:07 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0xa602]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:07 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, 0x0}])

[ 1982.852774] Bluetooth: hci1: sending frame failed (-49)
02:46:07 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0xb802]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1982.896470] xt_nfacct: accounting object `syz1' does not exists
[ 1982.911117] xt_nfacct: accounting object `syz1' does not exists
02:46:07 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0xb803]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:07 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0xd203]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1982.950372] xt_nfacct: accounting object `syz1' does not exists
[ 1982.988508] xt_nfacct: accounting object `syz1' does not exists
02:46:07 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, 0x0}])

[ 1983.032242] xt_nfacct: accounting object `syz1' does not exists
02:46:09 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

02:46:09 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0xe001]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:09 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)}])

[ 1984.804063] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1984.849871] xt_nfacct: accounting object `syz1' does not exists
[ 1984.873886] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1984.884759] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 1984.891446] Bluetooth: hci2: Entering manufacturer mode failed (-110)
02:46:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

[ 1984.934825] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1984.973014] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1984.980941] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1986.883872] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1986.883944] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:46:11 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0xf400]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:11 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x3000000}}}}, 0x100c)

02:46:11 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)}])

02:46:11 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64)

02:46:11 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

[ 1986.963916] Bluetooth: hci1: Entering manufacturer mode failed (-110)
02:46:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

02:46:12 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0xf901]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1987.025919] xt_nfacct: accounting object `syz1' does not exists
[ 1987.043934] Bluetooth: hci2: Entering manufacturer mode failed (-110)
[ 1987.050665] Bluetooth: hci2: command tx timeout
02:46:12 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)}])

02:46:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

02:46:12 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x40000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1987.143376] xt_nfacct: accounting object `syz1' does not exists
02:46:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

[ 1987.202164] Bluetooth: hci1: Frame reassembly failed (-84)
02:46:12 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x1000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:12 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ff", 0x3}])

02:46:12 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x4000000}}}}, 0x100c)

02:46:12 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x2000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1987.751814] nfacct_mt_checkentry: 4 callbacks suppressed
[ 1987.751821] xt_nfacct: accounting object `syz1' does not exists
[ 1989.133766] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1989.140446] Bluetooth: hci0: command tx timeout
[ 1989.203835] Bluetooth: hci1: command 0xfc11 tx timeout
[ 1989.213807] Bluetooth: hci1: Entering manufacturer mode failed (-110)
02:46:16 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:46:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r1, 0x400455c8, 0x9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

02:46:16 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ff", 0x3}])

02:46:16 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x3000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:16 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x6000000}}}}, 0x100c)

02:46:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

[ 1991.203687] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1991.203693] Bluetooth: hci0: command 0xfc11 tx timeout
02:46:16 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap$fb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000c, 0x20010, r2, 0x8b000)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:46:16 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x6000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1991.271085] xt_nfacct: accounting object `syz1' does not exists
[ 1991.291417] Bluetooth: hci0: Frame reassembly failed (-84)
02:46:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r1, 0x400455c8, 0x9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

02:46:16 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ff", 0x3}])

[ 1991.376503] Bluetooth: hci1: Frame reassembly failed (-84)
02:46:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r1, 0x400455c8, 0x9)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)

02:46:16 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x10020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1991.471957] xt_nfacct: accounting object `syz1' does not exists
02:46:16 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff00", 0x5}])

02:46:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x19)

[ 1991.544820] xt_nfacct: accounting object `syz1' does not exists
[ 1991.584032] xt_nfacct: accounting object `syz1' does not exists
02:46:16 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x1e020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x19)

[ 1991.698428] xt_nfacct: accounting object `syz1' does not exists
[ 1991.711504] xt_nfacct: accounting object `syz1' does not exists
02:46:16 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x7000000}}}}, 0x100c)

02:46:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

[ 1993.363448] Bluetooth: hci0: command 0xfc11 tx timeout
[ 1993.363454] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1993.413988] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1993.443732] Bluetooth: hci1: command 0xfc11 tx timeout
[ 1993.445577] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 1995.443297] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1995.443314] Bluetooth: hci0: command 0xfc11 tx timeout
02:46:20 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000))
r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080))
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0x8, 0x3, 0x7, 0x1, 0x2, "5dce6d30eed8ace0990dced61013d6442e9a82", 0x8, 0x3f})
sendto$l2tp(r1, &(0x7f00000000c0)="45a072272a23d0e77a9a83a579ae4f3557148a4d2aa471e01a0dc89380d4f8b00d23ae17bf4a0b8e33", 0x29, 0x8055, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:46:20 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x20030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:20 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff00", 0x5}])

02:46:20 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x19)

02:46:20 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x8000000}}}}, 0x100c)

02:46:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

[ 1995.523355] Bluetooth: hci1: command 0xfc11 tx timeout
[ 1995.533420] Bluetooth: hci1: Entering manufacturer mode failed (-110)
02:46:20 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x3e020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1995.577687] xt_nfacct: accounting object `syz1' does not exists
02:46:20 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

02:46:20 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff00", 0x5}])

02:46:20 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x3f000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1995.708615] xt_nfacct: accounting object `syz1' does not exists
[ 1995.729921] xt_nfacct: accounting object `syz1' does not exists
02:46:20 executing program 2:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x3b8]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1995.884332] xt_nfacct: accounting object `syz1' does not exists
[ 1996.037075] xt_nfacct: accounting object `syz1' does not exists
02:46:21 executing program 4:
ioperm(0x100000007, 0x1, 0x80000001)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000000)={0x8, 0x2, 0x86ed, 0xfffffffd, 0x10, 0x100000001})
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:46:21 executing program 2:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x3b8]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:21 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x40000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

02:46:21 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x9000000}}}}, 0x100c)

02:46:21 executing program 2:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x3b8]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1996.942792] xt_nfacct: accounting object `syz1' does not exists
02:46:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

[ 1996.987579] xt_nfacct: accounting object `syz1' does not exists
[ 1997.007497] xt_nfacct: accounting object `syz1' does not exists
[ 1997.020284] xt_nfacct: accounting object `syz1' does not exists
02:46:22 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:22 executing program 2 (fault-call:3 fault-nth:0):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:46:22 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x4c010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

02:46:22 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x191800, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KDADDIO(r6, 0x400455c8, 0x80000001)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000000)={0x3, 0xfff})

02:46:22 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x6b000000}}}}, 0x100c)

[ 1997.843223] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 1997.849910] Bluetooth: hci0: command tx timeout
02:46:22 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x5c030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1997.895493] xt_nfacct: accounting object `syz1' does not exists
[ 1997.932646] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1997.938992] FAULT_INJECTION: forcing a failure.
02:46:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

[ 1997.938992] name failslab, interval 1, probability 0, space 0, times 0
[ 1998.004123] CPU: 0 PID: 24030 Comm: syz-executor.2 Not tainted 4.19.133-syzkaller #0
[ 1998.012044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1998.021399] Call Trace:
[ 1998.024020]  dump_stack+0x1fc/0x2fe
[ 1998.027656]  should_fail.cold+0xa/0x14
[ 1998.031548]  ? setup_fault_attr+0x200/0x200
[ 1998.035874]  ? lock_acquire+0x170/0x3c0
[ 1998.039858]  __should_failslab+0x115/0x180
[ 1998.044097]  should_failslab+0x5/0xf
[ 1998.047813]  kmem_cache_alloc+0x277/0x370
[ 1998.051966]  io_submit_one+0x11e/0x1fe0
[ 1998.055952]  ? HARDIRQ_verbose+0x10/0x10
[ 1998.060016]  ? lock_downgrade+0x720/0x720
[ 1998.064165]  ? aio_read+0x420/0x420
[ 1998.067791]  ? __might_fault+0x11f/0x1d0
[ 1998.071877]  __se_sys_io_submit+0x11b/0x460
[ 1998.076205]  ? io_submit_one+0x1fe0/0x1fe0
[ 1998.080442]  ? ksys_write+0x1c8/0x2a0
[ 1998.084255]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1998.089009]  ? trace_hardirqs_off_caller+0x69/0x210
[ 1998.094030]  ? do_syscall_64+0x21/0x620
[ 1998.098010]  do_syscall_64+0xf9/0x620
[ 1998.101816]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1998.107002] RIP: 0033:0x45c1d9
[ 1998.110193] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1998.129097] RSP: 002b:00007f3122b32c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1998.136805] RAX: ffffffffffffffda RBX: 00000000000081c0 RCX: 000000000045c1d9
[ 1998.144071] RDX: 0000000020000340 RSI: 0000000000000002 RDI: 00007f3122b12000
02:46:23 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x6a030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 1998.151335] RBP: 00007f3122b32ca0 R08: 0000000000000000 R09: 0000000000000000
[ 1998.158600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1998.165866] R13: 00007ffefe101d9f R14: 00007f3122b339c0 R15: 000000000078bf0c
02:46:23 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x7e010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:23 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x80010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:23 executing program 2 (fault-call:3 fault-nth:1):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 1998.345130] FAULT_INJECTION: forcing a failure.
[ 1998.345130] name failslab, interval 1, probability 0, space 0, times 0
[ 1998.356915] CPU: 1 PID: 24069 Comm: syz-executor.2 Not tainted 4.19.133-syzkaller #0
[ 1998.364818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1998.374175] Call Trace:
[ 1998.376781]  dump_stack+0x1fc/0x2fe
[ 1998.380427]  should_fail.cold+0xa/0x14
[ 1998.384332]  ? setup_fault_attr+0x200/0x200
[ 1998.388674]  ? lock_acquire+0x170/0x3c0
[ 1998.392668]  __should_failslab+0x115/0x180
[ 1998.396911]  should_failslab+0x5/0xf
[ 1998.400631]  __kmalloc+0x2ab/0x3c0
[ 1998.404177]  ? hci_sock_sendmsg+0x872/0x1ec0
[ 1998.408573]  hci_sock_sendmsg+0x872/0x1ec0
[ 1998.412792]  ? inode_has_perm+0x17d/0x210
[ 1998.416932]  ? hci_sock_ioctl+0x7a0/0x7a0
[ 1998.421087]  ? hci_sock_ioctl+0x7a0/0x7a0
[ 1998.425233]  sock_sendmsg+0xc3/0x120
[ 1998.428931]  sock_write_iter+0x287/0x3c0
[ 1998.432993]  ? sock_sendmsg+0x120/0x120
[ 1998.436961]  ? security_file_permission+0x1c0/0x220
[ 1998.441964]  aio_write+0x37f/0x5c0
[ 1998.445489]  ? aio_setup_rw.isra.0+0x110/0x110
[ 1998.450070]  ? lock_downgrade+0x720/0x720
[ 1998.454202]  ? lock_acquire+0x170/0x3c0
[ 1998.458160]  ? __might_fault+0xef/0x1d0
[ 1998.462124]  io_submit_one+0xf62/0x1fe0
[ 1998.466084]  ? HARDIRQ_verbose+0x10/0x10
[ 1998.470126]  ? lock_downgrade+0x720/0x720
[ 1998.474264]  ? aio_read+0x420/0x420
[ 1998.477870]  ? __might_fault+0x11f/0x1d0
[ 1998.481924]  __se_sys_io_submit+0x11b/0x460
[ 1998.486231]  ? io_submit_one+0x1fe0/0x1fe0
[ 1998.490457]  ? ksys_write+0x1c8/0x2a0
[ 1998.494261]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1998.498997]  ? trace_hardirqs_off_caller+0x69/0x210
[ 1998.503998]  ? do_syscall_64+0x21/0x620
[ 1998.507962]  do_syscall_64+0xf9/0x620
[ 1998.511748]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1998.516923] RIP: 0033:0x45c1d9
[ 1998.520098] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1998.539079] RSP: 002b:00007f3122b32c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1998.546768] RAX: ffffffffffffffda RBX: 00000000000081c0 RCX: 000000000045c1d9
[ 1998.554017] RDX: 0000000020000340 RSI: 0000000000000002 RDI: 00007f3122b12000
[ 1998.561266] RBP: 00007f3122b32ca0 R08: 0000000000000000 R09: 0000000000000000
[ 1998.568515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1998.575763] R13: 00007ffefe101d9f R14: 00007f3122b339c0 R15: 000000000078bf0c
02:46:24 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:24 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x80020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

02:46:24 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @bt={0x0, 0x9, 0xa2a, 0x8, 0x1, 0x3, 0x0, 0xa}})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x80101, 0x0)
ioctl$NBD_DO_IT(r2, 0xab03)
ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r5 = dup(0xffffffffffffffff)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r7}, &(0x7f0000000240)=0x18)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r7, 0xfffffffe}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={r7, 0xffffff81}, &(0x7f00000000c0)=0x8)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:46:24 executing program 2 (fault-call:3 fault-nth:2):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:46:24 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0xac1414bb}}}}, 0x100c)

[ 2000.002972] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2000.002978] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:46:25 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x90020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

[ 2000.101120] FAULT_INJECTION: forcing a failure.
[ 2000.101120] name failslab, interval 1, probability 0, space 0, times 0
[ 2000.148849] CPU: 1 PID: 24094 Comm: syz-executor.2 Not tainted 4.19.133-syzkaller #0
[ 2000.156771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2000.166125] Call Trace:
[ 2000.168725]  dump_stack+0x1fc/0x2fe
[ 2000.172375]  should_fail.cold+0xa/0x14
[ 2000.176268]  ? __might_fault+0x11f/0x1d0
[ 2000.180335]  ? setup_fault_attr+0x200/0x200
[ 2000.184664]  ? lock_downgrade+0x720/0x720
[ 2000.188811]  ? lock_acquire+0x170/0x3c0
[ 2000.192792]  __should_failslab+0x115/0x180
[ 2000.197032]  should_failslab+0x5/0xf
[ 2000.200747]  kmem_cache_alloc_node+0x54/0x3b0
[ 2000.205252]  __alloc_skb+0x71/0x560
[ 2000.208891]  hci_sock_sendmsg+0x1308/0x1ec0
[ 2000.213222]  ? inode_has_perm+0x17d/0x210
[ 2000.217376]  ? hci_sock_ioctl+0x7a0/0x7a0
[ 2000.221538]  ? hci_sock_ioctl+0x7a0/0x7a0
[ 2000.225692]  sock_sendmsg+0xc3/0x120
[ 2000.229415]  sock_write_iter+0x287/0x3c0
[ 2000.233496]  ? sock_sendmsg+0x120/0x120
[ 2000.237491]  ? security_file_permission+0x1c0/0x220
[ 2000.242533]  aio_write+0x37f/0x5c0
[ 2000.246084]  ? aio_setup_rw.isra.0+0x110/0x110
[ 2000.250693]  ? lock_downgrade+0x720/0x720
[ 2000.254846]  ? lock_acquire+0x170/0x3c0
[ 2000.258820]  ? __might_fault+0xef/0x1d0
[ 2000.262813]  io_submit_one+0xf62/0x1fe0
[ 2000.266801]  ? HARDIRQ_verbose+0x10/0x10
[ 2000.270864]  ? lock_downgrade+0x720/0x720
[ 2000.275021]  ? aio_read+0x420/0x420
[ 2000.278659]  ? __might_fault+0x11f/0x1d0
[ 2000.282745]  __se_sys_io_submit+0x11b/0x460
[ 2000.287077]  ? io_submit_one+0x1fe0/0x1fe0
[ 2000.291318]  ? ksys_write+0x1c8/0x2a0
[ 2000.295133]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2000.299892]  ? trace_hardirqs_off_caller+0x69/0x210
[ 2000.304916]  ? do_syscall_64+0x21/0x620
[ 2000.308900]  do_syscall_64+0xf9/0x620
[ 2000.312710]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2000.317899] RIP: 0033:0x45c1d9
[ 2000.321092] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2000.339995] RSP: 002b:00007f3122b32c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
02:46:25 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x12)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

02:46:25 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:25 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x9c010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2000.347714] RAX: ffffffffffffffda RBX: 00000000000081c0 RCX: 000000000045c1d9
[ 2000.354986] RDX: 0000000020000340 RSI: 0000000000000002 RDI: 00007f3122b12000
[ 2000.362254] RBP: 00007f3122b32ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2000.369521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2000.376789] R13: 00007ffefe101d9f R14: 00007f3122b339c0 R15: 000000000078bf0c
02:46:25 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:25 executing program 2 (fault-call:3 fault-nth:3):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:46:25 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x9d030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:25 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

[ 2000.536172] FAULT_INJECTION: forcing a failure.
[ 2000.536172] name failslab, interval 1, probability 0, space 0, times 0
[ 2000.568191] CPU: 0 PID: 24121 Comm: syz-executor.2 Not tainted 4.19.133-syzkaller #0
[ 2000.576225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
02:46:25 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:25 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0xa6020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2000.585586] Call Trace:
[ 2000.588194]  dump_stack+0x1fc/0x2fe
[ 2000.591840]  should_fail.cold+0xa/0x14
[ 2000.595746]  ? setup_fault_attr+0x200/0x200
[ 2000.600084]  ? __might_fault+0x11f/0x1d0
[ 2000.604168]  ? setup_fault_attr+0x200/0x200
[ 2000.608537]  __should_failslab+0x115/0x180
[ 2000.612778]  should_failslab+0x5/0xf
[ 2000.616498]  kmem_cache_alloc_node_trace+0x57/0x3b0
[ 2000.621536]  __kmalloc_node_track_caller+0x38/0x70
[ 2000.626482]  __alloc_skb+0xae/0x560
[ 2000.630127]  hci_sock_sendmsg+0x1308/0x1ec0
[ 2000.634470]  ? inode_has_perm+0x17d/0x210
[ 2000.638648]  ? hci_sock_ioctl+0x7a0/0x7a0
[ 2000.642824]  ? hci_sock_ioctl+0x7a0/0x7a0
[ 2000.646994]  sock_sendmsg+0xc3/0x120
[ 2000.650726]  sock_write_iter+0x287/0x3c0
[ 2000.654805]  ? sock_sendmsg+0x120/0x120
[ 2000.658795]  ? security_file_permission+0x1c0/0x220
[ 2000.663825]  aio_write+0x37f/0x5c0
[ 2000.667388]  ? aio_setup_rw.isra.0+0x110/0x110
[ 2000.672001]  ? lock_downgrade+0x720/0x720
[ 2000.676167]  ? lock_acquire+0x170/0x3c0
[ 2000.680143]  ? __might_fault+0xef/0x1d0
[ 2000.684138]  io_submit_one+0xf62/0x1fe0
[ 2000.688137]  ? HARDIRQ_verbose+0x10/0x10
[ 2000.692196]  ? lock_downgrade+0x720/0x720
[ 2000.696344]  ? aio_read+0x420/0x420
[ 2000.699975]  ? __might_fault+0x11f/0x1d0
[ 2000.704038]  __se_sys_io_submit+0x11b/0x460
[ 2000.708358]  ? io_submit_one+0x1fe0/0x1fe0
[ 2000.712586]  ? ksys_write+0x1c8/0x2a0
[ 2000.716383]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2000.721188]  ? trace_hardirqs_off_caller+0x69/0x210
[ 2000.726196]  ? do_syscall_64+0x21/0x620
[ 2000.730170]  do_syscall_64+0xf9/0x620
[ 2000.733977]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2000.739152] RIP: 0033:0x45c1d9
[ 2000.742356] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2000.761263] RSP: 002b:00007f3122b32c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 2000.769014] RAX: ffffffffffffffda RBX: 00000000000081c0 RCX: 000000000045c1d9
[ 2000.776275] RDX: 0000000020000340 RSI: 0000000000000002 RDI: 00007f3122b12000
[ 2000.783527] RBP: 00007f3122b32ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2000.790779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 2000.798038] R13: 00007ffefe101d9f R14: 00007f3122b339c0 R15: 000000000078bf0c
02:46:25 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0xbb1414ac}}}}, 0x100c)

02:46:25 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:25 executing program 4:
r0 = msgget(0x3, 0x603)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xffffffffffffec90)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000))
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r3, 0x400455c8, 0x9)

02:46:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

02:46:25 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0xb8020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:25 executing program 2 (fault-call:3 fault-nth:4):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2001.111064] FAULT_INJECTION: forcing a failure.
[ 2001.111064] name failslab, interval 1, probability 0, space 0, times 0
[ 2001.125890] nfacct_mt_checkentry: 15 callbacks suppressed
[ 2001.125897] xt_nfacct: accounting object `syz1' does not exists
[ 2001.174511] xt_nfacct: accounting object `syz1' does not exists
[ 2001.181894] CPU: 1 PID: 24154 Comm: syz-executor.2 Not tainted 4.19.133-syzkaller #0
[ 2001.189794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2001.199144] Call Trace:
[ 2001.201739]  dump_stack+0x1fc/0x2fe
[ 2001.205380]  should_fail.cold+0xa/0x14
[ 2001.209272]  ? setup_fault_attr+0x200/0x200
[ 2001.213600]  ? lock_acquire+0x170/0x3c0
[ 2001.218978]  __should_failslab+0x115/0x180
[ 2001.223216]  should_failslab+0x5/0xf
[ 2001.226930]  __kmalloc+0x2ab/0x3c0
[ 2001.230488]  ? read_commands+0x87/0x470
[ 2001.234463]  ? kfree_skbmem+0xc1/0x140
[ 2001.238353]  read_commands+0x87/0x470
[ 2001.242154]  ? kfree_skbmem+0xc1/0x140
[ 2001.246046]  hci_sock_sendmsg+0x1aff/0x1ec0
[ 2001.250373]  ? hci_sock_ioctl+0x7a0/0x7a0
[ 2001.254532]  ? hci_sock_ioctl+0x7a0/0x7a0
[ 2001.258685]  sock_sendmsg+0xc3/0x120
[ 2001.262405]  sock_write_iter+0x287/0x3c0
[ 2001.266502]  ? sock_sendmsg+0x120/0x120
[ 2001.270490]  ? security_file_permission+0x1c0/0x220
[ 2001.275519]  aio_write+0x37f/0x5c0
[ 2001.279068]  ? aio_setup_rw.isra.0+0x110/0x110
[ 2001.283673]  ? lock_downgrade+0x720/0x720
[ 2001.287815]  ? lock_acquire+0x170/0x3c0
[ 2001.291785]  ? __might_fault+0xef/0x1d0
[ 2001.295770]  io_submit_one+0xf62/0x1fe0
[ 2001.299762]  ? HARDIRQ_verbose+0x10/0x10
[ 2001.303827]  ? lock_downgrade+0x720/0x720
[ 2001.307981]  ? aio_read+0x420/0x420
[ 2001.311612]  ? __might_fault+0x11f/0x1d0
[ 2001.315698]  __se_sys_io_submit+0x11b/0x460
[ 2001.320025]  ? io_submit_one+0x1fe0/0x1fe0
[ 2001.324268]  ? ksys_write+0x1c8/0x2a0
[ 2001.328077]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2001.332831]  ? trace_hardirqs_off_caller+0x69/0x210
[ 2001.337859]  ? do_syscall_64+0x21/0x620
[ 2001.341854]  do_syscall_64+0xf9/0x620
[ 2001.345668]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2001.350856] RIP: 0033:0x45c1d9
[ 2001.354050] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
02:46:26 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:26 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040))
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

02:46:26 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0xb8030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2001.372951] RSP: 002b:00007f3122b32c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 2001.380662] RAX: ffffffffffffffda RBX: 00000000000081c0 RCX: 000000000045c1d9
[ 2001.387932] RDX: 0000000020000340 RSI: 0000000000000002 RDI: 00007f3122b12000
[ 2001.395213] RBP: 00007f3122b32ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2001.402478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2001.409747] R13: 00007ffefe101d9f R14: 00007f3122b339c0 R15: 000000000078bf0c
02:46:26 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:26 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0xd2030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2001.498606] xt_nfacct: accounting object `syz1' does not exists
[ 2001.507538] xt_nfacct: accounting object `syz1' does not exists
02:46:26 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040))
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

[ 2001.600926] xt_nfacct: accounting object `syz1' does not exists
02:46:26 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0xea0f0000}}}}, 0x100c)

02:46:26 executing program 2 (fault-call:3 fault-nth:5):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2001.843698] FAULT_INJECTION: forcing a failure.
[ 2001.843698] name failslab, interval 1, probability 0, space 0, times 0
[ 2001.855388] CPU: 0 PID: 24196 Comm: syz-executor.2 Not tainted 4.19.133-syzkaller #0
[ 2001.863275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2001.872621] Call Trace:
[ 2001.875215]  dump_stack+0x1fc/0x2fe
[ 2001.878832]  should_fail.cold+0xa/0x14
[ 2001.882702]  ? setup_fault_attr+0x200/0x200
[ 2001.887041]  ? lock_acquire+0x170/0x3c0
[ 2001.890999]  __should_failslab+0x115/0x180
[ 2001.895222]  should_failslab+0x5/0xf
[ 2001.898921]  kmem_cache_alloc_node+0x245/0x3b0
[ 2001.903539]  __alloc_skb+0x71/0x560
[ 2001.907196]  mgmt_cmd_complete+0x3d/0x470
[ 2001.911345]  read_commands+0x286/0x470
[ 2001.915218]  hci_sock_sendmsg+0x1aff/0x1ec0
[ 2001.919521]  ? hci_sock_ioctl+0x7a0/0x7a0
[ 2001.923655]  ? hci_sock_ioctl+0x7a0/0x7a0
[ 2001.927813]  sock_sendmsg+0xc3/0x120
[ 2001.931541]  sock_write_iter+0x287/0x3c0
[ 2001.935595]  ? sock_sendmsg+0x120/0x120
[ 2001.939568]  ? security_file_permission+0x1c0/0x220
[ 2001.944569]  aio_write+0x37f/0x5c0
[ 2001.948093]  ? aio_setup_rw.isra.0+0x110/0x110
[ 2001.952664]  ? lock_downgrade+0x720/0x720
[ 2001.956789]  ? lock_acquire+0x170/0x3c0
[ 2001.960750]  ? __might_fault+0xef/0x1d0
[ 2001.964711]  io_submit_one+0xf62/0x1fe0
[ 2001.968672]  ? HARDIRQ_verbose+0x10/0x10
[ 2001.972719]  ? lock_downgrade+0x720/0x720
[ 2001.976856]  ? aio_read+0x420/0x420
[ 2001.980472]  ? __might_fault+0x11f/0x1d0
[ 2001.984523]  __se_sys_io_submit+0x11b/0x460
[ 2001.988828]  ? io_submit_one+0x1fe0/0x1fe0
[ 2001.993051]  ? ksys_write+0x1c8/0x2a0
[ 2001.996865]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2002.001599]  ? trace_hardirqs_off_caller+0x69/0x210
[ 2002.006597]  ? do_syscall_64+0x21/0x620
[ 2002.010551]  do_syscall_64+0xf9/0x620
[ 2002.014335]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2002.019506] RIP: 0033:0x45c1d9
[ 2002.022681] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2002.041561] RSP: 002b:00007f3122b32c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 2002.049248] RAX: ffffffffffffffda RBX: 00000000000081c0 RCX: 000000000045c1d9
[ 2002.056498] RDX: 0000000020000340 RSI: 0000000000000002 RDI: 00007f3122b12000
[ 2002.063750] RBP: 00007f3122b32ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2002.070999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 2002.078247] R13: 00007ffefe101d9f R14: 00007f3122b339c0 R15: 000000000078bf0c
[ 2003.202776] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2003.202898] Bluetooth: hci0: command 0xfc11 tx timeout
02:46:30 executing program 4 (fault-call:1 fault-nth:0):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:46:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:30 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0xe0010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040))
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

02:46:30 executing program 2 (fault-call:3 fault-nth:6):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:46:30 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0xeaffffff}}}}, 0x100c)

[ 2005.282630] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2005.282737] Bluetooth: hci0: command 0xfc11 tx timeout
02:46:30 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0xf4000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

[ 2005.355634] xt_nfacct: accounting object `syz1' does not exists
[ 2005.365842] FAULT_INJECTION: forcing a failure.
[ 2005.365842] name failslab, interval 1, probability 0, space 0, times 0
[ 2005.387283] FAULT_INJECTION: forcing a failure.
[ 2005.387283] name failslab, interval 1, probability 0, space 0, times 0
[ 2005.420326] CPU: 1 PID: 24225 Comm: syz-executor.4 Not tainted 4.19.133-syzkaller #0
[ 2005.428243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2005.437602] Call Trace:
[ 2005.440204]  dump_stack+0x1fc/0x2fe
[ 2005.443853]  should_fail.cold+0xa/0x14
[ 2005.444179] xt_nfacct: accounting object `syz1' does not exists
[ 2005.447767]  ? setup_fault_attr+0x200/0x200
[ 2005.447783]  ? lock_acquire+0x170/0x3c0
[ 2005.447805]  __should_failslab+0x115/0x180
[ 2005.463005] xt_nfacct: accounting object `syz1' does not exists
[ 2005.466348]  should_failslab+0x5/0xf
[ 2005.466363]  kmem_cache_alloc_node+0x245/0x3b0
[ 2005.466383]  __alloc_skb+0x71/0x560
[ 2005.484309]  netlink_sendmsg+0x9ee/0xc40
[ 2005.488385]  ? nlmsg_notify+0x1a0/0x1a0
[ 2005.492366]  ? kernel_recvmsg+0x220/0x220
[ 2005.496525]  ? nlmsg_notify+0x1a0/0x1a0
[ 2005.500506]  sock_sendmsg+0xc3/0x120
[ 2005.504236]  ___sys_sendmsg+0x7bb/0x8e0
[ 2005.508215]  ? copy_msghdr_from_user+0x440/0x440
[ 2005.512976]  ? __fget+0x32f/0x510
[ 2005.516435]  ? lock_downgrade+0x720/0x720
[ 2005.520583]  ? check_preemption_disabled+0x41/0x280
[ 2005.525603]  ? check_preemption_disabled+0x41/0x280
[ 2005.530649]  ? __fget+0x356/0x510
[ 2005.534107]  ? do_dup2+0x450/0x450
[ 2005.537650]  ? lock_downgrade+0x720/0x720
[ 2005.541798]  ? vfs_write+0x3d7/0x540
[ 2005.545516]  ? __fdget+0x1d0/0x230
[ 2005.549062]  __x64_sys_sendmsg+0x132/0x220
[ 2005.553295]  ? __sys_sendmsg+0x1b0/0x1b0
[ 2005.557352]  ? vfs_write+0x393/0x540
[ 2005.561081]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2005.565836]  ? trace_hardirqs_off_caller+0x69/0x210
[ 2005.570852]  ? do_syscall_64+0x21/0x620
[ 2005.574833]  do_syscall_64+0xf9/0x620
[ 2005.578644]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2005.583830] RIP: 0033:0x45c1d9
[ 2005.587024] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2005.605922] RSP: 002b:00007f2e10243c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2005.613635] RAX: ffffffffffffffda RBX: 00000000000273c0 RCX: 000000000045c1d9
02:46:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040))
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:30 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0xf9010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2005.620901] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003
[ 2005.628261] RBP: 00007f2e10243ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2005.635526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2005.642793] R13: 00007ffdd3ef9cdf R14: 00007f2e102449c0 R15: 000000000078bf0c
[ 2005.661579] CPU: 0 PID: 24228 Comm: syz-executor.2 Not tainted 4.19.133-syzkaller #0
[ 2005.669489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2005.678845] Call Trace:
[ 2005.681449]  dump_stack+0x1fc/0x2fe
[ 2005.685092]  should_fail.cold+0xa/0x14
[ 2005.688996]  ? setup_fault_attr+0x200/0x200
[ 2005.693324]  ? lock_acquire+0x170/0x3c0
[ 2005.697316]  __should_failslab+0x115/0x180
[ 2005.701558]  should_failslab+0x5/0xf
[ 2005.705284]  kmem_cache_alloc_node_trace+0x244/0x3b0
[ 2005.710401]  __kmalloc_node_track_caller+0x38/0x70
[ 2005.715340]  __alloc_skb+0xae/0x560
[ 2005.718977]  mgmt_cmd_complete+0x3d/0x470
[ 2005.723138]  read_commands+0x286/0x470
[ 2005.727035]  hci_sock_sendmsg+0x1aff/0x1ec0
[ 2005.731364]  ? hci_sock_ioctl+0x7a0/0x7a0
[ 2005.735523]  ? hci_sock_ioctl+0x7a0/0x7a0
[ 2005.739682]  sock_sendmsg+0xc3/0x120
[ 2005.743408]  sock_write_iter+0x287/0x3c0
[ 2005.747477]  ? sock_sendmsg+0x120/0x120
[ 2005.751468]  ? security_file_permission+0x1c0/0x220
[ 2005.756500]  aio_write+0x37f/0x5c0
[ 2005.760055]  ? aio_setup_rw.isra.0+0x110/0x110
[ 2005.764667]  ? lock_downgrade+0x720/0x720
[ 2005.768823]  ? lock_acquire+0x170/0x3c0
[ 2005.772806]  ? __might_fault+0xef/0x1d0
[ 2005.776796]  io_submit_one+0xf62/0x1fe0
[ 2005.780783]  ? HARDIRQ_verbose+0x10/0x10
[ 2005.784847]  ? lock_downgrade+0x720/0x720
[ 2005.788997]  ? aio_read+0x420/0x420
[ 2005.792626]  ? __might_fault+0x11f/0x1d0
[ 2005.796716]  __se_sys_io_submit+0x11b/0x460
[ 2005.801047]  ? io_submit_one+0x1fe0/0x1fe0
[ 2005.805290]  ? ksys_write+0x1c8/0x2a0
[ 2005.809109]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2005.813873]  ? trace_hardirqs_off_caller+0x69/0x210
02:46:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040))
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:30 executing program 4 (fault-call:1 fault-nth:1):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2005.818894]  ? do_syscall_64+0x21/0x620
[ 2005.822882]  do_syscall_64+0xf9/0x620
[ 2005.826694]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2005.831886] RIP: 0033:0x45c1d9
[ 2005.835083] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2005.835404] xt_nfacct: accounting object `syz1' does not exists
[ 2005.853986] RSP: 002b:00007f3122b32c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 2005.854022] RAX: ffffffffffffffda RBX: 00000000000081c0 RCX: 000000000045c1d9
[ 2005.854032] RDX: 0000000020000340 RSI: 0000000000000002 RDI: 00007f3122b12000
[ 2005.854040] RBP: 00007f3122b32ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2005.854047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 2005.854055] R13: 00007ffefe101d9f R14: 00007f3122b339c0 R15: 000000000078bf0c
[ 2005.880885] FAULT_INJECTION: forcing a failure.
[ 2005.880885] name failslab, interval 1, probability 0, space 0, times 0
02:46:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040))
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:30 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2005.946217] CPU: 0 PID: 24248 Comm: syz-executor.4 Not tainted 4.19.133-syzkaller #0
[ 2005.954131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2005.963495] Call Trace:
[ 2005.966100]  dump_stack+0x1fc/0x2fe
[ 2005.969742]  should_fail.cold+0xa/0x14
[ 2005.973639]  ? setup_fault_attr+0x200/0x200
[ 2005.977964]  ? lock_acquire+0x170/0x3c0
[ 2005.981952]  __should_failslab+0x115/0x180
[ 2005.986196]  should_failslab+0x5/0xf
[ 2005.989918]  kmem_cache_alloc_node_trace+0x244/0x3b0
[ 2005.995034]  __kmalloc_node_track_caller+0x38/0x70
[ 2005.999979]  __alloc_skb+0xae/0x560
[ 2006.003618]  netlink_sendmsg+0x9ee/0xc40
[ 2006.007688]  ? nlmsg_notify+0x1a0/0x1a0
[ 2006.011667]  ? kernel_recvmsg+0x220/0x220
[ 2006.015827]  ? nlmsg_notify+0x1a0/0x1a0
[ 2006.016151] xt_nfacct: accounting object `syz1' does not exists
[ 2006.019802]  sock_sendmsg+0xc3/0x120
[ 2006.019821]  ___sys_sendmsg+0x7bb/0x8e0
[ 2006.019840]  ? copy_msghdr_from_user+0x440/0x440
[ 2006.019857]  ? __fget+0x32f/0x510
[ 2006.041748]  ? lock_downgrade+0x720/0x720
02:46:31 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:31 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x2]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2006.045901]  ? check_preemption_disabled+0x41/0x280
[ 2006.050924]  ? check_preemption_disabled+0x41/0x280
[ 2006.055951]  ? __fget+0x356/0x510
[ 2006.059416]  ? do_dup2+0x450/0x450
[ 2006.062957]  ? lock_downgrade+0x720/0x720
[ 2006.067115]  ? vfs_write+0x3d7/0x540
[ 2006.070839]  ? __fdget+0x1d0/0x230
[ 2006.074391]  __x64_sys_sendmsg+0x132/0x220
[ 2006.078629]  ? __sys_sendmsg+0x1b0/0x1b0
[ 2006.082691]  ? vfs_write+0x393/0x540
[ 2006.086421]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2006.091179]  ? trace_hardirqs_off_caller+0x69/0x210
[ 2006.096197]  ? do_syscall_64+0x21/0x620
[ 2006.100184]  do_syscall_64+0xf9/0x620
[ 2006.103995]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2006.109183] RIP: 0033:0x45c1d9
[ 2006.112378] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2006.131281] RSP: 002b:00007f2e10243c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2006.138995] RAX: ffffffffffffffda RBX: 00000000000273c0 RCX: 000000000045c1d9
[ 2006.146266] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003
[ 2006.153538] RBP: 00007f2e10243ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2006.160413] nfacct_mt_checkentry: 1 callbacks suppressed
[ 2006.160419] xt_nfacct: accounting object `syz1' does not exists
[ 2006.160808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2006.179551] R13: 00007ffdd3ef9cdf R14: 00007f2e102449c0 R15: 000000000078bf0c
02:46:31 executing program 2 (fault-call:3 fault-nth:7):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2006.262946] FAULT_INJECTION: forcing a failure.
[ 2006.262946] name failslab, interval 1, probability 0, space 0, times 0
[ 2006.274851] CPU: 0 PID: 24284 Comm: syz-executor.2 Not tainted 4.19.133-syzkaller #0
[ 2006.282744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2006.292095] Call Trace:
[ 2006.294692]  dump_stack+0x1fc/0x2fe
[ 2006.298330]  should_fail.cold+0xa/0x14
[ 2006.302227]  ? setup_fault_attr+0x200/0x200
[ 2006.306551]  ? setup_fault_attr+0x200/0x200
[ 2006.310873]  ? lock_acquire+0x170/0x3c0
[ 2006.314853]  __should_failslab+0x115/0x180
[ 2006.319096]  should_failslab+0x5/0xf
[ 2006.322810]  kmem_cache_alloc_node+0x54/0x3b0
[ 2006.327314]  __alloc_skb+0x71/0x560
[ 2006.330953]  create_monitor_ctrl_event+0x3a/0x3a0
[ 2006.335805]  mgmt_cmd_complete+0x2b9/0x470
[ 2006.340044]  read_commands+0x286/0x470
[ 2006.343940]  hci_sock_sendmsg+0x1aff/0x1ec0
[ 2006.348265]  ? hci_sock_ioctl+0x7a0/0x7a0
[ 2006.352418]  ? hci_sock_ioctl+0x7a0/0x7a0
[ 2006.356569]  sock_sendmsg+0xc3/0x120
[ 2006.360287]  sock_write_iter+0x287/0x3c0
[ 2006.364349]  ? sock_sendmsg+0x120/0x120
[ 2006.368335]  ? security_file_permission+0x1c0/0x220
[ 2006.373360]  aio_write+0x37f/0x5c0
[ 2006.376908]  ? aio_setup_rw.isra.0+0x110/0x110
[ 2006.381509]  ? lock_downgrade+0x720/0x720
[ 2006.385668]  ? lock_acquire+0x170/0x3c0
[ 2006.389643]  ? __might_fault+0xef/0x1d0
[ 2006.393632]  io_submit_one+0xf62/0x1fe0
[ 2006.397623]  ? HARDIRQ_verbose+0x10/0x10
[ 2006.401690]  ? lock_downgrade+0x720/0x720
[ 2006.405844]  ? aio_read+0x420/0x420
[ 2006.409474]  ? __might_fault+0x11f/0x1d0
[ 2006.413558]  __se_sys_io_submit+0x11b/0x460
[ 2006.417883]  ? io_submit_one+0x1fe0/0x1fe0
[ 2006.422116]  ? ksys_write+0x1c8/0x2a0
[ 2006.425924]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2006.430674]  ? trace_hardirqs_off_caller+0x69/0x210
[ 2006.435802]  ? do_syscall_64+0x21/0x620
[ 2006.439791]  do_syscall_64+0xf9/0x620
[ 2006.443599]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2006.448899] RIP: 0033:0x45c1d9
[ 2006.452092] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2006.470993] RSP: 002b:00007f3122b32c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 2006.478706] RAX: ffffffffffffffda RBX: 00000000000081c0 RCX: 000000000045c1d9
[ 2006.485985] RDX: 0000000020000340 RSI: 0000000000000002 RDI: 00007f3122b12000
[ 2006.493253] RBP: 00007f3122b32ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2006.500521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[ 2006.507783] R13: 00007ffefe101d9f R14: 00007f3122b339c0 R15: 000000000078bf0c
02:46:31 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}}}}, 0x100c)

02:46:31 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

02:46:31 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x3]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:31 executing program 4 (fault-call:1 fault-nth:2):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:46:31 executing program 2 (fault-call:3 fault-nth:8):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2006.601770] xt_nfacct: accounting object `syz1' does not exists
[ 2006.621963] FAULT_INJECTION: forcing a failure.
[ 2006.621963] name failslab, interval 1, probability 0, space 0, times 0
[ 2006.648170] CPU: 1 PID: 24298 Comm: syz-executor.4 Not tainted 4.19.133-syzkaller #0
[ 2006.656079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2006.665445] Call Trace:
[ 2006.668047]  dump_stack+0x1fc/0x2fe
[ 2006.670865] FAULT_INJECTION: forcing a failure.
[ 2006.670865] name failslab, interval 1, probability 0, space 0, times 0
[ 2006.671697]  should_fail.cold+0xa/0x14
[ 2006.671723]  ? setup_fault_attr+0x200/0x200
[ 2006.691090]  ? HARDIRQ_verbose+0x10/0x10
[ 2006.695153]  ? lock_downgrade+0x720/0x720
[ 2006.699302]  ? check_preemption_disabled+0x41/0x280
[ 2006.704314]  __should_failslab+0x115/0x180
[ 2006.708551]  should_failslab+0x5/0xf
[ 2006.712266]  kmem_cache_alloc+0x3f/0x370
[ 2006.716333]  skb_clone+0x151/0x3d0
[ 2006.719863]  netlink_deliver_tap+0x955/0xb00
[ 2006.724277]  netlink_unicast+0x545/0x690
[ 2006.728334]  ? netlink_sendskb+0x110/0x110
[ 2006.732572]  netlink_sendmsg+0x6bb/0xc40
[ 2006.736628]  ? nlmsg_notify+0x1a0/0x1a0
[ 2006.740591]  ? kernel_recvmsg+0x220/0x220
[ 2006.744751]  ? nlmsg_notify+0x1a0/0x1a0
[ 2006.748720]  sock_sendmsg+0xc3/0x120
[ 2006.752426]  ___sys_sendmsg+0x7bb/0x8e0
[ 2006.756399]  ? copy_msghdr_from_user+0x440/0x440
[ 2006.761146]  ? __fget+0x32f/0x510
[ 2006.764593]  ? lock_downgrade+0x720/0x720
[ 2006.768730]  ? check_preemption_disabled+0x41/0x280
[ 2006.773733]  ? check_preemption_disabled+0x41/0x280
[ 2006.778745]  ? __fget+0x356/0x510
[ 2006.782189]  ? do_dup2+0x450/0x450
[ 2006.785712]  ? lock_downgrade+0x720/0x720
[ 2006.789853]  ? vfs_write+0x3d7/0x540
[ 2006.793558]  ? __fdget+0x1d0/0x230
[ 2006.797092]  __x64_sys_sendmsg+0x132/0x220
[ 2006.801315]  ? __sys_sendmsg+0x1b0/0x1b0
[ 2006.805362]  ? vfs_write+0x393/0x540
[ 2006.809069]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2006.813815]  ? trace_hardirqs_off_caller+0x69/0x210
[ 2006.818819]  ? do_syscall_64+0x21/0x620
[ 2006.822783]  do_syscall_64+0xf9/0x620
[ 2006.826579]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2006.831753] RIP: 0033:0x45c1d9
[ 2006.834932] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2006.853820] RSP: 002b:00007f2e10243c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2006.861513] RAX: ffffffffffffffda RBX: 00000000000273c0 RCX: 000000000045c1d9
[ 2006.868768] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003
[ 2006.876021] RBP: 00007f2e10243ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2006.883277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2006.890533] R13: 00007ffdd3ef9cdf R14: 00007f2e102449c0 R15: 000000000078bf0c
02:46:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

02:46:31 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:31 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x4]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2006.897821] CPU: 0 PID: 24310 Comm: syz-executor.2 Not tainted 4.19.133-syzkaller #0
[ 2006.905713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2006.915071] Call Trace:
[ 2006.917671]  dump_stack+0x1fc/0x2fe
[ 2006.921324]  should_fail.cold+0xa/0x14
[ 2006.925224]  ? setup_fault_attr+0x200/0x200
[ 2006.929557]  ? setup_fault_attr+0x200/0x200
[ 2006.933890]  __should_failslab+0x115/0x180
[ 2006.938133]  should_failslab+0x5/0xf
[ 2006.941856]  kmem_cache_alloc_node_trace+0x57/0x3b0
[ 2006.946884]  __kmalloc_node_track_caller+0x38/0x70
[ 2006.947577] xt_nfacct: accounting object `syz1' does not exists
[ 2006.951817]  __alloc_skb+0xae/0x560
[ 2006.951840]  create_monitor_ctrl_event+0x3a/0x3a0
[ 2006.951857]  mgmt_cmd_complete+0x2b9/0x470
[ 2006.951876]  read_commands+0x286/0x470
[ 2006.969249] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2006.970597]  hci_sock_sendmsg+0x1aff/0x1ec0
[ 2006.970618]  ? hci_sock_ioctl+0x7a0/0x7a0
[ 2006.970636]  ? hci_sock_ioctl+0x7a0/0x7a0
[ 2006.995670]  sock_sendmsg+0xc3/0x120
[ 2006.999398]  sock_write_iter+0x287/0x3c0
[ 2007.003468]  ? sock_sendmsg+0x120/0x120
[ 2007.007457]  ? security_file_permission+0x1c0/0x220
[ 2007.012487]  aio_write+0x37f/0x5c0
[ 2007.016043]  ? aio_setup_rw.isra.0+0x110/0x110
[ 2007.020658]  ? lock_downgrade+0x720/0x720
[ 2007.024814]  ? lock_acquire+0x170/0x3c0
[ 2007.028794]  ? __might_fault+0xef/0x1d0
[ 2007.032783]  io_submit_one+0xf62/0x1fe0
[ 2007.036771]  ? HARDIRQ_verbose+0x10/0x10
[ 2007.040842]  ? lock_downgrade+0x720/0x720
[ 2007.044994]  ? aio_read+0x420/0x420
[ 2007.048626]  ? __might_fault+0x11f/0x1d0
[ 2007.052709]  __se_sys_io_submit+0x11b/0x460
[ 2007.057048]  ? io_submit_one+0x1fe0/0x1fe0
[ 2007.061291]  ? ksys_write+0x1c8/0x2a0
[ 2007.065109]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2007.069876]  ? trace_hardirqs_off_caller+0x69/0x210
[ 2007.074900]  ? do_syscall_64+0x21/0x620
[ 2007.078882]  do_syscall_64+0xf9/0x620
[ 2007.082695]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2007.087885] RIP: 0033:0x45c1d9
02:46:32 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:32 executing program 4 (fault-call:1 fault-nth:3):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:46:32 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x6]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2007.091082] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2007.109982] RSP: 002b:00007f3122b32c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 2007.117692] RAX: ffffffffffffffda RBX: 00000000000081c0 RCX: 000000000045c1d9
[ 2007.124963] RDX: 0000000020000340 RSI: 0000000000000002 RDI: 00007f3122b12000
[ 2007.132234] RBP: 00007f3122b32ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2007.139506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[ 2007.146779] R13: 00007ffefe101d9f R14: 00007f3122b339c0 R15: 000000000078bf0c
[ 2007.198881] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2007.207089] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2007.233142] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2007.254356] FAULT_INJECTION: forcing a failure.
[ 2007.254356] name failslab, interval 1, probability 0, space 0, times 0
[ 2007.281991] CPU: 1 PID: 24329 Comm: syz-executor.4 Not tainted 4.19.133-syzkaller #0
[ 2007.289901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2007.299255] Call Trace:
[ 2007.301851]  dump_stack+0x1fc/0x2fe
[ 2007.305495]  should_fail.cold+0xa/0x14
[ 2007.309453]  ? ctnetlink_parse_tuple_proto+0x33e/0x4e0
[ 2007.314734]  ? setup_fault_attr+0x200/0x200
[ 2007.319055]  ? __nf_conntrack_find_get+0x1331/0x1740
[ 2007.324171]  __should_failslab+0x115/0x180
[ 2007.328412]  should_failslab+0x5/0xf
[ 2007.332134]  kmem_cache_alloc+0x3f/0x370
[ 2007.336200]  __nf_conntrack_alloc+0xda/0x5e0
[ 2007.340617]  ctnetlink_create_conntrack+0xb1/0x12c0
[ 2007.345640]  ? ctnetlink_change_synproxy.isra.0+0x380/0x380
[ 2007.351352]  ? hash_conntrack_raw+0x2d6/0x460
[ 2007.355854]  ? nf_ct_get_tuplepr+0x310/0x310
[ 2007.360262]  ? nf_ct_gc_expired+0x300/0x300
[ 2007.364581]  ? nfnetlink_rcv_msg+0x98d/0xf60
[ 2007.369004]  ctnetlink_new_conntrack+0x4f3/0xde0
[ 2007.373768]  ? ctnetlink_create_conntrack+0x12c0/0x12c0
[ 2007.379131]  ? nfnetlink_rcv_msg+0x98d/0xf60
[ 2007.383547]  ? nfnetlink_rcv_msg+0x95a/0xf60
[ 2007.387972]  ? ctnetlink_create_conntrack+0x12c0/0x12c0
[ 2007.393347]  nfnetlink_rcv_msg+0xc4f/0xf60
[ 2007.397608]  ? nfnetlink_net_exit_batch+0x150/0x150
[ 2007.402621]  ? __schedule+0x88f/0x2040
[ 2007.406543]  ? retint_kernel+0x2d/0x2d
[ 2007.410446]  ? netlink_rcv_skb+0x329/0x440
[ 2007.414689]  netlink_rcv_skb+0x160/0x440
[ 2007.418752]  ? nfnetlink_net_exit_batch+0x150/0x150
[ 2007.423769]  ? netlink_ack+0xae0/0xae0
[ 2007.427665]  ? ns_capable+0xde/0x100
[ 2007.431384]  nfnetlink_rcv+0x1b2/0x41b
[ 2007.435276]  ? nfnetlink_rcv_batch+0x1df0/0x1df0
[ 2007.440043]  netlink_unicast+0x4d5/0x690
[ 2007.444110]  ? netlink_sendskb+0x110/0x110
[ 2007.448376]  netlink_sendmsg+0x6bb/0xc40
[ 2007.452450]  ? nlmsg_notify+0x1a0/0x1a0
[ 2007.456427]  ? kernel_recvmsg+0x220/0x220
[ 2007.460585]  ? nlmsg_notify+0x1a0/0x1a0
[ 2007.464569]  sock_sendmsg+0xc3/0x120
[ 2007.468393]  ___sys_sendmsg+0x7bb/0x8e0
[ 2007.472399]  ? copy_msghdr_from_user+0x440/0x440
[ 2007.477153]  ? __fget+0x32f/0x510
[ 2007.480599]  ? lock_downgrade+0x720/0x720
[ 2007.484731]  ? check_preemption_disabled+0x41/0x280
[ 2007.489728]  ? check_preemption_disabled+0x41/0x280
[ 2007.494876]  ? __fget+0x356/0x510
[ 2007.498320]  ? do_dup2+0x450/0x450
[ 2007.501843]  ? lock_downgrade+0x720/0x720
[ 2007.505977]  ? vfs_write+0x3d7/0x540
[ 2007.509676]  ? __fdget+0x1d0/0x230
[ 2007.513200]  __x64_sys_sendmsg+0x132/0x220
[ 2007.517416]  ? __sys_sendmsg+0x1b0/0x1b0
[ 2007.521459]  ? vfs_write+0x393/0x540
[ 2007.525162]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2007.529899]  ? trace_hardirqs_off_caller+0x69/0x210
[ 2007.534911]  ? do_syscall_64+0x21/0x620
[ 2007.538877]  do_syscall_64+0xf9/0x620
[ 2007.542664]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2007.547833] RIP: 0033:0x45c1d9
[ 2007.551006] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2007.569896] RSP: 002b:00007f2e10243c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2007.577641] RAX: ffffffffffffffda RBX: 00000000000273c0 RCX: 000000000045c1d9
[ 2007.584890] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003
[ 2007.592140] RBP: 00007f2e10243ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2007.599392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 2007.606642] R13: 00007ffdd3ef9cdf R14: 00007f2e102449c0 R15: 000000000078bf0c
02:46:32 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}}, 0x100c)

02:46:32 executing program 2 (fault-call:3 fault-nth:9):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:46:32 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

02:46:32 executing program 4 (fault-call:1 fault-nth:4):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:46:32 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0xf4]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:32 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x14c]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2007.919351] xt_nfacct: accounting object `syz1' does not exists
[ 2007.928243] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2007.956766] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2007.972122] FAULT_INJECTION: forcing a failure.
[ 2007.972122] name failslab, interval 1, probability 0, space 0, times 0
[ 2008.008900] CPU: 1 PID: 24356 Comm: syz-executor.4 Not tainted 4.19.133-syzkaller #0
[ 2008.016809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2008.026165] Call Trace:
[ 2008.028762]  dump_stack+0x1fc/0x2fe
[ 2008.032405]  should_fail.cold+0xa/0x14
[ 2008.036301]  ? setup_fault_attr+0x200/0x200
[ 2008.040624]  ? lock_acquire+0x170/0x3c0
[ 2008.044611]  __should_failslab+0x115/0x180
[ 2008.048845]  should_failslab+0x5/0xf
[ 2008.052558]  kmem_cache_alloc_trace+0x284/0x380
[ 2008.057233]  __request_module+0x31e/0xb7e
[ 2008.061386]  ? ctnetlink_create_conntrack+0xd21/0x12c0
[ 2008.066668]  ? free_modprobe_argv+0x90/0x90
[ 2008.070995]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[ 2008.076187]  ? validate_nla+0x270/0x820
[ 2008.080168]  ? nla_parse+0x1b2/0x290
[ 2008.083891]  ? ctnetlink_create_conntrack+0xce4/0x12c0
[ 2008.089176]  ? ctnetlink_stat_ct+0x6f0/0x6f0
[ 2008.093588]  ? lock_downgrade+0x720/0x720
[ 2008.097748]  ctnetlink_create_conntrack+0xd21/0x12c0
[ 2008.102859]  ? ctnetlink_change_synproxy.isra.0+0x380/0x380
[ 2008.108573]  ? hash_conntrack_raw+0x2d6/0x460
[ 2008.113074]  ? nf_ct_get_tuplepr+0x310/0x310
[ 2008.117483]  ? nf_ct_gc_expired+0x300/0x300
[ 2008.121805]  ? nfnetlink_rcv_msg+0x98d/0xf60
[ 2008.126310]  ctnetlink_new_conntrack+0x4f3/0xde0
[ 2008.131073]  ? ctnetlink_create_conntrack+0x12c0/0x12c0
[ 2008.136437]  ? nfnetlink_rcv_msg+0x98d/0xf60
[ 2008.140848]  ? netlink_deliver_tap+0x8fb/0xb00
[ 2008.145433]  ? nfnetlink_rcv_msg+0x95a/0xf60
[ 2008.149859]  ? ctnetlink_create_conntrack+0x12c0/0x12c0
[ 2008.155226]  nfnetlink_rcv_msg+0xc4f/0xf60
[ 2008.159481]  ? nfnetlink_net_exit_batch+0x150/0x150
[ 2008.164531]  ? cred_has_capability.isra.0+0x139/0x2b0
[ 2008.169720]  ? cred_has_capability.isra.0+0x1b0/0x2b0
[ 2008.174911]  ? check_nnp_nosuid.isra.0+0x2a0/0x2a0
[ 2008.179838]  ? check_nnp_nosuid.isra.0+0x2a0/0x2a0
[ 2008.184774]  netlink_rcv_skb+0x160/0x440
[ 2008.188838]  ? nfnetlink_net_exit_batch+0x150/0x150
[ 2008.193860]  ? netlink_ack+0xae0/0xae0
[ 2008.197755]  ? ns_capable+0xde/0x100
[ 2008.201476]  nfnetlink_rcv+0x1b2/0x41b
[ 2008.205365]  ? nfnetlink_rcv_batch+0x1df0/0x1df0
[ 2008.210133]  netlink_unicast+0x4d5/0x690
[ 2008.214199]  ? netlink_sendskb+0x110/0x110
[ 2008.218445]  netlink_sendmsg+0x6bb/0xc40
[ 2008.222511]  ? nlmsg_notify+0x1a0/0x1a0
[ 2008.226485]  ? kernel_recvmsg+0x220/0x220
[ 2008.230645]  ? nlmsg_notify+0x1a0/0x1a0
[ 2008.234620]  sock_sendmsg+0xc3/0x120
[ 2008.238350]  ___sys_sendmsg+0x7bb/0x8e0
[ 2008.242353]  ? copy_msghdr_from_user+0x440/0x440
[ 2008.246035] xt_nfacct: accounting object `syz1' does not exists
[ 2008.247127]  ? __fget+0x32f/0x510
[ 2008.247149]  ? lock_downgrade+0x720/0x720
[ 2008.247167]  ? check_preemption_disabled+0x41/0x280
[ 2008.256377] xt_nfacct: accounting object `syz1' does not exists
[ 2008.256649]  ? check_preemption_disabled+0x41/0x280
[ 2008.276833]  ? __fget+0x356/0x510
[ 2008.280297]  ? do_dup2+0x450/0x450
[ 2008.283884]  ? lock_downgrade+0x720/0x720
[ 2008.288044]  ? vfs_write+0x3d7/0x540
[ 2008.291767]  ? __fdget+0x1d0/0x230
[ 2008.295317]  __x64_sys_sendmsg+0x132/0x220
[ 2008.299562]  ? __sys_sendmsg+0x1b0/0x1b0
[ 2008.303628]  ? vfs_write+0x393/0x540
[ 2008.307361]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2008.312126]  ? trace_hardirqs_off_caller+0x69/0x210
[ 2008.317150]  ? do_syscall_64+0x21/0x620
02:46:33 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x17e]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:33 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2008.321132]  do_syscall_64+0xf9/0x620
[ 2008.324951]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2008.326811] xt_nfacct: accounting object `syz1' does not exists
[ 2008.330140] RIP: 0033:0x45c1d9
[ 2008.330156] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2008.330164] RSP: 002b:00007f2e10243c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2008.330182] RAX: ffffffffffffffda RBX: 00000000000273c0 RCX: 000000000045c1d9
02:46:33 executing program 4 (fault-call:1 fault-nth:5):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2008.338761] xt_nfacct: accounting object `syz1' does not exists
[ 2008.339399] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003
[ 2008.339409] RBP: 00007f2e10243ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2008.339417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 2008.339426] R13: 00007ffdd3ef9cdf R14: 00007f2e102449c0 R15: 000000000078bf0c
[ 2008.393632] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2008.418639] FAULT_INJECTION: forcing a failure.
[ 2008.418639] name failslab, interval 1, probability 0, space 0, times 0
[ 2008.431348] CPU: 1 PID: 24387 Comm: syz-executor.4 Not tainted 4.19.133-syzkaller #0
[ 2008.439246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2008.448593] Call Trace:
[ 2008.451171]  dump_stack+0x1fc/0x2fe
[ 2008.454790]  should_fail.cold+0xa/0x14
[ 2008.458662]  ? setup_fault_attr+0x200/0x200
[ 2008.462968]  ? lock_acquire+0x170/0x3c0
[ 2008.466932]  __should_failslab+0x115/0x180
[ 2008.471154]  should_failslab+0x5/0xf
[ 2008.474865]  __kmalloc_track_caller+0x2a6/0x3c0
[ 2008.479521]  ? __request_module+0x33c/0xb7e
[ 2008.483827]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[ 2008.488832]  kstrdup+0x36/0x70
[ 2008.492011]  __request_module+0x33c/0xb7e
[ 2008.496150]  ? ctnetlink_create_conntrack+0xd21/0x12c0
[ 2008.501410]  ? free_modprobe_argv+0x90/0x90
[ 2008.505720]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[ 2008.510902]  ? validate_nla+0x270/0x820
[ 2008.514864]  ? nla_parse+0x1b2/0x290
[ 2008.518564]  ? ctnetlink_create_conntrack+0xce4/0x12c0
[ 2008.523830]  ? ctnetlink_stat_ct+0x6f0/0x6f0
[ 2008.528223]  ? lock_downgrade+0x720/0x720
[ 2008.532365]  ctnetlink_create_conntrack+0xd21/0x12c0
[ 2008.537458]  ? ctnetlink_change_synproxy.isra.0+0x380/0x380
[ 2008.543153]  ? hash_conntrack_raw+0x2d6/0x460
[ 2008.547632]  ? nf_ct_get_tuplepr+0x310/0x310
[ 2008.552047]  ? nf_ct_gc_expired+0x300/0x300
[ 2008.556356]  ? nfnetlink_rcv_msg+0x98d/0xf60
[ 2008.560759]  ctnetlink_new_conntrack+0x4f3/0xde0
[ 2008.565510]  ? ctnetlink_create_conntrack+0x12c0/0x12c0
[ 2008.570861]  ? nfnetlink_rcv_msg+0x98d/0xf60
[ 2008.575266]  ? netlink_deliver_tap+0x8fb/0xb00
[ 2008.579839]  ? nfnetlink_rcv_msg+0x95a/0xf60
[ 2008.584244]  ? ctnetlink_create_conntrack+0x12c0/0x12c0
[ 2008.589611]  nfnetlink_rcv_msg+0xc4f/0xf60
[ 2008.593846]  ? nfnetlink_net_exit_batch+0x150/0x150
[ 2008.598868]  ? cred_has_capability.isra.0+0x139/0x2b0
[ 2008.604043]  ? cred_has_capability.isra.0+0x1b0/0x2b0
[ 2008.609230]  ? check_nnp_nosuid.isra.0+0x2a0/0x2a0
[ 2008.614150]  ? check_nnp_nosuid.isra.0+0x2a0/0x2a0
[ 2008.619069]  netlink_rcv_skb+0x160/0x440
[ 2008.623115]  ? nfnetlink_net_exit_batch+0x150/0x150
[ 2008.628113]  ? netlink_ack+0xae0/0xae0
[ 2008.631988]  ? ns_capable+0xde/0x100
[ 2008.635688]  nfnetlink_rcv+0x1b2/0x41b
[ 2008.639561]  ? nfnetlink_rcv_batch+0x1df0/0x1df0
[ 2008.644309]  netlink_unicast+0x4d5/0x690
[ 2008.648360]  ? netlink_sendskb+0x110/0x110
[ 2008.652600]  netlink_sendmsg+0x6bb/0xc40
[ 2008.656668]  ? nlmsg_notify+0x1a0/0x1a0
[ 2008.660634]  ? kernel_recvmsg+0x220/0x220
[ 2008.664781]  ? nlmsg_notify+0x1a0/0x1a0
[ 2008.668748]  sock_sendmsg+0xc3/0x120
[ 2008.672453]  ___sys_sendmsg+0x7bb/0x8e0
[ 2008.676425]  ? copy_msghdr_from_user+0x440/0x440
[ 2008.681169]  ? __fget+0x32f/0x510
[ 2008.684612]  ? lock_downgrade+0x720/0x720
[ 2008.688744]  ? check_preemption_disabled+0x41/0x280
[ 2008.693754]  ? check_preemption_disabled+0x41/0x280
[ 2008.698756]  ? __fget+0x356/0x510
[ 2008.702195]  ? do_dup2+0x450/0x450
[ 2008.705718]  ? lock_downgrade+0x720/0x720
[ 2008.709862]  ? vfs_write+0x3d7/0x540
[ 2008.713563]  ? __fdget+0x1d0/0x230
[ 2008.717090]  __x64_sys_sendmsg+0x132/0x220
[ 2008.721308]  ? __sys_sendmsg+0x1b0/0x1b0
[ 2008.725351]  ? vfs_write+0x393/0x540
[ 2008.729057]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2008.733797]  ? trace_hardirqs_off_caller+0x69/0x210
[ 2008.738797]  ? do_syscall_64+0x21/0x620
[ 2008.742757]  do_syscall_64+0xf9/0x620
[ 2008.746546]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2008.751717] RIP: 0033:0x45c1d9
[ 2008.754892] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2008.773774] RSP: 002b:00007f2e10243c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2008.781460] RAX: ffffffffffffffda RBX: 00000000000273c0 RCX: 000000000045c1d9
[ 2008.788724] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003
[ 2008.795979] RBP: 00007f2e10243ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2008.803244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[ 2008.810493] R13: 00007ffdd3ef9cdf R14: 00007f2e102449c0 R15: 000000000078bf0c
[ 2009.212311] Bluetooth: hci0: command 0x1003 tx timeout
[ 2009.217774] Bluetooth: hci0: sending frame failed (-49)
[ 2010.002288] Bluetooth: hci1: command 0x1003 tx timeout
[ 2010.007663] Bluetooth: hci1: sending frame failed (-49)
[ 2011.282260] Bluetooth: hci0: command 0x1001 tx timeout
[ 2011.287643] Bluetooth: hci0: sending frame failed (-49)
[ 2012.082143] Bluetooth: hci1: command 0x1001 tx timeout
[ 2012.087569] Bluetooth: hci1: sending frame failed (-49)
[ 2013.372045] Bluetooth: hci0: command 0x1009 tx timeout
[ 2014.162004] Bluetooth: hci1: command 0x1009 tx timeout
02:46:42 executing program 4 (fault-call:1 fault-nth:6):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:46:42 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x180]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:42 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:42 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x3, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:46:42 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0xffffffea}}}}, 0x100c)

02:46:42 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x19c]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2017.752475] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2017.772091] xt_nfacct: accounting object `syz1' does not exists
[ 2017.776016] FAULT_INJECTION: forcing a failure.
[ 2017.776016] name failslab, interval 1, probability 0, space 0, times 0
[ 2017.801198] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2017.818043] CPU: 0 PID: 24410 Comm: syz-executor.4 Not tainted 4.19.133-syzkaller #0
[ 2017.825942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2017.835295] Call Trace:
[ 2017.837893]  dump_stack+0x1fc/0x2fe
[ 2017.841541]  should_fail.cold+0xa/0x14
[ 2017.845441]  ? setup_fault_attr+0x200/0x200
[ 2017.849770]  ? lock_acquire+0x170/0x3c0
[ 2017.853755]  __should_failslab+0x115/0x180
[ 2017.857974]  should_failslab+0x5/0xf
[ 2017.861674]  kmem_cache_alloc_trace+0x284/0x380
[ 2017.866328]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[ 2017.871340]  ? dec_ucount+0x200/0x200
[ 2017.875128]  call_usermodehelper_setup+0x84/0x300
[ 2017.879958]  __request_module+0x42e/0xb7e
[ 2017.884094]  ? ctnetlink_create_conntrack+0xd21/0x12c0
[ 2017.889353]  ? free_modprobe_argv+0x90/0x90
[ 2017.893660]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[ 2017.898846]  ? validate_nla+0x270/0x820
[ 2017.902820]  ? nla_parse+0x1b2/0x290
[ 2017.906518]  ? ctnetlink_create_conntrack+0xce4/0x12c0
[ 2017.911785]  ? ctnetlink_stat_ct+0x6f0/0x6f0
[ 2017.916177]  ? lock_downgrade+0x720/0x720
[ 2017.920316]  ctnetlink_create_conntrack+0xd21/0x12c0
[ 2017.925408]  ? ctnetlink_change_synproxy.isra.0+0x380/0x380
[ 2017.931102]  ? hash_conntrack_raw+0x2d6/0x460
[ 2017.935582]  ? nf_ct_get_tuplepr+0x310/0x310
[ 2017.939973]  ? nf_ct_gc_expired+0x300/0x300
[ 2017.944278]  ? nfnetlink_rcv_msg+0x98d/0xf60
[ 2017.948675]  ctnetlink_new_conntrack+0x4f3/0xde0
[ 2017.953417]  ? ctnetlink_create_conntrack+0x12c0/0x12c0
[ 2017.958765]  ? nfnetlink_rcv_msg+0x98d/0xf60
[ 2017.963155]  ? netlink_deliver_tap+0x8fb/0xb00
[ 2017.967722]  ? nfnetlink_rcv_msg+0x95a/0xf60
[ 2017.972122]  ? ctnetlink_create_conntrack+0x12c0/0x12c0
[ 2017.977472]  nfnetlink_rcv_msg+0xc4f/0xf60
[ 2017.981702]  ? nfnetlink_net_exit_batch+0x150/0x150
[ 2017.986722]  ? cred_has_capability.isra.0+0x139/0x2b0
[ 2017.991895]  ? cred_has_capability.isra.0+0x1b0/0x2b0
[ 2017.997070]  ? check_nnp_nosuid.isra.0+0x2a0/0x2a0
[ 2018.001987]  ? check_nnp_nosuid.isra.0+0x2a0/0x2a0
[ 2018.006901]  netlink_rcv_skb+0x160/0x440
[ 2018.010947]  ? nfnetlink_net_exit_batch+0x150/0x150
[ 2018.015958]  ? netlink_ack+0xae0/0xae0
[ 2018.019835]  ? ns_capable+0xde/0x100
[ 2018.023540]  nfnetlink_rcv+0x1b2/0x41b
[ 2018.027411]  ? nfnetlink_rcv_batch+0x1df0/0x1df0
[ 2018.032166]  netlink_unicast+0x4d5/0x690
[ 2018.036225]  ? netlink_sendskb+0x110/0x110
[ 2018.040448]  netlink_sendmsg+0x6bb/0xc40
[ 2018.044496]  ? nlmsg_notify+0x1a0/0x1a0
[ 2018.048469]  ? kernel_recvmsg+0x220/0x220
[ 2018.052605]  ? nlmsg_notify+0x1a0/0x1a0
[ 2018.056561]  sock_sendmsg+0xc3/0x120
[ 2018.060273]  ___sys_sendmsg+0x7bb/0x8e0
[ 2018.064238]  ? copy_msghdr_from_user+0x440/0x440
[ 2018.068978]  ? __fget+0x32f/0x510
[ 2018.072420]  ? lock_downgrade+0x720/0x720
[ 2018.076551]  ? check_preemption_disabled+0x41/0x280
[ 2018.081550]  ? check_preemption_disabled+0x41/0x280
[ 2018.086553]  ? __fget+0x356/0x510
[ 2018.090004]  ? do_dup2+0x450/0x450
[ 2018.093532]  ? lock_downgrade+0x720/0x720
[ 2018.097676]  ? vfs_write+0x3d7/0x540
[ 2018.101378]  ? __fdget+0x1d0/0x230
[ 2018.104904]  __x64_sys_sendmsg+0x132/0x220
[ 2018.109120]  ? __sys_sendmsg+0x1b0/0x1b0
[ 2018.113162]  ? vfs_write+0x393/0x540
[ 2018.116865]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2018.121619]  ? trace_hardirqs_off_caller+0x69/0x210
[ 2018.126620]  ? do_syscall_64+0x21/0x620
[ 2018.130580]  do_syscall_64+0xf9/0x620
[ 2018.134368]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2018.139549] RIP: 0033:0x45c1d9
[ 2018.142728] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2018.161612] RSP: 002b:00007f2e10243c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2018.169312] RAX: ffffffffffffffda RBX: 00000000000273c0 RCX: 000000000045c1d9
[ 2018.176562] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003
[ 2018.183811] RBP: 00007f2e10243ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2018.191063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[ 2018.198316] R13: 00007ffdd3ef9cdf R14: 00007f2e102449c0 R15: 000000000078bf0c
[ 2018.264992] xt_nfacct: accounting object `syz1' does not exists
[ 2018.276579] xt_nfacct: accounting object `syz1' does not exists
02:46:43 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

02:46:43 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x4, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:46:43 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x1e0]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:43 executing program 4 (fault-call:1 fault-nth:7):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:46:43 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x1f9]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2018.398222] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2018.404687] xt_nfacct: accounting object `syz1' does not exists
[ 2018.470409] FAULT_INJECTION: forcing a failure.
[ 2018.470409] name failslab, interval 1, probability 0, space 0, times 0
[ 2018.500898] xt_nfacct: accounting object `syz1' does not exists
[ 2018.509598] CPU: 0 PID: 24433 Comm: syz-executor.4 Not tainted 4.19.133-syzkaller #0
02:46:43 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x23, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2018.517499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2018.526959] Call Trace:
[ 2018.529559]  dump_stack+0x1fc/0x2fe
[ 2018.533203]  should_fail.cold+0xa/0x14
[ 2018.537102]  ? setup_fault_attr+0x200/0x200
[ 2018.541439]  ? lock_acquire+0x170/0x3c0
[ 2018.545432]  __should_failslab+0x115/0x180
[ 2018.549677]  should_failslab+0x5/0xf
[ 2018.553398]  kmem_cache_alloc_node+0x245/0x3b0
[ 2018.557993]  __alloc_skb+0x71/0x560
[ 2018.561636]  netlink_ack+0x27d/0xae0
[ 2018.565364]  ? netlink_sendmsg+0xc40/0xc40
[ 2018.569607]  ? check_nnp_nosuid.isra.0+0x2a0/0x2a0
[ 2018.574542]  ? check_nnp_nosuid.isra.0+0x2a0/0x2a0
[ 2018.579485]  netlink_rcv_skb+0x353/0x440
[ 2018.583557]  ? nfnetlink_net_exit_batch+0x150/0x150
[ 2018.588654]  ? netlink_ack+0xae0/0xae0
[ 2018.592556]  ? ns_capable+0xde/0x100
[ 2018.596282]  nfnetlink_rcv+0x1b2/0x41b
[ 2018.600180]  ? nfnetlink_rcv_batch+0x1df0/0x1df0
[ 2018.604953]  netlink_unicast+0x4d5/0x690
[ 2018.609024]  ? netlink_sendskb+0x110/0x110
[ 2018.613275]  netlink_sendmsg+0x6bb/0xc40
02:46:43 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x210]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:43 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x21e]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2018.617351]  ? nlmsg_notify+0x1a0/0x1a0
[ 2018.621331]  ? kernel_recvmsg+0x220/0x220
[ 2018.625495]  ? nlmsg_notify+0x1a0/0x1a0
[ 2018.629497]  sock_sendmsg+0xc3/0x120
[ 2018.633218]  ___sys_sendmsg+0x7bb/0x8e0
[ 2018.635521] xt_nfacct: accounting object `syz1' does not exists
[ 2018.637199]  ? copy_msghdr_from_user+0x440/0x440
[ 2018.637220]  ? __fget+0x32f/0x510
[ 2018.637241]  ? lock_downgrade+0x720/0x720
[ 2018.637257]  ? check_preemption_disabled+0x41/0x280
[ 2018.660655]  ? check_preemption_disabled+0x41/0x280
[ 2018.665686]  ? __fget+0x356/0x510
[ 2018.666827] xt_nfacct: accounting object `syz1' does not exists
[ 2018.669153]  ? do_dup2+0x450/0x450
[ 2018.669170]  ? lock_downgrade+0x720/0x720
[ 2018.669187]  ? vfs_write+0x3d7/0x540
[ 2018.669208]  ? __fdget+0x1d0/0x230
[ 2018.690148]  __x64_sys_sendmsg+0x132/0x220
[ 2018.694395]  ? __sys_sendmsg+0x1b0/0x1b0
[ 2018.698463]  ? vfs_write+0x393/0x540
[ 2018.702196]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2018.706966]  ? trace_hardirqs_off_caller+0x69/0x210
[ 2018.711991]  ? do_syscall_64+0x21/0x620
[ 2018.715959]  do_syscall_64+0xf9/0x620
[ 2018.719756]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2018.724936] RIP: 0033:0x45c1d9
[ 2018.728112] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2018.746995] RSP: 002b:00007f2e10243c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2018.754690] RAX: ffffffffffffffda RBX: 00000000000273c0 RCX: 000000000045c1d9
[ 2018.761950] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003
[ 2018.769210] RBP: 00007f2e10243ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2018.776469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[ 2018.783736] R13: 00007ffdd3ef9cdf R14: 00007f2e102449c0 R15: 000000000078bf0c
[ 2019.841691] Bluetooth: hci0: command 0x1003 tx timeout
[ 2019.847143] Bluetooth: hci0: sending frame failed (-49)
[ 2020.561611] Bluetooth: hci1: command 0x1003 tx timeout
[ 2020.567048] Bluetooth: hci1: sending frame failed (-49)
[ 2021.921525] Bluetooth: hci0: command 0x1001 tx timeout
[ 2021.928258] Bluetooth: hci0: sending frame failed (-49)
[ 2022.641385] Bluetooth: hci1: command 0x1001 tx timeout
[ 2022.646824] Bluetooth: hci1: sending frame failed (-49)
[ 2024.001379] Bluetooth: hci0: command 0x1009 tx timeout
[ 2024.721224] Bluetooth: hci1: command 0x1009 tx timeout
02:46:52 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)

02:46:52 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x23e]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:52 executing program 4 (fault-call:1 fault-nth:8):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:46:52 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x41, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2027.997243] xt_nfacct: accounting object `syz1' does not exists
[ 2028.006159] xt_nfacct: accounting object `syz1' does not exists
[ 2028.015096] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2028.033186] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2028.061338] FAULT_INJECTION: forcing a failure.
[ 2028.061338] name failslab, interval 1, probability 0, space 0, times 0
[ 2028.077182] CPU: 0 PID: 24488 Comm: syz-executor.4 Not tainted 4.19.133-syzkaller #0
[ 2028.085080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2028.094425] Call Trace:
[ 2028.096999]  dump_stack+0x1fc/0x2fe
[ 2028.100613]  should_fail.cold+0xa/0x14
[ 2028.104570]  ? setup_fault_attr+0x200/0x200
[ 2028.108875]  ? lock_acquire+0x170/0x3c0
[ 2028.112837]  __should_failslab+0x115/0x180
[ 2028.117063]  should_failslab+0x5/0xf
[ 2028.120759]  kmem_cache_alloc_node_trace+0x244/0x3b0
[ 2028.125849]  __kmalloc_node_track_caller+0x38/0x70
[ 2028.130809]  __alloc_skb+0xae/0x560
[ 2028.134423]  netlink_ack+0x27d/0xae0
[ 2028.138125]  ? netlink_sendmsg+0xc40/0xc40
[ 2028.142344]  ? check_nnp_nosuid.isra.0+0x2a0/0x2a0
[ 2028.147253]  ? check_nnp_nosuid.isra.0+0x2a0/0x2a0
[ 2028.152169]  netlink_rcv_skb+0x353/0x440
[ 2028.156215]  ? nfnetlink_net_exit_batch+0x150/0x150
[ 2028.161253]  ? netlink_ack+0xae0/0xae0
[ 2028.165125]  ? ns_capable+0xde/0x100
[ 2028.168834]  nfnetlink_rcv+0x1b2/0x41b
[ 2028.172709]  ? nfnetlink_rcv_batch+0x1df0/0x1df0
[ 2028.177457]  netlink_unicast+0x4d5/0x690
[ 2028.181503]  ? netlink_sendskb+0x110/0x110
[ 2028.185723]  netlink_sendmsg+0x6bb/0xc40
[ 2028.189767]  ? nlmsg_notify+0x1a0/0x1a0
[ 2028.193721]  ? kernel_recvmsg+0x220/0x220
[ 2028.197854]  ? nlmsg_notify+0x1a0/0x1a0
[ 2028.201812]  sock_sendmsg+0xc3/0x120
[ 2028.205508]  ___sys_sendmsg+0x7bb/0x8e0
[ 2028.209464]  ? copy_msghdr_from_user+0x440/0x440
[ 2028.214209]  ? __fget+0x32f/0x510
[ 2028.217648]  ? lock_downgrade+0x720/0x720
[ 2028.221776]  ? check_preemption_disabled+0x41/0x280
[ 2028.226774]  ? check_preemption_disabled+0x41/0x280
[ 2028.231776]  ? __fget+0x356/0x510
[ 2028.235212]  ? do_dup2+0x450/0x450
[ 2028.238731]  ? lock_downgrade+0x720/0x720
[ 2028.242864]  ? vfs_write+0x3d7/0x540
[ 2028.246563]  ? __fdget+0x1d0/0x230
[ 2028.250093]  __x64_sys_sendmsg+0x132/0x220
[ 2028.254309]  ? __sys_sendmsg+0x1b0/0x1b0
[ 2028.258352]  ? vfs_write+0x393/0x540
[ 2028.262052]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2028.266785]  ? trace_hardirqs_off_caller+0x69/0x210
[ 2028.271781]  ? do_syscall_64+0x21/0x620
[ 2028.275751]  do_syscall_64+0xf9/0x620
[ 2028.279554]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2028.284730] RIP: 0033:0x45c1d9
[ 2028.287910] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2028.306802] RSP: 002b:00007f2e10243c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2028.314614] RAX: ffffffffffffffda RBX: 00000000000273c0 RCX: 000000000045c1d9
[ 2028.321873] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003
[ 2028.329133] RBP: 00007f2e10243ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2028.336384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[ 2028.343634] R13: 00007ffdd3ef9cdf R14: 00007f2e102449c0 R15: 000000000078bf0c
02:46:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

02:46:53 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}}, 0x100c)

02:46:53 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x280]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:53 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x46, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:46:53 executing program 4 (fault-call:1 fault-nth:9):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2028.608289] xt_nfacct: accounting object `syz1' does not exists
[ 2028.615867] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2028.635058] xt_nfacct: accounting object `syz1' does not exists
[ 2028.643012] Bluetooth: hci1: Frame reassembly failed (-84)
02:46:53 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x290]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2028.724296] FAULT_INJECTION: forcing a failure.
[ 2028.724296] name failslab, interval 1, probability 0, space 0, times 0
[ 2028.748334] CPU: 0 PID: 24505 Comm: syz-executor.4 Not tainted 4.19.133-syzkaller #0
[ 2028.756329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2028.762015] xt_nfacct: accounting object `syz1' does not exists
[ 2028.765679] Call Trace:
[ 2028.765708]  dump_stack+0x1fc/0x2fe
[ 2028.765732]  should_fail.cold+0xa/0x14
[ 2028.765749]  ? setup_fault_attr+0x200/0x200
[ 2028.765767]  ? HARDIRQ_verbose+0x10/0x10
[ 2028.790232]  __should_failslab+0x115/0x180
[ 2028.794474]  should_failslab+0x5/0xf
[ 2028.798200]  kmem_cache_alloc+0x3f/0x370
[ 2028.802271]  skb_clone+0x151/0x3d0
[ 2028.805816]  netlink_deliver_tap+0x955/0xb00
[ 2028.810239]  netlink_sendskb+0x6c/0x110
[ 2028.814222]  netlink_unicast+0x5b3/0x690
[ 2028.818284]  ? netlink_sendskb+0x110/0x110
[ 2028.822521]  ? memset+0x20/0x40
[ 2028.825803]  ? __nlmsg_put+0x155/0x1c0
[ 2028.829700]  netlink_ack+0x628/0xae0
[ 2028.833421]  ? netlink_sendmsg+0xc40/0xc40
[ 2028.837663]  ? check_nnp_nosuid.isra.0+0x2a0/0x2a0
[ 2028.842597]  ? check_nnp_nosuid.isra.0+0x2a0/0x2a0
[ 2028.847538]  netlink_rcv_skb+0x353/0x440
[ 2028.851607]  ? nfnetlink_net_exit_batch+0x150/0x150
[ 2028.856628]  ? netlink_ack+0xae0/0xae0
[ 2028.860525]  ? ns_capable+0xde/0x100
[ 2028.864250]  nfnetlink_rcv+0x1b2/0x41b
[ 2028.868140]  ? nfnetlink_rcv_batch+0x1df0/0x1df0
[ 2028.872906]  netlink_unicast+0x4d5/0x690
[ 2028.876971]  ? netlink_sendskb+0x110/0x110
[ 2028.881222]  netlink_sendmsg+0x6bb/0xc40
[ 2028.885294]  ? nlmsg_notify+0x1a0/0x1a0
[ 2028.889272]  ? kernel_recvmsg+0x220/0x220
[ 2028.893431]  ? nlmsg_notify+0x1a0/0x1a0
[ 2028.897413]  sock_sendmsg+0xc3/0x120
[ 2028.901132]  ___sys_sendmsg+0x7bb/0x8e0
[ 2028.905112]  ? copy_msghdr_from_user+0x440/0x440
[ 2028.909875]  ? __fget+0x32f/0x510
[ 2028.913337]  ? lock_downgrade+0x720/0x720
[ 2028.917484]  ? check_preemption_disabled+0x41/0x280
[ 2028.922507]  ? check_preemption_disabled+0x41/0x280
[ 2028.927535]  ? __fget+0x356/0x510
[ 2028.930998]  ? do_dup2+0x450/0x450
[ 2028.934540]  ? lock_downgrade+0x720/0x720
[ 2028.938699]  ? vfs_write+0x3d7/0x540
[ 2028.942422]  ? __fdget+0x1d0/0x230
[ 2028.945972]  __x64_sys_sendmsg+0x132/0x220
[ 2028.950210]  ? __sys_sendmsg+0x1b0/0x1b0
[ 2028.954277]  ? vfs_write+0x393/0x540
[ 2028.958010]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 2028.962767]  ? trace_hardirqs_off_caller+0x69/0x210
[ 2028.967786]  ? do_syscall_64+0x21/0x620
[ 2028.971770]  do_syscall_64+0xf9/0x620
02:46:53 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x2a6]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:46:53 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x2, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2028.975578]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2028.980763] RIP: 0033:0x45c1d9
[ 2028.983954] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2029.002850] RSP: 002b:00007f2e10243c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2029.010560] RAX: ffffffffffffffda RBX: 00000000000273c0 RCX: 000000000045c1d9
[ 2029.017832] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003
[ 2029.023358] xt_nfacct: accounting object `syz1' does not exists
[ 2029.025097] RBP: 00007f2e10243ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2029.025106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[ 2029.025116] R13: 00007ffdd3ef9cdf R14: 00007f2e102449c0 R15: 000000000078bf0c
[ 2029.058107] xt_nfacct: accounting object `syz1' does not exists
[ 2030.080945] Bluetooth: hci0: command 0x1003 tx timeout
[ 2030.086343] Bluetooth: hci0: sending frame failed (-49)
[ 2030.730935] Bluetooth: hci1: command 0x1003 tx timeout
[ 2030.736319] Bluetooth: hci1: sending frame failed (-49)
[ 2032.160840] Bluetooth: hci0: command 0x1001 tx timeout
[ 2032.166218] Bluetooth: hci0: sending frame failed (-49)
[ 2032.800812] Bluetooth: hci1: command 0x1001 tx timeout
[ 2032.806210] Bluetooth: hci1: sending frame failed (-49)
[ 2034.240686] Bluetooth: hci0: command 0x1009 tx timeout
[ 2034.880732] Bluetooth: hci1: command 0x1009 tx timeout
02:47:03 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x19)

02:47:03 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x2b8]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:03 executing program 4 (fault-call:1 fault-nth:10):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:03 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x4, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2038.217096] xt_nfacct: accounting object `syz1' does not exists
[ 2038.227214] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2038.244916] Bluetooth: hci0: Frame reassembly failed (-84)
02:47:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x19)

02:47:03 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}}, 0x100c)

02:47:03 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x300]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:03 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:03 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x21, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2038.848881] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2038.855307] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2038.872929] xt_nfacct: accounting object `syz1' does not exists
[ 2038.874241] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:03 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x320]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:03 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2038.902663] xt_nfacct: accounting object `syz1' does not exists
02:47:03 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x4000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2038.987216] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2038.996364] xt_nfacct: accounting object `syz1' does not exists
[ 2039.018875] xt_nfacct: accounting object `syz1' does not exists
02:47:05 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x19)

02:47:05 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x35c]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:05 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x2, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:05 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x7900, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2040.320038] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2040.320077] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2040.368110] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2040.376275] xt_nfacct: accounting object `syz1' does not exists
02:47:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x19)

02:47:05 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp}}}, 0x100c)

02:47:05 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x36a]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:05 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x3, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:05 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0xb900, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2040.880063] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2040.880081] Bluetooth: hci1: command 0xfc11 tx timeout
[ 2040.927577] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2040.957307] xt_nfacct: accounting object `syz1' does not exists
[ 2040.965269] Bluetooth: hci1: sending frame failed (-49)
02:47:05 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:05 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x39d]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2041.001062] xt_nfacct: accounting object `syz1' does not exists
[ 2041.029577] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:06 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x34000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2041.046575] xt_nfacct: accounting object `syz1' does not exists
02:47:07 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x19)

02:47:07 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x3b8]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:07 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:07 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x400000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2042.399814] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2042.399850] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2042.455322] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2042.474519] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2042.482328] xt_nfacct: accounting object `syz1' does not exists
02:47:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x19)

02:47:07 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0x100c)

02:47:07 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x3d2]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:07 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x6, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:07 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x400300, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2042.959789] Bluetooth: hci1: Entering manufacturer mode failed (-110)
02:47:08 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x7, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:08 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x600]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2043.028857] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:08 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x53f000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2043.110693] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2043.118459] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:09 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, 0x0)

02:47:09 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x1002]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:09 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:09 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x6b6b6b, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2044.479546] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2044.479562] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2044.539364] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2044.543704] nfacct_mt_checkentry: 5 callbacks suppressed
[ 2044.543711] xt_nfacct: accounting object `syz1' does not exists
[ 2044.572401] Bluetooth: hci0: Frame reassembly failed (-84)
02:47:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, 0x0)

02:47:10 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}, 0x100c)

02:47:10 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xa, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:10 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x1e02]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:10 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x73f000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2045.119502] Bluetooth: hci1: command 0xfc11 tx timeout
[ 2045.119509] Bluetooth: hci1: Entering manufacturer mode failed (-110)
02:47:10 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x2003]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2045.180999] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2045.198386] xt_nfacct: accounting object `syz1' does not exists
[ 2045.214913] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:10 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:10 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x3e02]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2045.266107] xt_nfacct: accounting object `syz1' does not exists
[ 2045.296061] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2045.338621] xt_nfacct: accounting object `syz1' does not exists
02:47:11 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, 0x0)

02:47:11 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x748000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:11 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xe, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:11 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x3f00]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2046.639330] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2046.693660] xt_nfacct: accounting object `syz1' does not exists
[ 2046.699988] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2046.722370] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2046.733596] xt_nfacct: accounting object `syz1' does not exists
02:47:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, 0x0)

02:47:12 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}}, 0x100c)

02:47:12 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x4000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:12 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x48, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:12 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x790000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2047.209257] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2047.215975] Bluetooth: hci1: command tx timeout
02:47:12 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x4c01]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2047.278396] xt_nfacct: accounting object `syz1' does not exists
[ 2047.284366] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:12 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x5c03]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:12 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x4c, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2047.320711] xt_nfacct: accounting object `syz1' does not exists
[ 2047.396551] xt_nfacct: accounting object `syz1' does not exists
[ 2047.400021] Bluetooth: hci1: sending frame failed (-49)
[ 2047.413908] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:13 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, 0x0)

02:47:13 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x807400, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:13 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x6a03]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:13 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x60, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2048.799104] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2048.799175] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2048.854205] xt_nfacct: accounting object `syz1' does not exists
[ 2048.865344] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2048.884458] Bluetooth: hci0: Frame reassembly failed (-84)
02:47:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, 0x0)

02:47:14 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}}, 0x100c)

02:47:14 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x7e01]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:14 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x68, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:14 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0xb90000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2049.439168] Bluetooth: hci1: command 0xfc11 tx timeout
[ 2049.444554] Bluetooth: hci1: Entering manufacturer mode failed (-110)
02:47:14 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x8002]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2049.510500] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2049.524908] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2049.532766] Bluetooth: hci1: Frame reassembly failed (-84)
02:47:14 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x9002]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:14 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x6c, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2049.580161] nfacct_mt_checkentry: 1 callbacks suppressed
[ 2049.580168] xt_nfacct: accounting object `syz1' does not exists
[ 2049.658167] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2049.659790] xt_nfacct: accounting object `syz1' does not exists
[ 2049.685054] xt_nfacct: accounting object `syz1' does not exists
02:47:15 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))

02:47:15 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0xf05300, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:15 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x9c01]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:15 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x74, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2050.958886] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2050.958891] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2051.017155] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2051.019238] xt_nfacct: accounting object `syz1' does not exists
[ 2051.054903] Bluetooth: hci0: Frame reassembly failed (-84)
02:47:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))

02:47:16 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}}, 0x100c)

02:47:16 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x9d03]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:16 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x7a, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:16 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0xf07300, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2051.598895] Bluetooth: hci1: command 0xfc11 tx timeout
[ 2051.608759] Bluetooth: hci1: Entering manufacturer mode failed (-110)
02:47:16 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0xa602]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2051.662799] xt_nfacct: accounting object `syz1' does not exists
[ 2051.678826] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2051.681381] xt_nfacct: accounting object `syz1' does not exists
02:47:16 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xf0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:16 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0xb802]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2051.726675] xt_nfacct: accounting object `syz1' does not exists
[ 2051.822181] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2051.866347] xt_nfacct: accounting object `syz1' does not exists
[ 2051.886748] xt_nfacct: accounting object `syz1' does not exists
02:47:18 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}}, 0x100c)

02:47:18 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:18 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x300, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:18 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0xb803]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2053.118630] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2053.118672] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2053.179832] xt_nfacct: accounting object `syz1' does not exists
[ 2053.186993] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:18 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}}}, 0x100c)

02:47:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

02:47:18 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0xd203]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:18 executing program 1 (fault-call:6 fault-nth:0):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))

02:47:18 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:18 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x500, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2053.848518] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2053.848524] Bluetooth: hci1: command 0xfc11 tx timeout
02:47:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x19)

[ 2053.933116] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2053.952354] Bluetooth: hci0: Frame reassembly failed (-84)
02:47:18 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0xe001]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:18 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x4000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:19 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:19 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0xf400]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:19 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x700, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2054.095037] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2054.199812] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:19 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}}}}, 0x100c)

02:47:19 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x20000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:19 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0xf901]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2055.998304] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2056.008271] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2056.015012] FAULT_INJECTION: forcing a failure.
[ 2056.015012] name failslab, interval 1, probability 0, space 0, times 0
[ 2056.026333] CPU: 1 PID: 25061 Comm: syz-executor.1 Not tainted 4.19.133-syzkaller #0
[ 2056.034199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2056.043533] Call Trace:
[ 2056.046109]  dump_stack+0x1fc/0x2fe
[ 2056.049738]  should_fail.cold+0xa/0x14
[ 2056.053613]  ? setup_fault_attr+0x200/0x200
[ 2056.057919]  ? __mutex_unlock_slowpath+0xea/0x610
[ 2056.062742]  __should_failslab+0x115/0x180
[ 2056.066956]  should_failslab+0x5/0xf
[ 2056.070649]  kmem_cache_alloc_node+0x54/0x3b0
[ 2056.075127]  __alloc_skb+0x71/0x560
[ 2056.078741]  hci_sock_dev_event+0x184/0x5b0
[ 2056.083044]  ? hci_send_monitor_ctrl_event+0x520/0x520
[ 2056.088358]  hci_unregister_dev+0x24c/0x7f0
[ 2056.092714]  hci_uart_tty_close+0x1e9/0x240
[ 2056.097031]  ? hci_uart_close+0x50/0x50
[ 2056.100997]  tty_ldisc_close+0xa2/0xd0
[ 2056.104876]  tty_set_ldisc+0x1fe/0x650
[ 2056.108745]  tty_ioctl+0xb4b/0x15c0
[ 2056.112361]  ? tty_fasync+0x300/0x300
[ 2056.116142]  ? get_pid_task+0xf4/0x190
[ 2056.120011]  ? mark_held_locks+0xf0/0xf0
[ 2056.124053]  ? perf_trace_lock_acquire+0xef/0x530
[ 2056.128878]  ? perf_trace_lock_acquire+0xef/0x530
[ 2056.133709]  ? HARDIRQ_verbose+0x10/0x10
[ 2056.137772]  ? nft_log_init+0x650/0x8b0
[ 2056.141729]  ? tty_fasync+0x300/0x300
[ 2056.145526]  do_vfs_ioctl+0xcdb/0x12e0
[ 2056.149404]  ? selinux_file_ioctl+0x506/0x6c0
[ 2056.153883]  ? ioctl_preallocate+0x200/0x200
[ 2056.158272]  ? selinux_inode_link+0x20/0x20
[ 2056.162576]  ? __fget+0x356/0x510
[ 2056.166049]  ? do_dup2+0x450/0x450
[ 2056.169615]  ? vfs_write+0x393/0x540
[ 2056.173320]  ksys_ioctl+0x9b/0xc0
[ 2056.176763]  __x64_sys_ioctl+0x6f/0xb0
[ 2056.180630]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 2056.185193]  do_syscall_64+0xf9/0x620
[ 2056.188982]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2056.194220] RIP: 0033:0x45c1d9
[ 2056.197393] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2056.216274] RSP: 002b:00007ff00b7bec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2056.223963] RAX: ffffffffffffffda RBX: 0000000000017900 RCX: 000000000045c1d9
[ 2056.231226] RDX: 00000000200001c0 RSI: 0000000000005423 RDI: 0000000000000005
[ 2056.238476] RBP: 00007ff00b7beca0 R08: 0000000000000000 R09: 0000000000000000
02:47:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0))

02:47:21 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xa00, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:21 executing program 3 (fault-call:3 fault-nth:0):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))

02:47:21 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x40000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:21 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x21000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:21 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}}}, 0x100c)

[ 2056.245723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2056.252973] R13: 00007ffd39640ddf R14: 00007ff00b7bf9c0 R15: 000000000078bf0c
[ 2056.334409] nfacct_mt_checkentry: 9 callbacks suppressed
[ 2056.334417] xt_nfacct: accounting object `syz1' does not exists
[ 2056.351560] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2056.360758] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2056.379099] Bluetooth: hci1: Frame reassembly failed (-84)
02:47:21 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x1000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2056.391997] xt_nfacct: accounting object `syz1' does not exists
02:47:21 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x6b6b6b00, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:21 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xc00, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:21 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x2000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2056.500059] xt_nfacct: accounting object `syz1' does not exists
02:47:21 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x3000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2056.541913] xt_nfacct: accounting object `syz1' does not exists
[ 2056.550240] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:21 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x6000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2056.601903] xt_nfacct: accounting object `syz1' does not exists
[ 2056.644706] xt_nfacct: accounting object `syz1' does not exists
[ 2058.398039] Bluetooth: hci1: command 0xfc11 tx timeout
[ 2058.398045] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2058.408260] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2058.411532] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2058.423021] FAULT_INJECTION: forcing a failure.
[ 2058.423021] name failslab, interval 1, probability 0, space 0, times 0
[ 2058.438239] CPU: 1 PID: 25132 Comm: syz-executor.3 Not tainted 4.19.133-syzkaller #0
[ 2058.446254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2058.455608] Call Trace:
[ 2058.458207]  dump_stack+0x1fc/0x2fe
[ 2058.461857]  should_fail.cold+0xa/0x14
[ 2058.465757]  ? setup_fault_attr+0x200/0x200
[ 2058.470094]  ? __mutex_unlock_slowpath+0xea/0x610
[ 2058.474939]  __should_failslab+0x115/0x180
[ 2058.479164]  should_failslab+0x5/0xf
[ 2058.482864]  kmem_cache_alloc_node+0x54/0x3b0
[ 2058.487349]  __alloc_skb+0x71/0x560
[ 2058.490965]  hci_sock_dev_event+0x184/0x5b0
[ 2058.495273]  ? hci_send_monitor_ctrl_event+0x520/0x520
[ 2058.500544]  hci_unregister_dev+0x24c/0x7f0
[ 2058.504856]  hci_uart_tty_close+0x1e9/0x240
[ 2058.509161]  ? hci_uart_close+0x50/0x50
[ 2058.513138]  tty_ldisc_close+0xa2/0xd0
[ 2058.517011]  tty_set_ldisc+0x1fe/0x650
[ 2058.520886]  tty_ioctl+0xb4b/0x15c0
[ 2058.524496]  ? tty_fasync+0x300/0x300
[ 2058.528283]  ? get_pid_task+0xf4/0x190
[ 2058.532248]  ? mark_held_locks+0xf0/0xf0
[ 2058.536299]  ? perf_trace_lock_acquire+0xef/0x530
[ 2058.541126]  ? perf_trace_lock_acquire+0xef/0x530
[ 2058.545957]  ? HARDIRQ_verbose+0x10/0x10
[ 2058.550003]  ? tty_fasync+0x300/0x300
[ 2058.553806]  do_vfs_ioctl+0xcdb/0x12e0
[ 2058.557679]  ? selinux_file_ioctl+0x506/0x6c0
[ 2058.562161]  ? ioctl_preallocate+0x200/0x200
[ 2058.566553]  ? selinux_inode_link+0x20/0x20
[ 2058.570862]  ? __fget+0x356/0x510
[ 2058.574298]  ? do_dup2+0x450/0x450
[ 2058.577821]  ? vfs_write+0x393/0x540
[ 2058.581526]  ksys_ioctl+0x9b/0xc0
[ 2058.584964]  __x64_sys_ioctl+0x6f/0xb0
[ 2058.588834]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[ 2058.593400]  do_syscall_64+0xf9/0x620
[ 2058.597198]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 2058.602380] RIP: 0033:0x45c1d9
[ 2058.605556] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2058.624450] RSP: 002b:00007fb566100c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2058.632142] RAX: ffffffffffffffda RBX: 0000000000017900 RCX: 000000000045c1d9
[ 2058.639392] RDX: 00000000200001c0 RSI: 0000000000005423 RDI: 0000000000000003
02:47:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x2, &(0x7f00000001c0))

02:47:23 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xe00, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2058.646647] RBP: 00007fb566100ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2058.653897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2058.661147] R13: 00007ffd7e9c563f R14: 00007fb5661019c0 R15: 000000000078bf0c
[ 2058.671388] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2058.677044] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2058.691181] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:23 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0))

02:47:23 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:23 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x10020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:23 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}}}, 0x100c)

02:47:23 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x4800, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2058.796857] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2058.806287] xt_nfacct: accounting object `syz1' does not exists
[ 2058.816956] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:23 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x1e020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:23 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x4c00, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2058.851051] xt_nfacct: accounting object `syz1' does not exists
02:47:23 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x2100000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:23 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x20030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2058.930733] xt_nfacct: accounting object `syz1' does not exists
[ 2058.945853] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2058.954786] xt_nfacct: accounting object `syz1' does not exists
02:47:23 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x6000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2059.045207] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x4b47, &(0x7f00000001c0))

02:47:25 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x3e020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2060.717955] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2060.717985] Bluetooth: hci1: command 0xfc11 tx timeout
02:47:25 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x2, &(0x7f00000001c0))

02:47:25 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x400000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:25 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x6800, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:25 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}}}, 0x100c)

02:47:25 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x3f000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2060.798115] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2060.865347] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:25 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x40000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:25 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x6c00, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:25 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x790000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:25 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x4c010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2060.989938] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:25 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x7400, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2061.086721] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2062.797544] Bluetooth: hci1: command 0xfc11 tx timeout
[ 2062.797657] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2062.825070] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2062.830974] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2062.957671] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2062.957678] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:47:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x4b49, &(0x7f00000001c0))

02:47:29 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x7f3122b12000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2064.877382] Bluetooth: hci1: command 0xfc11 tx timeout
[ 2064.877422] Bluetooth: hci1: Entering manufacturer mode failed (-110)
02:47:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x4b47, &(0x7f00000001c0))

02:47:30 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x5c030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:30 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x7a00, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:30 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}}}, 0x100c)

02:47:30 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x7fffffffefff, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2065.037472] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2065.037509] Bluetooth: hci0: command 0xfc11 tx timeout
02:47:30 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xf000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:30 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x6a030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2065.085926] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2065.102119] nfacct_mt_checkentry: 9 callbacks suppressed
[ 2065.102127] xt_nfacct: accounting object `syz1' does not exists
[ 2065.108012] xt_nfacct: accounting object `syz1' does not exists
02:47:30 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0xb90000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2065.168548] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2065.185066] Bluetooth: hci0: Frame reassembly failed (-84)
02:47:30 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x7e010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2065.230883] xt_nfacct: accounting object `syz1' does not exists
02:47:30 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xe0000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2065.312369] xt_nfacct: accounting object `syz1' does not exists
[ 2065.322928] xt_nfacct: accounting object `syz1' does not exists
[ 2065.350870] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2066.957103] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2066.957110] Bluetooth: hci1: command 0xfc11 tx timeout
[ 2066.987424] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2067.197084] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2067.197114] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:47:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5409, &(0x7f00000001c0))

02:47:34 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x80010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2069.036923] Bluetooth: hci1: command 0xfc11 tx timeout
[ 2069.036930] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2069.076203] xt_nfacct: accounting object `syz1' does not exists
[ 2069.082743] xt_nfacct: accounting object `syz1' does not exists
02:47:34 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x4b49, &(0x7f00000001c0))

02:47:34 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x20b122317f0000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:34 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xf0ffff, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:34 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfea}}}}, 0x100c)

02:47:34 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x80020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2069.276831] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2069.276852] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2069.329552] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2069.355444] xt_nfacct: accounting object `syz1' does not exists
[ 2069.363419] Bluetooth: hci0: Frame reassembly failed (-84)
02:47:34 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x1000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:34 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x40030000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:34 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x90020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2069.388624] xt_nfacct: accounting object `syz1' does not exists
02:47:34 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x2000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:34 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x9c010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2069.468260] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2069.477488] xt_nfacct: accounting object `syz1' does not exists
[ 2069.539445] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2071.116637] Bluetooth: hci1: command 0xfc11 tx timeout
[ 2071.126842] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2071.140142] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2071.436605] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:47:38 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x540b, &(0x7f00000001c0))

02:47:38 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0x9d030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2073.196533] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2073.196549] Bluetooth: hci1: command 0xfc11 tx timeout
[ 2073.235751] nfacct_mt_checkentry: 3 callbacks suppressed
[ 2073.235757] xt_nfacct: accounting object `syz1' does not exists
[ 2073.265335] Bluetooth: hci1: Frame reassembly failed (-84)
02:47:38 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5409, &(0x7f00000001c0))

02:47:38 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x3000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:38 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x6b6b6b00000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:38 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b00}}}}, 0x100c)

02:47:38 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0xa6020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2073.516439] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2073.516456] Bluetooth: hci0: command 0xfc11 tx timeout
02:47:38 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0xb8020000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2073.586828] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2073.600628] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2073.611827] xt_nfacct: accounting object `syz1' does not exists
02:47:38 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x4000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:38 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x80740000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:38 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0xb8030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2073.660160] xt_nfacct: accounting object `syz1' does not exists
02:47:38 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0xd2030000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2073.714036] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2073.729205] xt_nfacct: accounting object `syz1' does not exists
[ 2073.802503] xt_nfacct: accounting object `syz1' does not exists
[ 2073.809562] xt_nfacct: accounting object `syz1' does not exists
[ 2075.276290] Bluetooth: hci1: command 0xfc11 tx timeout
[ 2075.281765] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2075.596256] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2075.606171] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:47:42 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x540c, &(0x7f00000001c0))

02:47:42 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0xf0530000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2077.355955] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2077.356055] Bluetooth: hci1: command 0xfc11 tx timeout
[ 2077.412196] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2077.424980] Bluetooth: hci1: Frame reassembly failed (-84)
02:47:42 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x540b, &(0x7f00000001c0))

02:47:42 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x5000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:42 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0xe0010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:42 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea0f}}}}, 0x100c)

02:47:42 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0xf0730000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2077.675927] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2077.675953] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2077.740084] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2077.754566] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2077.770272] xt_nfacct: accounting object `syz1' does not exists
[ 2077.784443] xt_nfacct: accounting object `syz1' does not exists
02:47:42 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x100000000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:42 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0xf4000000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:42 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x6000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:42 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [0x0, 0x0, 0x0, 0xf9010000]}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2077.874565] xt_nfacct: accounting object `syz1' does not exists
[ 2077.921510] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2077.930259] xt_nfacct: accounting object `syz1' does not exists
02:47:42 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x7000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2078.000082] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x540d, &(0x7f00000001c0))

02:47:44 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2079.435786] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2079.442521] Bluetooth: hci1: command tx timeout
[ 2079.493636] nfacct_mt_checkentry: 1 callbacks suppressed
[ 2079.493643] xt_nfacct: accounting object `syz1' does not exists
[ 2079.519131] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2079.755727] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2079.774420] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2081.605570] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2081.605840] Bluetooth: hci1: command 0xfc11 tx timeout
02:47:46 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x540c, &(0x7f00000001c0))

02:47:46 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x200000000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:46 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x8000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:46 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}}, 0x100c)

02:47:46 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [], 0x2}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2081.835492] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2081.835498] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:47:46 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [], 0x3}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2081.889775] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2081.901168] xt_nfacct: accounting object `syz1' does not exists
02:47:46 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xa000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:46 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [], 0x4}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:46 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x400000000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2081.991001] xt_nfacct: accounting object `syz1' does not exists
[ 2082.004904] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:47 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xc000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2082.088115] xt_nfacct: accounting object `syz1' does not exists
[ 2082.103282] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:48 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5412, &(0x7f00000001c0))

02:47:48 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [], 0x6}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2083.675328] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2083.713476] xt_nfacct: accounting object `syz1' does not exists
[ 2083.739340] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2083.746877] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2083.995319] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2083.995347] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2085.755481] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2085.762208] Bluetooth: hci1: command tx timeout
[ 2085.784281] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2085.786434] Bluetooth: hci1: Frame reassembly failed (-84)
02:47:51 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x540d, &(0x7f00000001c0))

02:47:51 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xe000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:51 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x8000000000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:51 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}}}, 0x100c)

02:47:51 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [], 0xf4}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2086.075013] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:47:51 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [], 0x14c}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2086.138539] xt_nfacct: accounting object `syz1' does not exists
[ 2086.142634] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2086.160029] Bluetooth: hci0: Frame reassembly failed (-84)
02:47:51 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [], 0x17e}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:51 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0xffefffffff7f0000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2086.211248] xt_nfacct: accounting object `syz1' does not exists
02:47:51 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x48000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:51 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [], 0x180}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2086.289703] xt_nfacct: accounting object `syz1' does not exists
[ 2086.302095] xt_nfacct: accounting object `syz1' does not exists
[ 2086.323107] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2086.378147] xt_nfacct: accounting object `syz1' does not exists
02:47:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5413, &(0x7f00000001c0))

02:47:52 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x4c000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2087.835175] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2087.879985] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2088.234850] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2088.244868] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2089.914614] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2089.914921] Bluetooth: hci1: command 0xfc11 tx timeout
02:47:55 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000001c0))

02:47:55 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x23, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:55 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [], 0x19c}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:55 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}}}, 0x100c)

02:47:55 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x60000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2090.314550] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2090.324568] Bluetooth: hci0: Entering manufacturer mode failed (-110)
02:47:55 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [], 0x1e0}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2090.388760] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2090.395773] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2090.404011] xt_nfacct: accounting object `syz1' does not exists
[ 2090.421940] xt_nfacct: accounting object `syz1' does not exists
[ 2090.430124] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:55 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x68000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:55 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x41, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:55 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [], 0x1f9}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2090.524677] xt_nfacct: accounting object `syz1' does not exists
[ 2090.539129] xt_nfacct: accounting object `syz1' does not exists
[ 2090.558564] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:55 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x6c000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2090.650793] xt_nfacct: accounting object `syz1' does not exists
[ 2090.694016] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5414, &(0x7f00000001c0))

02:47:56 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2091.994422] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2092.050243] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2092.394328] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2092.394343] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2094.074447] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2094.074474] Bluetooth: hci1: command 0xfc11 tx timeout
[ 2094.095737] Bluetooth: hci1: Frame reassembly failed (-84)
02:47:59 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x9)
ioctl$TIOCSETD(r0, 0x5413, &(0x7f00000001c0))

02:47:59 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [], 0x210}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

02:47:59 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x74000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:59 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000000240)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote}, @timestamp={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}}}, 0x100c)

02:47:59 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x2, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2094.474187] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2094.474210] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2094.543710] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2094.561616] nfacct_mt_checkentry: 1 callbacks suppressed
[ 2094.561623] xt_nfacct: accounting object `syz1' does not exists
02:47:59 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [], 0x21e}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2094.591735] Bluetooth: hci0: Frame reassembly failed (-84)
02:47:59 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x7a000000, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

02:47:59 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x4, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

02:47:59 executing program 5:
clone(0x2000000000201500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x2001, 0x3, 0x350, 0x1e0, 0x150, 0x150, 0x1e0, 0x150, 0x2b8, 0x1e8, 0x1e8, 0x2b8, 0x1e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1e0, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}, @common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4, [], @ipv6=@mcast1, [], @ipv4=@broadcast, [], @ipv6=@remote, [], 0x23e}}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b0)
r1 = memfd_create(0x0, 0x0)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r1, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x98000003, 0x0}, 0x0, 0x8, &(0x7f0000000000))
socket$inet_icmp_raw(0x2, 0x3, 0x1)

[ 2094.695391] xt_nfacct: accounting object `syz1' does not exists
[ 2094.702560] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:47:59 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x9effffff, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c00000000010904000000000000000000000000240001801400018008000100ffffffff08000200ac1414000c00028005000100000000003c0002802c00018014850300fc02000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000000800074000000000100005800a0001"], 0x8c}}, 0x0)

[ 2094.768010] xt_nfacct: accounting object `syz1' does not exists
[ 2094.802045] xt_nfacct: accounting object `syz1' does not exists
[ 2094.847955] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
02:48:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003f00)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r2, 0x400455c8, 0x9)
ioctl$TIOCSETD(r2, 0x5415, &(0x7f00000001c0))

02:48:01 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x4, 0x21, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6}])

[ 2096.154195] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2096.154277] Bluetooth: hci1: command 0xfc11 tx timeout
[ 2096.218887] Bluetooth: hci1: Frame reassembly failed (-84)
[ 2096.633902] Bluetooth: hci0: command 0xfc11 tx timeout
[ 2096.643926] Bluetooth: hci0: Entering manufacturer mode failed (-110)
[ 2096.668271] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2098.233987] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[ 2098.240877] ==================================================================
[ 2098.248589] BUG: KASAN: use-after-free in hci_cmd_timeout+0x1ae/0x1c0
[ 2098.255162] Read of size 2 at addr ffff8880513f2a88 by task kworker/1:1/8923
[ 2098.262325] 
[ 2098.263936] CPU: 1 PID: 8923 Comm: kworker/1:1 Not tainted 4.19.133-syzkaller #0
[ 2098.271444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2098.280788] Workqueue: events hci_cmd_timeout
[ 2098.285265] Call Trace:
[ 2098.287848]  dump_stack+0x1fc/0x2fe
[ 2098.291472]  print_address_description.cold+0x54/0x219
[ 2098.296737]  kasan_report_error.cold+0x8a/0x1c7
[ 2098.301392]  ? hci_cmd_timeout+0x1ae/0x1c0
[ 2098.305608]  __asan_report_load_n_noabort+0x8b/0xa0
[ 2098.310604]  ? hci_cmd_timeout+0x1ae/0x1c0
[ 2098.314818]  hci_cmd_timeout+0x1ae/0x1c0
[ 2098.318860]  process_one_work+0x864/0x1570
[ 2098.323081]  ? pwq_dec_nr_in_flight+0x2d0/0x2d0
[ 2098.327738]  worker_thread+0x64c/0x1130
[ 2098.331699]  ? __kthread_parkme+0xfd/0x1b0
[ 2098.335913]  ? process_one_work+0x1570/0x1570
[ 2098.340388]  kthread+0x30b/0x410
[ 2098.343738]  ? kthread_park+0x180/0x180
[ 2098.347692]  ret_from_fork+0x24/0x30
[ 2098.351388] 
[ 2098.352997] Allocated by task 8382:
[ 2098.356605]  __kmalloc_node_track_caller+0x4c/0x70
[ 2098.361517]  __alloc_skb+0xae/0x560
[ 2098.365123]  hci_prepare_cmd+0x2a/0x220
[ 2098.369073]  hci_req_add_ev+0xa2/0x1f0
[ 2098.372949]  __hci_cmd_sync+0xd0/0x1a0
[ 2098.376861]  btintel_enter_mfg+0x2a/0x90
[ 2098.380905]  ag6xx_setup+0xfc/0x790
[ 2098.384511]  hci_uart_setup+0x1b1/0x470
[ 2098.388465]  hci_dev_do_open+0x342/0x12b0
[ 2098.392603]  hci_power_on+0x101/0x4f0
[ 2098.396382]  process_one_work+0x864/0x1570
[ 2098.400594]  worker_thread+0x64c/0x1130
[ 2098.404547]  kthread+0x30b/0x410
[ 2098.407892]  ret_from_fork+0x24/0x30
[ 2098.411578] 
[ 2098.413182] Freed by task 8382:
[ 2098.416440]  kfree+0xcc/0x210
[ 2098.419526]  skb_release_data+0x6de/0x920
[ 2098.423661]  kfree_skb+0x11a/0x3d0
[ 2098.427188]  hci_dev_do_open+0xa3b/0x12b0
[ 2098.431315]  hci_power_on+0x101/0x4f0
[ 2098.435092]  process_one_work+0x864/0x1570
[ 2098.439305]  worker_thread+0x64c/0x1130
[ 2098.443261]  kthread+0x30b/0x410
[ 2098.446609]  ret_from_fork+0x24/0x30
[ 2098.450298] 
[ 2098.451914] The buggy address belongs to the object at ffff8880513f2a80
[ 2098.451914]  which belongs to the cache kmalloc-512 of size 512
[ 2098.464557] The buggy address is located 8 bytes inside of
[ 2098.464557]  512-byte region [ffff8880513f2a80, ffff8880513f2c80)
[ 2098.476244] The buggy address belongs to the page:
[ 2098.481170] page:ffffea000144fc80 count:1 mapcount:0 mapping:ffff88812c39c940 index:0x0
[ 2098.489289] flags: 0xfffe0000000100(slab)
[ 2098.493420] raw: 00fffe0000000100 ffffea000225c888 ffffea00029eb948 ffff88812c39c940
[ 2098.501288] raw: 0000000000000000 ffff8880513f2080 0000000100000006 0000000000000000
[ 2098.509150] page dumped because: kasan: bad access detected
[ 2098.514840] 
[ 2098.516445] Memory state around the buggy address:
[ 2098.521357]  ffff8880513f2980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2098.528697]  ffff8880513f2a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2098.536038] >ffff8880513f2a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2098.543371]                       ^
[ 2098.546975]  ffff8880513f2b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2098.554313]  ffff8880513f2b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2098.561647] ==================================================================
[ 2098.568981] Disabling lock debugging due to kernel taint
[ 2098.574689] Kernel panic - not syncing: panic_on_warn set ...
[ 2098.574689] 
[ 2098.582068] CPU: 1 PID: 8923 Comm: kworker/1:1 Tainted: G    B             4.19.133-syzkaller #0
[ 2098.590985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2098.600347] Workqueue: events hci_cmd_timeout
[ 2098.604834] Call Trace:
[ 2098.607422]  dump_stack+0x1fc/0x2fe
[ 2098.611049]  panic+0x26a/0x50e
[ 2098.614232]  ? __warn_printk+0xf3/0xf3
[ 2098.618102]  ? preempt_schedule_common+0x45/0xc0
[ 2098.622840]  ? ___preempt_schedule+0x16/0x18
[ 2098.627235]  ? trace_hardirqs_on+0x55/0x210
[ 2098.631538]  kasan_end_report+0x43/0x49
[ 2098.635491]  kasan_report_error.cold+0xa7/0x1c7
[ 2098.640140]  ? hci_cmd_timeout+0x1ae/0x1c0
[ 2098.644352]  __asan_report_load_n_noabort+0x8b/0xa0
[ 2098.649350]  ? hci_cmd_timeout+0x1ae/0x1c0
[ 2098.653563]  hci_cmd_timeout+0x1ae/0x1c0
[ 2098.657618]  process_one_work+0x864/0x1570
[ 2098.661842]  ? pwq_dec_nr_in_flight+0x2d0/0x2d0
[ 2098.666498]  worker_thread+0x64c/0x1130
[ 2098.670460]  ? __kthread_parkme+0xfd/0x1b0
[ 2098.674675]  ? process_one_work+0x1570/0x1570
[ 2098.679160]  kthread+0x30b/0x410
[ 2098.682507]  ? kthread_park+0x180/0x180
[ 2098.686462]  ret_from_fork+0x24/0x30
[ 2098.691629] Kernel Offset: disabled
[ 2098.695250] Rebooting in 86400 seconds..